Automatic hardening against dependability and security software bugs [Elektronische Ressource] / eingereicht von Martin Süßkraut

Automatic Hardening againstDependability and Security SoftwareBugsDissertationzur Erlangung des akademischen GradesDoktoringenieur (Dr.-Ing.)vorgelegt an derTechnischen Universitat DresdenFakultat Informatikeingereicht vonDipl.-Inf. Martin Su krautgeboren am 08.01.1979 in Halle (Saale)GutachterProf. Christof Fetzer, PhD, Technische Universit at DresdenProf. George Candea, PhD, Ecole Polytechnique Federale de LausanneTag der Verteidigung: 21. Mai 2010Dresden Juni 2010AbstractIt is a fact that software has bugs. These bugs can lead to failures. Especially dependabil-ity and security failures are a great threat to software users. This thesis introduces fournovel approaches that can be used to automatically harden software at the user’s site.Automatic hardening removes bugs from already deployed software. All four approachesare automated, i.e., they require little support from the end-user. However, some sup-port from the software developer is needed for two of these approaches. The presentedapproaches can be grouped into error toleration and bug removal. The two error tol-eration approaches are focused primarily on fast detection of security errors. When anerror is detected it can be tolerated with well-known existing approaches. The other twoapproaches are bug removal approaches. They remove dependability bugs from alreadydeployed software.