Towards Analyzing Security-Critical Software During Development

We describe an approach and tool for analyzing the vulnerability of software applications to anomalous events and malicious threats during software development. Traditionally, security analysis has been applied at the network system level, after release, using tiger team approaches. After a successful tiger team penetration, specific system vulnerabilities are patched. We make a case for applying software engineering analysis techniques that have proven successful in the software safety arena to security-critical software code. This work is based on the generally held belief that a large proportion of security violations result from errors introduced during software development. Our methodology employs software fault injection and automatic input generation to force anomalous program states while a piece of software is executing, in order to determine where it is most vulnerable. A software developer or security analyst can specify what constitutes a security policy violation for the s..