Code Sanitization for Vulnerability Pruning and Exploitation Mitigation

Información del proyecto

CodeSan

Identificador del acuerdo de subvención: 850868

DOI

10.3030/850868

Fecha de la firma de la CE 23 Septiembre 2019

Fecha de inicio 1 Marzo 2020

Fecha de finalización 28 Febrero 2026

Financiado con arreglo a

• EXCELLENT SCIENCE - European Research Council (ERC)

Coste total

€ 1 499 970,00

Aportación de la UE

€ 1 499 970,00

Coordinado por

ECOLE POLYTECHNIQUE FEDERALE DE LAUSANNE
Switzerland

CORDIS proporciona enlaces a los documentos públicos y las publicaciones de los proyectos de los programas marco HORIZONTE.

Los enlaces a los documentos y las publicaciones de los proyectos del Séptimo Programa Marco, así como los enlaces a algunos tipos de resultados específicos, como conjuntos de datos y «software», se obtienen dinámicamente de OpenAIRE .

Resultado final

Open Research Data Pilot (1)

Data Management Plan

To create and submit a Data Management Plan

Publicaciones

Conference proceedings (37)

Seed selection for successful fuzzing

Autores: Adrian Herrera, Hendra Gunadi, Shane Magrath, Michael Norrish, Mathias Payer, Antony L. Hosking
Publicado en: Proceedings of the 30th ACM SIGSOFT International Symposium on Software Testing and Analysis, 2021, Página(s) 230-243, ISBN 9781450384599
Editor: ACM
DOI: 10.1145/3460319.3464795

Principal Kernel Analysis: A Tractable Methodology to Simulate Scaled GPU Workloads

Autores: Cesar Avalos Baddouh, Mahmoud Khairy, Roland N. Green, Mathias Payer, and Timothy G. Rogers.
Publicado en: International Symposium on Microarchitecture, 2021
Editor: ACM
DOI: 10.1145/3466752.3480100

SyzRisk: A Change-Pattern-Based Continuous Kernel Regression Fuzzer

Autores: Gwangmu Lee, Duo Xu, Solmaz Salimi, Byoungyoung Lee, Mathias Payer
Publicado en: Proceedings of the 19th ACM Asia Conference on Computer and Communications Security, Edición 38, 2024, Página(s) 1480-1494
Editor: ACM
DOI: 10.1145/3634737.3637642

Midas: Systematic Kernel TOCTTOU Protection

Autores: Atri Bhattacharyya, Uros Tesic, Mathias Payer
Publicado en: 2022
Editor: Usenix

BLURtooth: Exploiting Cross-Transport Key Derivation in Bluetooth Classic and Bluetooth Low Energy

Autores: Daniele Antonioli, Nils Tippenhauer, Kasper Rasmussen, and Mathias Payer
Publicado en: AsiaCCS - Asia Computer and Communication Security, 2022
Editor: ACM
DOI: 10.1145/3488932.3523258

ProFactory: Improving IoT Security via Formalized Protocol Customization

Autores: Fei Wang, Jianliang Wu, Yuhong Nan, Yousra Aafer, Xiangyu Zhang, Dongyan Xu, Mathias Payer
Publicado en: Security Symposium, 2022
Editor: Usenix

Too Quiet in the Library: An Empirical Study of Security Updates in Android Apps' Native Code

Autores: Sumaya Almanee, Arda Unal, Mathias Payer, Joshua Garcia
Publicado en: 2021 IEEE/ACM 43rd International Conference on Software Engineering (ICSE), 2021, Página(s) 1347-1359, ISBN 978-1-6654-0296-5
Editor: IEEE/ACM
DOI: 10.1109/icse43902.2021.00122

FuZZan: Efficient Sanitizer Metadata Design for Fuzzing

Autores: Yuseok Jeon, WookHyun Han, Nathan Burow, Mathias Payer
Publicado en: 2020
Editor: Usenix

Exploiting Android's Hardened Memory Allocator

Autores: Philipp Mao, Elias Valentin Boschung, Marcel Busch, and Mathias Payer
Publicado en: Usenix Conference on Offensive Technologies, 2024
Editor: Usenix

TEEzz: Fuzzing Trusted Applications on COTS Android Devices

Autores: Marcel Busch, Mathias Payer, Aravind Machiry, Christopher Kruegel, Giovanni Vigna, Chad Spensky
Publicado en: IEEE Symposium on Security and Privacy, 2023
Editor: IEEE

HALucinator: Firmware Re-hosting Through Abstraction Layer Emulation

Autores: Abraham A. Clements, Eric Gustafson, Tobias Scharnowski, David Fritz, Christopher Kruegel, Giovanni Vigna, Saurabh Bagchi, Mathias Payer
Publicado en: 2020
Editor: Usenix

