CAREER: Towards Identifying and Eliminating Exploitable Software Bugs

攻击者只需要找到一个可利用的漏洞，就可以在易受攻击的用户的计算机上安装恶意软件、机器人和病毒。不幸的是，漏洞比比皆是。例如，Ubuntu Linux发行版错误管理数据库目前列出了超过58,000个开放错误。因此，问题不是攻击者能否找到漏洞，而是攻击者可以利用哪个漏洞。这项研究调查了寻找可利用漏洞的新技术、方法和算法。确定错误是否可利用的能力将允许开发人员优先处理错误报告，以便首先修复最关键的安全错误。所研究的技术还将帮助开发人员安全地分发补丁。

Attackers only need to find a single exploitable bug in order toinstall malware, bots, and viruses on a vulnerable user's computer.Unfortunately, bugs are plentiful. For example, the Ubuntu Linuxdistribution bug management database currently lists over 58,000 openbugs. Thus, the question is not whether an attacker can find a bug,but which bugs an attacker can exploit.This research investigates novel techniques, approaches, andalgorithms for finding exploitable bugs. The ability to deteriminewhether a bug is exploitable or not will allow developers toprioritize bug reports so that the most security-critical bugs arefixed first. The techniques investigated will also help developersdistribute patches safely.