Registered user since Mon 21 Jan 2019
Contributions
In this talk, I’ll discuss automated testing, verification, and repair techniques that establish a robust foundation for building secure software systems. We’ll begin by exploring security concepts, demystifying traditional notions and vulnerabilities unique to (low-level) software systems. Building on this, we’ll dive into cutting-edge methods, covering state-of-the-art testing, verification, and repair techniques. This dynamic spectrum spans fuzzing, model checking, constraint programming, and abstract interpretation for vulnerability detection using ESBMC; we’ll also touch on leveraging large language models for root cause analysis and program repair using ChatGPT. Lastly, I’ll showcase recent achievements highlighting a hybrid approach for safeguarding against embedded software’s memory safety and concurrency vulnerabilities. This forward-looking combined approach employs a logic-based automated reasoning framework as its main ingredient, thoughtfully examining search, learning, memory, and parallelization aspects. Throughout the talk, practical examples will bring concepts to life, spanning scenarios such as inspecting firmware security vulnerabilities in modern processors and ensuring the integrity of communication protocols.
Link to publicationMost Influential Papers (MIP)
Wed 13 Sep 2023 08:30 - 08:42 at Room C - MIP awards Chair(s): Myra Cohen