Raffaele Stelluti
Enabling vulnerability discovery automation by integrating fuzzers and debuggers.
Rel. Cataldo Basile. Politecnico di Torino, Master of science program in Computer Engineering, 2021
Abstract
During the last years, 0-days vulnerabilities have represented a real threat for companies, governments, and individuals. The software industry is investing many efforts to detect these vulnerabilities in the early stages of the software development life cycle (SDLC) by introducing Dev-Sec-Ops methodologies. However, these are often expensive in terms of time and resources that the companies should invest. This Master Thesis aims to reduce these costs by improving fuzzing, an indispensable technique for 0-day vulnerability discovery. As a possible solution, we explore the idea of integrating fuzzing tools with debuggers and automate two steps of the fuzzing process: the crash triaging and the oracle's development.
As a result, the triaging time decreases and the quality of vulnerabilities found improves
Relators
Academic year
Publication type
Number of Pages
Additional Information
Course of studies
Classe di laurea
Ente in cotutela
Aziende collaboratrici
URI
![]() |
Modify record (reserved for operators) |
