Detecting Information Disclosure Vulnerability in Software Architectures Using Alloy
摘要
Information disclosure vulnerabilities allow attackers to access sensitive information in applications, posing significant threats in many sectors. These vulnerabilities often originate in the modeling and programming stages. This paper addresses the detection of vulnerabilities in component-based models at the modeling stage. We propose a method based on the Alloy model checker for specifying software models and verifying their correctness. Our approach involves specifying reusable models of communication patterns. We show that the method is able to detect vulnerabilities and provide information for their mitigation.