Automatic Exploit Generation.
The article discusses the importance of finding security-critical computer bugs, which are software errors, flaws, or failures in a computer program or system, before they are exploited by computer hackers and cyberterrorists. Topics include the prevalence of computer bugs, the automatic exploit gen...
| Publicado en: | Communications of the ACM Vol. 57; no. 2; pp. 74 - 85 |
|---|---|
| Autores principales: | , , , , , |
| Formato: | Artículo |
| Publicado: |
Association for Computing Machinery
Feb2014
|
| Materias: | |
| Acceso en línea: | Ver este registro en EBSCOhost |
| fields | @attributes: recordID: 1 pdfLink: plink: https://search.ebscohost.com/login.aspx?direct=true&db=hlh&AN=94282356&site=ehost-live header: @attributes: shortDbName: hlh uiTerm: 94282356 longDbName: Humanities International Complete uiTag: AN controlInfo: bkinfo: jinfo: jid: 00010782 ACM jtl: Communications of the ACM issn: 00010782 maglogo: N pubinfo: dt: Feb2014 vid: 57 iid: 2 pid: 68 pub: Association for Computing Machinery artinfo: ui: 94282356 10.1145/2560217.2560219 ppf: 74 ppct: 11 formats: tig: atl: Automatic Exploit Generation. aug: au: AVGERINOS, THANASSIS SANG KIL CHA REBERT, ALEXANDRE SCHWARTZ, EDWARD J. WOO, MAVERICK BRUMLEY, DAVID affil: Systems Scientist in CyLab at Carnegie Mellon University, Pittsburgh, PA. Assistant Professor, Electrical and Computer Engineering Department at Carnegie Mellon University, Pittsburgh, PA, and CEO of ForAllSecure.com. su: Cyberterrorism Counterterrorism Debugging Defect tracking (Computer software development) Computer software testing Computer network security Software verification sug: subj: Cyberterrorism Counterterrorism Debugging Defect tracking (Computer software development) Computer software testing Computer network security Software verification ab: The article discusses the importance of finding security-critical computer bugs, which are software errors, flaws, or failures in a computer program or system, before they are exploited by computer hackers and cyberterrorists. Topics include the prevalence of computer bugs, the automatic exploit generation (AEG) research program, which challenges researchers to both automatically find bugs and generate working exploits, the author's verification approach to AEG, and the advantages of a verification-based approach, such as the guarantee of an automatically generated exploit that provides proof that the reported bug is security-critical. INSET: History of AEG. pubtype: Periodical doctype: Article src: R language: English refInfo: copyright: @attributes: flag: Y dt: @attributes: year: 2014 holdings: @attributes: islocal: N |
|---|