Скачать или смотреть Combined Analysis for Source Code and Binary Code for Software Assurance

Dr. Will Klieber, principle investigator, presents "Towards Incremental and Compositionally Verifiable Security for CHIC-Centric Cyber Physical Systems" at the CMU SEI Research Review 2021.

The DoD has a significant amount of software that is available only in binary form. Currently, it is impractical to ensure that this software is free from vulnerabilities and malicious code. Our goal in this project is to increase software assurance of binary components. To do this, we are adapting an existing open-source decompiler (Ghidra).

Our automated pipeline will:
decompile the binary
determine which functions were correctly decompiled
perform static analysis and automated repair on those functions

Even if some functions cannot be decompiled, we can still achieve a significant benefit by analyzing and repairing those that can. This work will enable the DoD to find and fix potential vulnerabilities in binary code that might otherwise be cost-prohibitive to investigate or repair manually.


#SoftwareAssurance #Security