{"id":{"repo_id":"uiuc","oai_identifier":"oai:www.ideals.illinois.edu:2142/18413"},"canonical_url":"https://search.dev.ndltd.org/etd/uiuc/oai:www.ideals.illinois.edu:2142/18413","repository":{"repo_id":"uiuc","name":"University of Illinois - Urbana-Champaign","base_url":"https://www.ideals.illinois.edu/oai-pmh"},"display":{"title":"Security on demand","abstract":"\"Security experts generally believe that, \"\"security cannot be added on, it must be designed from the beginning.\"\" This dissertation shows that retrofitting security does not need to be a massive reengineering effort, nor does it need to be ad hoc. Security solutions can be added through systematic, general purpose security-oriented program transformations. We describe a catalog of security-oriented program transformations; so far the catalog contains thirty seven transformations. These security-oriented program transformations improve the traditional approaches of security engineering and keep software secure in the face of new security threats. Security-oriented program transformations are not silver bullets; using them requires skill and knowledge of the program being transformed. They are instead power tools that make it easier to add security to existing systems replacing the point solution of a typical patch with a more systematic removal of a vulnerability. When appropriate tools are built and the program transformations are easy enough to apply, then they will allow a software developer to add 'security on demand'.\"","abstract_html":""Security experts generally believe that, ""security cannot be added on, it must be designed from the beginning."" This dissertation shows that retrofitting security does not need to be a massive reengineering effort, nor does it need to be ad hoc. Security solutions can be added through systematic, general purpose security-oriented program transformations. We describe a catalog of security-oriented program transformations; so far the catalog contains thirty seven transformations. These security-oriented program transformations improve the traditional approaches of security engineering and keep software secure in the face of new security threats. Security-oriented program transformations are not silver bullets; using them requires skill and knowledge of the program being transformed. They are instead power tools that make it easier to add security to existing systems replacing the point solution of a typical patch with a more systematic removal of a vulnerability. When appropriate tools are built and the program transformations are easy enough to apply, then they will allow a software developer to add 'security on demand'."","abstract_has_math":false,"creators":["Hafiz, Munawar"],"institution":"University of Illinois at Urbana-Champaign","degree_name":"Ph.D.","degree_level":"Dissertation","degree_discipline":"Computer Science","degree_department":null,"school":null,"contributors":["Johnson, Ralph E.","Gunter, Carl A.","Marinov, Darko","Garlan, David"],"advisors":[],"committee_chairs":[],"committee_members":[],"year":2011,"date_issued":"2011-01-14T22:49:49Z","date_published":"2011-01-14T22:49:49Z","updated_at":"2026-07-22T22:25:11Z","subjects":["Security","Program Transformation"],"languages":["en"],"rights":["Copyright 2010 Munawar Hafiz"],"rights_urls":[],"identifier_entries":[]},"links":{"outbound_url":"http://hdl.handle.net/2142/18413","outbound_label":"Handle","outbound_source":"dc:identifier"},"metadata_groups":[{"id":"people","label":"People","entries":[{"key":"dc:contributor","label":"Contributor","values":["Johnson, Ralph E.","Gunter, Carl A.","Marinov, Darko","Garlan, David"]},{"key":"dc:creator","label":"Author","values":["Hafiz, Munawar"]}]},{"id":"academic_context","label":"Academic Context","entries":[{"key":"dc:date","label":"Dc Date","values":["2011-01-14T22:49:49Z","2010-12"]},{"key":"thesis:degree_discipline","label":"Discipline","values":["Computer Science"]},{"key":"thesis:degree_level","label":"Degree Level","values":["Dissertation"]},{"key":"thesis:degree_name","label":"Degree Name","values":["Ph.D."]