Into the Black Box: A Case Study in Obtaining Visibility into Commercial Software
We were recently involved with a project that faced an interesting and not uncommon dilemma. The project needed to programmatically extract private keys and digital certificates from the Netscape Communicator v4.5 database. Netscape documentation was inadequate for us to figure out how to do this. As it turns out, this inadequacy was intentional-Netscape was concerned that releasing this information might possibly violate export control laws concerning encryption technology. Since our interest was in building a system and not exporting cryptographic technology, we decided to further investigate how to achieve our objectives even without support from Netscape. We restricted ourselves to the use of Netscape-provided code and documentation, and to information available on the Web. Our objective was to build our system, and to provide feedback to Netscape on how to engineer their product to provide the capability that we (and others) need, while not making the product vulnerable or expose the vendor to violations of export control laws. This paper describes our experiences peering "into the black box."
Technical Note
CMU/SEI-99-TN-010
March 1999
Cite This Report
SEI:
Plakosh, Daniel; Hissam, Scott; & Wallnau, Kurt. Into the Black Box: A Case Study in Obtaining Visibility into Commercial Software (CMU/SEI-99-TN-010). Software Engineering Institute, Carnegie Mellon University, 1999. http://www.sei.cmu.edu/library/abstracts/reports/99tn010.cfm
IEEE:
D. Plakosh, S. Hissam, and K. Wallnau, "Into the Black Box: A Case Study in Obtaining Visibility into Commercial Software," Software Engineering Institute, Carnegie Mellon University, Pittsburgh, Pennsylvania, Technical Note CMU/SEI-99-TN-010, 1999. http://www.sei.cmu.edu/library/abstracts/reports/99tn010.cfm
APA:
Plakosh, D., Hissam, S., & Wallnau, K. (1999). Into the Black Box: A Case Study in Obtaining Visibility into Commercial Software (CMU/SEI-99-TN-010). Retrieved May 25, 2013, from the Software Engineering Institute, Carnegie Mellon University website: http://www.sei.cmu.edu/library/abstracts/reports/99tn010.cfm
CHI:
Plakosh, Daniel, Scott Hissam, and Kurt Wallnau. Into the Black Box: A Case Study in Obtaining Visibility into Commercial Software (CMU/SEI-99-TN-010). Pittsburgh, PA: Software Engineering Institute, Carnegie Mellon University, 1999. http://www.sei.cmu.edu/library/abstracts/reports/99tn010.cfm
MLA:
Plakosh, D., Hissam, S., & Wallnau, K. 1999. Into the Black Box: A Case Study in Obtaining Visibility into Commercial Software (Technical Report CMU/SEI-99-TN-010). Pittsburgh: Software Engineering Institute, Carnegie Mellon University. http://www.sei.cmu.edu/library/abstracts/reports/99tn010.cfm
Find Us Here
Share This Page
For more information
