Show us your Project @ ESUG2024: Security cards

esug 54 views 18 slides Oct 14, 2024
Slide 1
Slide 1 of 18
Slide 1
1
Slide 2
2
Slide 3
3
Slide 4
4
Slide 5
5
Slide 6
6
Slide 7
7
Slide 8
8
Slide 9
9
Slide 10
10
Slide 11
11
Slide 12
12
Slide 13
13
Slide 14
14
Slide 15
15
Slide 16
16
Slide 17
17
Slide 18
18

About This Presentation

Show us your Project @ ESUG2024: "Security cards"

PDF: http://archive.esug.org/ESUG2024/show-us-your-project/Imen-Show-us-your-project-Security-cards.pdf


Slide Content

Security cards
Imen Sayar, Mohamed Oukas

Detecting vulnerabilities in an application
2

4

Vulnerabilities detection

eect oes

Moose-Security

Vulnerabilities detectio

トー

Moose-Security

n

te

le

de

1:

fe citron] (e com tone)
CO

_Anonymous(VirtualFile).open

© _AnonymousiVirtualFile).open @ _Anonymous(VirtualFile).open

Now, let’s try with two versions!
8

Oo
N ^ Removed entities

Moose model VI

ンプ Moose-Security N
ete
Moose model V2
Added entities

10

fconmonsCollections1 := MooseModel root
|commonscollections2 := MooseModel root

diffModels := SEDiffBetweenTwoModels new.

[diffModels baseModel: commonsCollections1 targetModel:
commonsCollections2.

12

13

And we have also detected Association changes :-)
14

o e. o 2
Follow Freeze Highlight. Bus: Defaut

Architectural map [ diff assosChanges]
ビス

© RosvactSerazabeColectionDecorator> Serazate
(© AostracteraizableistDecorator-»Sriazable © AbstractSerazableSetDecorator > Serlzabie
(© BoundedFioButer> Serializable @ Class->Serialzable @ FuedSizeMap > Seralzabe

(© FinedSieSortedMap > Seraizable © Fat2Map->Seriaizabl @ boap > Serializable

(© Lstorderedap > Seriaizable @ MapBackedSet > Seriaizable@ HUE > Serie
(© PreccatedMap-»Seriazable © ReerenceldentiyiMap > Seriaizable

(© Reterencelap > Serializable @ Singletonlap > Serializable O SingeionValues > Seiatiable
(© Snchraniedcolection > Serisizable. @ TedMapEnty > Seralizbie

(© Transtormedap->Seriazable @ TranstormedPrediate > Serializable

(© UndoundedFtobuter>Seiizable O UnmodifibleBag > Seriiable

{© UnmodifabeButer Serializable © Unmodiabelap > Seriazble

(© UnmodifableOrdcedlap > Sersizabe @ UnmoditabeSortedBng > Serializable

(© UnmodifableSotecMap > Serializable © UnmodiiableSoredSet > Seritizabie

O testseriieDeseriizeCheckComparatr > Seriizable

© testserilaeDeseiaizeThenCompore > Seriazable

© testseriaizeDeseriaizeTHenCompare-> Seriizable

04
Export Settings Inspect

+
Propagate



?
Hep

15

o

Architectural map [diff remove] 2

oO 2 D. SY « +
opt ea 배어 데데 9 15 1

@ Hashtable -> Serializable

¡0 Noop lily

一 一 一 一 一

@ Noop -> Serializable

O StringTolnteger -> Serializable

Architectural map {dif remove]

0 © o 2 S 1
Felon Free HN Bor Ot pot Sng apt pe tp

© Noop M

Noop © transform

© Noop Mi