Skip to content

Commit

Permalink
APIs
Browse files Browse the repository at this point in the history
  • Loading branch information
ibojanova committed May 14, 2024
1 parent e89b5d1 commit b18b1e4
Show file tree
Hide file tree
Showing 7 changed files with 16 additions and 16 deletions.
4 changes: 2 additions & 2 deletions content/en/Info/APIs/BF API.md
Original file line number Diff line number Diff line change
Expand Up @@ -27,9 +27,9 @@ To filter the BF taxonomy by BF taxon values --- i.e., ClassType, Class, Bug, Fa
</br>
CITATION </br>
_____________________________________________________________</br></br>
Irena Bojanova, NIST Bugs Framework (BF) API, Accessed: <span id="currentDate"></span>. [Online]. Available: [https://usnistgov.github.io/BF/info/apis/bf-api](https://usnistgov.github.io/BF/info/apis/bf-api).

Bojanova, I. Bugs Framework (BF) API, NIST. Accessed: <span id="currentDate"></span>. [Online]. Available: [https://usnistgov.github.io/BF/info/apis/bf-api](https://usnistgov.github.io/BF/info/apis/bf-api).
</br></br>
//more explanations to be added//

<!-- The BF _MEM ClassType can be accesses from here: [https://samate.nist.gov/BF/api/_MEM/](https://samate.nist.gov/BF/api/_mem/) -->
<!-- samate-internal.nist.gov/BF/api/cve/CVE-111 -->
Expand Down
5 changes: 1 addition & 4 deletions content/en/Info/APIs/BF Backwards API.md
Original file line number Diff line number Diff line change
Expand Up @@ -30,8 +30,5 @@ Could be in JSON format:
</br>
CITATION </br>
_____________________________________________________________</br></br>
Irena Bojanova, NIST Bugs Framework (BF) Backwards API, Accessed: <span id="currentDate"></span>. [Online]. Available: [https://usnistgov.github.io/BF/info/apis/bf-backwards-api](https://usnistgov.github.io/BF/info/apis/bf-backwards-api).


//explanations to be added//

Bojanova, I., Bugs Framework (BF) -- BF Backwards API, NIST. Accessed: <span id="currentDate"></span>. [Online]. Available: [https://usnistgov.github.io/BF/info/apis/bf-backwards-api](https://usnistgov.github.io/BF/info/apis/bf-backwards-api).
5 changes: 2 additions & 3 deletions content/en/Info/APIs/BFCVE API.md
Original file line number Diff line number Diff line change
Expand Up @@ -31,9 +31,8 @@ BFCVE could be quesried alsby by programming language, CVSS score (//to be added
</br>
CITATION </br>
_____________________________________________________________</br></br>
Irena Bojanova, NIST Bugs Framework (BF) API, Accessed: <span id="currentDate"></span>. [Online]. Available: [https://usnistgov.github.io/BF/info/apis/bf-api](https://usnistgov.github.io/BF/info/apis/bf-api).
</br></br>
//more explanations to be added//

Bojanova, I., Bugs Framework (BF) -- BFCVE API, NIST. Accessed: <span id="currentDate"></span>. [Online]. Available: [https://usnistgov.github.io/BF/info/apis/bf-api](https://usnistgov.github.io/BF/info/apis/bf-api).



Expand Down
9 changes: 8 additions & 1 deletion content/en/Info/APIs/BFCWE API.md
Original file line number Diff line number Diff line change
Expand Up @@ -7,4 +7,11 @@ title: "BFCWE API"

Start on BFCWE Dataset: [https://github.com/ibojanova/BFCWE-Dataset](https://github.com/ibojanova/BFCWE-Dataset)

//BFCWE API to be added//
//more to be added//

</br>
CITATION </br>
_____________________________________________________________</br></br>

Bojanova, I., Bugs Framework (BF) -- BFCWE API, NIST. Accessed: <span id="currentDate"></span>. [Online]. Available: [https://usnistgov.github.io/BF/info/apis/bf-api](https://usnistgov.github.io/BF/info/apis/bf-api).
</br></br>
3 changes: 0 additions & 3 deletions content/en/Info/APIs/BFVul API.md
Original file line number Diff line number Diff line change
Expand Up @@ -6,6 +6,3 @@ title: "BFVul API"
# BFVul API <br/>_`Irena Bojanova, PI & Lead, NIST Bugs Framework (BF), 2014 – ~~~~`_

