Raffaele Stelluti
Enabling vulnerability discovery automation by integrating fuzzers and debuggers.
Rel. Cataldo Basile. Politecnico di Torino, Corso di laurea magistrale in Ingegneria Informatica (Computer Engineering), 2021
Abstract
During the last years, 0-days vulnerabilities have represented a real threat for companies, governments, and individuals. The software industry is investing many efforts to detect these vulnerabilities in the early stages of the software development life cycle (SDLC) by introducing Dev-Sec-Ops methodologies. However, these are often expensive in terms of time and resources that the companies should invest. This Master Thesis aims to reduce these costs by improving fuzzing, an indispensable technique for 0-day vulnerability discovery. As a possible solution, we explore the idea of integrating fuzzing tools with debuggers and automate two steps of the fuzzing process: the crash triaging and the oracle's development.
As a result, the triaging time decreases and the quality of vulnerabilities found improves
Relatori
Anno Accademico
Tipo di pubblicazione
Numero di pagine
Informazioni aggiuntive
Corso di laurea
Classe di laurea
Ente in cotutela
Aziende collaboratrici
URI
![]() |
Modifica (riservato agli operatori) |
