| Title | Establishing Trust in Binary Analysis in Software Development and Applications |
| Publication Type | Conference Paper |
| Year of Publication | 2020 |
| Authors | Calhoun, C. S., Reinhart, J., Alarcon, G. A., Capiola, A. |
| Conference Name | 2020 IEEE International Conference on Human-Machine Systems (ICHMS) |
| Date Published | sep |
| Keywords | Binary Analysis, binary analysis techniques, binary analysis tools, binary code, binary code behavior, binary code components, Binary codes, binary component, binary release metadata, computer security, data loss, Human Behavior, human trust, implementation risk assessment, knowledge acquisition, knowledge elicitations, Libraries, pubcrawl, security of data, security vulnerability minimization, Software, Software development, software engineering, software programmer trust, source security, Standards, Tools, Trust, Trusted Computing, vulnerability reports |
| Abstract | The current exploratory study examined software programmer trust in binary analysis techniques used to evaluate and understand binary code components. Experienced software developers participated in knowledge elicitations to identify factors affecting trust in tools and methods used for understanding binary code behavior and minimizing potential security vulnerabilities. Developer perceptions of trust in those tools to assess implementation risk in binary components were captured across a variety of application contexts. The software developers reported source security and vulnerability reports provided the best insight and awareness of potential issues or shortcomings in binary code. Further, applications where the potential impact to systems and data loss is high require relying on more than one type of analysis to ensure the binary component is sound. The findings suggest binary analysis is viable for identifying issues and potential vulnerabilities as part of a comprehensive solution for understanding binary code behavior and security vulnerabilities, but relying simply on binary analysis tools and binary release metadata appears insufficient to ensure a secure solution. |
| DOI | 10.1109/ICHMS49158.2020.9209473 |
| Citation Key | calhoun_establishing_2020 |
Establishing Trust in Binary Analysis in Software Development and Applications