Silent Bugs Matter: A Study of Compiler-Introduced Security Bugs

Autores: ianhao Xu, Kangjie Lu, Zhengjie Du, Zhu Ding, Linke Li, Qiushi Wu, Mathias Payer, and Bing Mao
Publicado en: Usenix Security, 2023
Editor: Usenix

PACMem: Enforcing Spatial and Temporal Memory Safety via ARM Pointer Authentication

Autores: Yuan Li, Wende Tan, Zhizheng Lv, Songtao Yang, Mathias Payer, Ying Liu, Chao Zhang
Publicado en: ACM CCS, 2022
Editor: CCS
DOI: 10.1145/3548606.3560598

Spill the TeA: An Empirical Study of Trusted Application Rollback Prevention on Android

Autores: Marcel Busch, Philipp Mao, and Mathias Payer
Publicado en: Usenix Security, 2024
Editor: Usenix

Everything is Good for Something: Counterexample-Guided Directed Fuzzing via Likely Invariant Inference

Autores: Heqing Huang, Anshunkang Zhou, Mathias Payer, Charles Zhang
Publicado en: 2024 IEEE Symposium on Security and Privacy (SP), Edición 8, 2024, Página(s) 1956-1973
Editor: IEEE
DOI: 10.1109/sp54263.2024.00142

HyperPill: Fuzzing for Hypervisor-bugs by leveraging the Hardware Virtualization Interface

Autores: Alexander Bulekov, Qiang Liu, Manuel Egele, and Mathias Payer
Publicado en: Usenix Security, 2024
Editor: Usenix

Evocatio: Conjuring Bug Capabilities from a Single PoC

Autores: Zhiyuan Jiang, Shuitao Gan, Adrian Herrera, Flavio Toffalini, Lucio Romerio, Chaojing Tang, Manuel Egele, Chao Zhang, Mathias Payer
Publicado en: ACM CCS, 2022
Editor: ACM
DOI: 10.1145/3548606.3560575

BreakMi: Reversing, Exploiting and Fixing Xiaomi Fitness Tracking Ecosystem

Autores: Marco Casagrande, Eleonora Losiouk, Mauro Conti, Mathias Payer, Daniele Antonioli
Publicado en: IACR Transactions on Cryptographic Hardware and Embedded Systems, 2022
Editor: IACR

GlobalConfusion: TrustZone Trusted Application 0-Days by Design

Autores: Marcel Busch, Philipp Mao, and Mathias Payer
Publicado en: Usenix Security, 2024
Editor: Usenix

WarpAttack: Bypassing CFI through Compiler-Introduced Double-Fetches

Autores: Jianhao Xu, Luca Di Bartolomeo, Flavio Toffalini, Bing Mao, Mathias Payer
Publicado en: IEEE Symposium on Security and Privacy, 2023
Editor: IEEE
DOI: 10.1109/sp46215.2023.00176

Designing a Provenance Analysis for SGX Enclaves

Autores: Flavio Toffalini, Mathias Payer, Jianying Zhou, and Lorenzo Cavallaro
Publicado en: Annual Computer Security Applications Conference, 2022
Editor: ACM
DOI: 10.1145/3564625.3567994

μSCOPE: A Methodology for Analyzing Least-Privilege Compartmentalization in Large Software Artifacts

Autores: Nick Roessler; Lucas Atayde; Imani Palmer; Derrick McKee; Jai Pandey; Vasileios P. Kemerlis; Mathias Payer; Adam Bates; Jonathan M. Smith; André DeHon; Nathan Dautenhahn
Publicado en: RAID, Edición 1, 2021
Editor: ACM
DOI: 10.1145/3471621.3471839

GLeeFuzz: Fuzzing WebGL Through Error-Message-Guided Mutation

Autores: Hui Peng, Zhihao Yao, Ardalan Amiri Sani, Dave (Jing) Tian, Mathias Payer
Publicado en: Usenix Security, 2023
Editor: Usenix

Gramatron: effective grammar-aware fuzzing

Autores: Prashast Srivastava, Mathias Payer
Publicado en: Proceedings of the 30th ACM SIGSOFT International Symposium on Software Testing and Analysis, 2021, Página(s) 244-256, ISBN 9781450384599
Editor: ACM
DOI: 10.1145/3460319.3464814

Igor: Crash Deduplication Through root-Cause Clustering

Autores: Zhiyuan Jiang, Xiyue Jiang, Ahmad Hazimeh, Chaojing Tang, Chao Zhang, and Mathias Payer
Publicado en: 2021
Editor: ACM
DOI: 10.1145/3460120.3485364