//to be added//



4 changes: 2 additions & 2 deletions content/en/Info/BF Classes/_MEM/Model.md
Original file line number Diff line number Diff line change
Expand Up @@ -8,10 +8,10 @@ Each memory related bug or weakness involves one memory operation. Each _operati

Memory bugs could be introduced at any of the phases of an object’s lifecycle: _address formation_, _allocation_, _use_, and _deallocation_. The phases correspond to the BF memory bugs classes: Memory Addressing Bugs (MAD), Memory Management Bugs (MMN) -- cover both the Memory Allocation (MAL) and the Memory Deallocation (MDL phases), and Memory Use Bugs (MUS).

The BF Memory Bugs Model helps identify where in these phases bugs could occur (Figure 1). The phases correspond to the BF memory bugs classes: Memory Addressing Bugs (MAD), Memory Allocation Bugs (MAL), Memory Use Bugs (MUS), and , Memory Deallocation Bugs (MDL). All possible memory operations are grouped by phase. The presented operations flow helps in identifying possible chains of bugs/weaknesses. <br/><br/>_`For simplicity, BF now combines MAL and MDL in one Memory Management Bugs (MMN) class.`_
The BF Memory Bugs Model helps identify where in these phases bugs could occur (Figure 1). The phases correspond to the BF memory bugs classes: Memory Addressing Bugs (MAD), Memory Allocation Bugs (MAL), Memory Use Bugs (MUS), and , Memory Deallocation Bugs (MDL). All possible memory operations are grouped by phase. The presented operations flow helps in identifying possible chains of bugs/weaknesses. <br/><br/>_`For simplicity, BF combines the MAL and MDL execution phases in one Memory Management Bugs (MMN) class.`_
<br/><br/>

{{< img src="images/BF Models/_MEM Model.svg" caption="Figure 1. BF Memory Bugs Model. Comprises the MAD, MAL, MUS, and MDL phases, corresponding to the BF classes MAD, MMN (combining the MAL and MDL phases), and MUS. Shows the memory operations flow: blue arrows – the main flow; green arrows – flow for allocation at a specific address; red – extra flow in case of reallocation. (Note that for simplicity, BF combines MAL and MDL in one Memory Management Bugs (MMN) class)" >}}
{{< img src="images/BF Models/_MEM Model.svg" caption="Figure 1. BF Memory Bugs Model. Comprises the MAD, MAL, MUS, and MDL phases, corresponding to the BF classes MAD, MMN (combining the MAL and MDL phases), and MUS. Shows the memory operations flow: blue arrows – the main flow; green arrows – flow for allocation at a specific address; red – extra flow in case of reallocation." >}}
<br/>
The operations under MAD (Figure 1) are on forming or modifying a pointer: _Initialize_, _Reposition_, and _Reassign_. Bugs in pointer initialization could result in pointers to meaningless objects. Moving a pointer via a bugged Reposition could get it pointing outside the object bounds. Bugs in Reassign could connect a pointer to a wrong object.

Expand Down
2 changes: 1 addition & 1 deletion content/en/Info/BF Classes/_MEM/_index.md
Original file line number Diff line number Diff line change
Expand Up @@ -7,4 +7,4 @@ title: "_MEM"

# BF Memory Corruption/Disclosure (_MEM) Class Type <br/> _`Irena Bojanova, PI & Lead, NIST Bugs Framework (BF), 2014 – ~~~~`_

Please use the Taxonomy menu on the left or the following links to browse the [BF Memory (_MEM) Model](BF/info/bf-classes/_mem/model) and [Memory Addressing Bugs (MAD)](/BF/info/bf-classes/_mem/mad/), [Memory Management Bugs (MMN)](/BF/info/bf-classes/_mem/mmn/), and [Memory Use Bugs (MUS)](/BF/info/bf-classes/_mem/mus/) classes.
Please use the Taxonomy menu on the left or the following links to browse the [BF Memory (_MEM) Model](/BF/info/bf-classes/_mem/model/) and [Memory Addressing Bugs (MAD)](/BF/info/bf-classes/_mem/mad/), [Memory Management Bugs (MMN)](/BF/info/bf-classes/_mem/mmn/), and [Memory Use Bugs (MUS)](/BF/info/bf-classes/_mem/mus/) classes.

0 comments on commit b18b1e4

Please sign in to comment.