RetroWrite: Statically Instrumenting COTS Binaries for Fuzzing and Sanitization

Chat with Graph Search

Ask any question about EPFL courses, lectures, exercises, research, news, etc. or try the example questions below.

DISCLAIMER: The Graph Chatbot is not programmed to provide explicit or categorical answers to your questions. Rather, it transforms your questions into API requests that are distributed across the various IT services officially administered by EPFL. Its purpose is solely to collect and recommend relevant references to content that you can explore to help you answer your questions.

In contrast to vast academic efforts to study AI security, few real-world reports of AI security incidents exist. Released incidents prevent a thorough investigation of the attackers' motives, as crucial information about the company and AI application is ...

Formally verifying the correctness of software is necessary to merit the trust people put in software systems. Currently, formal verification requires human effort to prove that a piece of code matches its specification and code changes to improve verifiab ...

We consider the problem of comparing several samples of stochastic processes with respect to their second-order structure, and describing the main modes of variation in this second order structure, if present. These tasks can be seen as an Analysis of Vari ...

Compilers assure that any produced optimized code is semantically equivalent to the original code. However, even "correct" compilers may introduce security bugs as security properties go beyond translation correctness. Security bugs introduced by such corr ...

Code-reuse attacks are dangerous threats that attracted the attention of the security community for years. These attacks aim at corrupting important control-flow transfers for taking control of a process without injecting code. Nowadays, the combinations o ...

Advances in computational capabilities and large volumes of experimental data have established computer simulations of brain tissue models as an important pillar in modern neuroscience. Alongside, a variety of domain specific languages (DSLs) have been dev ...

Today's continued increase in demand for processing power, despite the slowdown of Moore's law, has led to an increase in processor count, which has resulted in energy consumption and distribution problems. To address this, there is a growing trend toward ...

Fuzzing has emerged as the most broadly used testing technique to discover bugs. Effective fuzzers rely on coverage to prioritize inputs that exercise new program areas. Edge-based code coverage of the Program Under Test (PUT) is the most commonly used cov ...

This thesis demonstrates that it is feasible for systems code to expose a latency interface that describes its latency and related side effects for all inputs, just like the code's semantic interface describes its functionality and related side effects. S ...

This Replicating Computational Report (RCR) describes (a) our datAFLow fuzzer and (b) how to replicate the results in "datAFLow: Toward a Data-Flow-Guided Fuzzer." Our primary artifact is the datAFLow fuzzer. Unlike traditional coverage-guided greybox fuzz ...

Fuzzing reliably and efficiently finds bugs in software, including operating system kernels. In general, higher code coverage leads to the discovery of more bugs. This is why most existing kernel fuzzers adopt strategies to generate a series of inputs that ...

A central task in high-level synthesis is scheduling: the allocation of operations to clock cycles. The classic approach to scheduling is static, in which each operation is mapped to a clock cycle at compile-time, but recent years have seen the emergence o ...

Given the need for efficient high-performance computing, computer architectures combining CPUs, GPUs, and FPGAs are nowadays prevalent. However, each of these components suffers from electrical-level security risks. Moving to heterogeneous systems, with th ...

Dr.Jit is a new just-in-time compiler for physically based rendering and its derivative. Dr.Jit expedites research on these topics in two ways: first, it traces high-level simulation code (e.g., written in Python) and aggressively simplifies and specialize ...

Advances in mobile computing have paved the way for new types of distributed applications that can be executed solely by mobile devices on Device-to-Device (D2D) ecosystems (e.g., crowdsensing). Sophisticated applications, like cryptocurrencies, need distr ...

Despite their high sensitivity and their suitability for miniaturization, biosensors are still limited for clinical applications due to the lack of reproducibility and specificity of their detection performance. The design and preparation of sensing surfac ...

We report the discovery of a surprising binary configuration of the double-mode Cepheid OGLE-LMC-CEP-1347 pulsating in the first (P-1= 0.690 days) and second-overtone (P-2= 0.556 days) modes. The orbital period (P-orb= 59 days) of the system is five times ...

As IoT applications gain widespread adoption, it becomes important to design and implement IoT protocols with security. Existing research in protocol security reveals that the majority of disclosed protocol vulnerabilities are caused by incorrectly impleme ...

Time-synchronization attacks on phasor measurement units (PMUs) pose a real threat to smart grids; it was shown that they are feasible in practice and that they can have a nonnegligible negative impact on state estimation, without triggering the bad data d ...

High-level synthesis (HLS) tools typically generate statically scheduled datapaths. Static scheduling implies that the resulting circuits have a hard time exploiting parallelism in code with potential memory dependences, with control dependences, or where ...

RetroWrite: Statically Instrumenting COTS Binaries for Fuzzing and Sanitization

Chat with Graph Search

When Your AI Becomes a Target: AI Security Incidents and Best Practices

Automated Formal Verification of Software Network Functions

Transportation-based functional ANOVA and PCA for covariance operators

Silent Bugs Matter: A Study of Compiler-Introduced Security Bugs

WarpAttack: Bypassing CFI through Compiler-Introduced Double-Fetches

MOD2IR: High-Performance Code Generation for a Biophysically Detailed Neuronal Simulation DSL

Compilation and Design Space Exploration of Dataflow Programs for Heterogeneous CPU-GPU Platforms

Arvin: Greybox Fuzzing Using Approximate Dynamic CFG Analysis

Latency Interfaces for Systems Code

DatAFLow: Toward a Data-flow-guided Fuzzer

ACTOR: Action-Guided Kernel Fuzzing

DASS: Combining Dynamic & Static Scheduling in High-Level Synthesis

Electrical-Level Attacks on CPUs, FPGAs, and GPUs: Survey and Implications in the Heterogeneous Era

Dr.Jit: A Just-In-Time Compiler for Differentiable Rendering

Toward Mobile Distributed Ledgers

Design and Preparation of Sensing Surfaces for Capacitive Biodetection

Discovery of a Binary-origin Classical Cepheid in a Binary System with a 59 day Orbital Period

PROFACTORY: Improving IoT Security via Formalized Protocol Customization

Security Measures for Grids Against Rank-1 Undetectable Time-Synchronization Attacks

From C/C plus plus Code to High-Performance Dataflow Circuits