Code Specialization through Dynamic Feature Observation

Autores: Priyam Biswas, Nathan Burow, Mathias Payer
Publicado en: Proceedings of the Eleventh ACM Conference on Data and Application Security and Privacy, 2021, Página(s) 257-268, ISBN 9781450381437
Editor: ACM
DOI: 10.1145/3422337.3447844

ViDeZZo: Dependency-aware Virtual Device Fuzzing

Autores: Qiang Liu, Flavio Toffalini, Yajin Zhou, Mathias Payer
Publicado en: IEEE International Symposium on Security and Privacy, 2023, 2023
Editor: IEEE
DOI: 10.1109/sp46215.2023.00136

The Taming of the Stack: Isolating Stack Data from Memory Errors

Autores: Kaiming Huang, Yongzhe Huang, Mathias Payer, Zhiyun Qian, Jack Sampson, Gang Tan, Trent Jaeger
Publicado en: Network and Distributed Systems Symposium, 2022
Editor: Internet Society
DOI: 10.14722/ndss.2022.23060

ARMore: Pushing Love Back Into Binaries

Autores: Luca Di Bartolomeo, Hossein Moghaddas, and Mathias Payer
Publicado en: Usenix Security, 2023
Editor: Usenix

SURGEON: Performant, Flexible and Accurate Re-Hosting via Transplantation

Autores: Florian Hofhammer, Marcel Busch, Qinying Wang, Manuel Egele, Mathias Payer
Publicado en: Workshop on Binary Analysis Research, 2024
Editor: ISOC
DOI: 10.14722/bar.2024.23011

USBFuzz: A Framework for Fuzzing USB Drivers by Device Emulation

Autores: Hui Peng, Mathias Payer
Publicado en: 2020
Editor: Usenix

LIGHTBLUE: Automatic Profile-Aware Debloating of Bluetooth

Autores: Jianliang Wu, Ruoyu Wu, Daniele Antonioli, Mathias Payer, Nils Ole Tippenhauer, Dongyan Xu, Dave (Jing) Tian, Antonio Bianchi
Publicado en: 2021
Editor: Usenix

Preventing Kernel Hacks with HAKCs

Autores: Derrick McKee, Yianni Giannaris, Carolina Ortega Perez, Howard Shrobe, Mathias Payer, Hamed Okhravi, Nathan Burow
Publicado en: Network and Distributed Systems Symposium, 2022
Editor: Internet Society
DOI: 10.14722/ndss.2022.24026

SyzTrust: State-aware Fuzzing on Trusted OS Designed for IoT Devices

Autores: Qinying Wang, Boyu Chang, Shouling Ji, Yuan Tian, Xuhong Zhang, Binbin Zhao, Gaoning Pan, Chenyang Lyu, Mathias Payer, Wenhai Wang, Raheem Beyah
Publicado en: 2024 IEEE Symposium on Security and Privacy (SP), 2024, Página(s) 2310-2387
Editor: IEEE
DOI: 10.1109/sp54263.2024.00070

On the Insecurity of Vehicles Against Protocol-Level Bluetooth Threats

Autores: Daniele Antonioli, Mathias Payer
Publicado en: Workshop On Offensive Technologies, 2022
Editor: IEEE

Minerva: Browser API Fuzzing with Dynamic Mod-Ref Analysis

Autores: Chijin Zhou, Quan Zhang, Mingzhe Wang, Lihua Guo, Jie Liang, Zhe Liu, Mathias Payer, Yu Jiang
Publicado en: FSE Foundations of Software Engineering, 2022
Editor: ACM

One Fuzz Doesn't Fit All: Optimizing Directed Fuzzing via Target-tailored Program State Restriction

Autores: Prashast Srivastava, Stefan Nagy, Matthew Hicks, Antonio Bianchi, and Mathias Payer
Publicado en: Annual Computer Security Applications Conference, 2022
Editor: ACM
DOI: 10.1145/3564625.3564643

Peer reviewed articles (2)

Magma

Autores: Ahmad Hazimeh, Adrian Herrera, Mathias Payer
Publicado en: Proceedings of the ACM on Measurement and Analysis of Computing Systems, Edición 4/3, 2020, Página(s) 1-29, ISSN 2476-1249
Editor: ACM
DOI: 10.1145/3428334

<scp>DatAFLow</scp> : Toward a Data-Flow-Guided Fuzzer

Autores: Adrian Herrera, Mathias Payer, Antony L. Hosking
Publicado en: ACM Transactions on Software Engineering and Methodology, Edición 32, 2023, Página(s) 1-31, ISSN 1049-331X
Editor: Association for Computing Machinary, Inc.
DOI: 10.1145/3587156