},{"key":"thesis:institution_name","label":"Thesis Institution Name","values":["University of Illinois at Urbana-Champaign"]}]},{"id":"subjects_keywords","label":"Subjects and Keywords","entries":[{"key":"dc:subject","label":"Dc Subject","values":["Security","Program Transformation"]}]},{"id":"language_rights","label":"Language and Rights","entries":[{"key":"dc:language","label":"Dc Language","values":["en"]},{"key":"dc:rights","label":"Dc Rights","values":["Copyright 2010 Munawar Hafiz"]}]},{"id":"identifiers","label":"Identifiers","entries":[{"key":"dc:identifier","label":"Identifier","values":["http://hdl.handle.net/2142/18413"]}]},{"id":"additional","label":"Additional Metadata","entries":[{"key":"dc:description","label":"Description","values":["\"Security experts generally believe that, \"\"security cannot be added on, it must be designed from the beginning.\"\" This dissertation shows that retrofitting security does not need to be a massive reengineering effort, nor does it need to be ad hoc. Security solutions can be added through systematic, general purpose security-oriented program transformations. We describe a catalog of security-oriented program transformations; so far the catalog contains thirty seven transformations. These security-oriented program transformations improve the traditional approaches of security engineering and keep software secure in the face of new security threats. Security-oriented program transformations are not silver bullets; using them requires skill and knowledge of the program being transformed. They are instead power tools that make it easier to add security to existing systems replacing the point solution of a typical patch with a more systematic removal of a vulnerability. When appropriate tools are built and the program transformations are easy enough to apply, then they will allow a software developer to add 'security on demand'.\"","Item withdrawn by Mark Zulauf (zulauf@illinois.edu) on 2010-10-12T13:21:03Z Item was in collections: University of Illinois Theses & Dissertations (ID: 1) No. of bitstreams: 1 Hafiz_Munawar.pdf: 3496012 bytes, checksum: 55dcc213ab3da470df67a259e1ba915c (MD5)","Made available in DSpace on 2011-01-14T22:49:49Z (GMT). No. of bitstreams: 2 Hafiz_Munawar.pdf: 3707908 bytes, checksum: 66e7dc225de8d3aa5693185dce20a012 (MD5) license.txt: 4061 bytes, checksum: 0e7b757c7916916fe764fb322d35dc0f (MD5)"]},{"key":"dc:title","label":"Title","values":["Security on demand"]}]}],"canonical_facts":{"dc:contributor":["Johnson, Ralph E.","Gunter, Carl A.","Marinov, Darko","Garlan, David"],"dc:creator":["Hafiz, Munawar"],"dc:date":["2011-01-14T22:49:49Z","2010-12"],"dc:description":["\"Security experts generally believe that, \"\"security cannot be added on, it must be designed from the beginning.\"\" This dissertation shows that retrofitting security does not need to be a massive reengineering effort, nor does it need to be ad hoc. Security solutions can be added through systematic, general purpose security-oriented program transformations. We describe a catalog of security-oriented program transformations; so far the catalog contains thirty seven transformations. These security-oriented program transformations improve the traditional approaches of security engineering and keep software secure in the face of new security threats. Security-oriented program transformations are not silver bullets; using them requires skill and knowledge of the program being transformed. They are instead power tools that make it easier to add security to existing systems replacing the point solution of a typical patch with a more systematic removal of a vulnerability. When appropriate tools are built and the program transformations are easy enough to apply, then they will allow a software developer to add 'security on demand'.\"","Item withdrawn by Mark Zulauf (zulauf@illinois.edu) on 2010-10-12T13:21:03Z Item was in collections: University of Illinois Theses & Dissertations (ID: 1) No. of bitstreams: 1 Hafiz_Munawar.pdf: 3496012 bytes, checksum: 55dcc213ab3da470df67a259e1ba915c (MD5)","Made available in DSpace on 2011-01-14T22:49:49Z (GMT). No. of bitstreams: 2 Hafiz_Munawar.pdf: 3707908 bytes, checksum: 66e7dc225de8d3aa5693185dce20a012 (MD5) license.txt: 4061 bytes, checksum: 0e7b757c7916916fe764fb322d35dc0f (MD5)"],"dc:identifier":["http://hdl.handle.net/2142/18413"],"dc:language":["en"],"dc:rights":["Copyright 2010 Munawar Hafiz"],"dc:subject":["Security","Program Transformation"],"dc:title":["Security on demand"],"thesis:degree_discipline":["Computer Science"],"thesis:degree_level":["Dissertation"],"thesis:degree_name":["Ph.D."],"thesis:institution_name":["University of Illinois at Urbana-Champaign"]},"updated_at":"2026-07-22T22:25:11Z"}