engleski

Deterring Attackers by Injecting Unexploitable Bugs

This thesis describes the original Chaff Bugs paper and the LAVA project that it used. In the process, common methods of automated vulnerability discovery and the need for a ground-truth bug corpora that can be used to compare and evaluate different tools are also described. A description of how LAVA solves that problem is provided. The thesis provides commentary and ideas for implementations of additional unexploitable bug classes. Implementations of malloc off by one bug injection and unexploitable printf leaks are described and provided as part of the thesis.

security, vulnerability, injection, chaff, unexploitable, bugs

nije evidentirano