TWC: Small: Collaborative: Similary-Based Program Analyses for Eliminating Vulnerabilities
TWC: Small: Collaborative: Similary-Based Program Analyses for Eliminating Vulnerabilities
批准号:
1318419
负责人:
Tao Xie
金额:
$25.0万
依托单位国家:
美国
项目类别:
Standard Grant
财政年份:
2013
资助国家:
美国
项目状态:
已结题
起止时间:
2013-08-01 至 2014-03-31
中文摘要
关键信息基础设施的安全取决于有效的技术,以检测恶意攻击通常利用的漏洞。由于糟糕的编码实践或人为错误,在一个代码位置发现并修补的已知漏洞通常可能存在于许多其他未修补的代码位置中,无论是在同一代码库中还是在其他代码库中。此外,补丁通常容易出错,导致新的漏洞。该项目开发了用于检测代码级相似性以防止此类漏洞的实用技术。由于我们对资讯科技的依赖日益增加,这项计划有潜力协助建立更可靠和安全的资讯系统基础设施,对社会产生巨大的经济影响。特别是,该计划旨在发展实用的技术,以进行基于相似性的测试和分析,以检测未修补的易受攻击代码,并在源代码和二进制级别验证已检测到的易受攻击代码的修补程序。为此,它侧重于三个主要技术方向:(1)通过调整和改进工业强度的工具来开发用于检测源级别漏洞的技术,(2)通过扩展关于检测二进制中的代码克隆的初步工作来开发检测二进制级别漏洞的能力,以及(3)通过开发验证软件补丁并帮助生成正确、安全的补丁的方法和技术来支持补丁验证和修复。该项目有助于发现源代码和二进制级别漏洞分析的新技术,并更好地了解构建高度安全和可靠的软件的基本和实际挑战。
英文摘要
The security of critical information infrastructures depends upon effective techniques to detect vulnerabilities commonly exploited by malicious attacks. Due to poor coding practices or human error, a known vulnerability discovered and patched in one code location may often exist in many other unpatched code locations, either in the same code base or other code bases. Furthermore, patches are often error-prone, resulting in new vulnerabilities. This project develops practical techniques for detecting code-level similarity to prevent such vulnerabilities. It has the potential to help build a more reliable and secure information system infrastructure, which will have tremendous economical impact on society because of our growing reliance on information technologies.In particular, the project aims to develop practical techniques for similarity-based testing and analysis to detect unpatched vulnerable code and validate patches to the detected vulnerable code at both the source code and binary levels. To this end, it focuses on three main technical directions: (1) developing techniques for detecting source-level vulnerabilities by adapting and refining an industrial-strength tool, (2) developing capabilities of detecting binary-level vulnerabilities by extending preliminary work on detecting code clones in binaries, and (3) supporting patch validation and repair by developing methodologies and techniques to validate software patches and help produce correct, secure patches. This project helps discover new techniques for source- and binary-level vulnerability analysis and gain better understandings of the fundamental and practical challenges for building highly secure and reliable software.
期刊论文(0)
专著(0)
科研奖励(0)
会议论文
CSR: Small: Decoupling File System from Volatile Main Memory: A First Step towards a Single-Level Persistent Store
-
批准号:1813485
-
项目类别:Standard Grant
-
资助金额:$33.69万
-
财政年份:2018
-
负责人:Tao Xie
-
依托单位:
TWC: Medium: Collaborative: Improving Mobile-Application Security via Text Analytics
-
批准号:1513939
-
项目类别:Standard Grant
-
资助金额:$90.0万
-
财政年份:2015
-
负责人:Tao Xie
-
依托单位:
CAREER: Cooperative Developer Testing with Test Intentions
-
批准号:1434596
-
项目类别:Continuing Grant
-
资助金额:$36.43万
-
财政年份:2013
-
负责人:Tao Xie
-
依托单位:
CSR: Small: A Device-Array Based Flash Storage System for Emerging Data-Intensive and Mission-Critical Mobile Applications: from Architecture Redesign to New File System
-
批准号:1320738
-
项目类别:Standard Grant
-
资助金额:$44.07万
-
财政年份:2013
-
负责人:Tao Xie
-
依托单位:
TWC: Small: Collaborative: Similary-Based Program Analyses for Eliminating Vulnerabilities
-
批准号:1434582
-
项目类别:Standard Grant
-
资助金额:$25.0万
-
财政年份:2013
-
负责人:Tao Xie
-
依托单位:
EAGER: Improving Robustness of Numerical Software
-
批准号:1349666
-
项目类别:Standard Grant
-
资助金额:$10.0万
-
财政年份:2013
-
负责人:Tao Xie
-
依托单位:
Collaborative Research: II-EN: Infrastructure Support for Software Testing Research
-
批准号:1439481
-
项目类别:Continuing Grant
-
资助金额:$20.88万
-
财政年份:2013
-
负责人:Tao Xie
-
依托单位:
SHF: Small: Collaborative Research: Constraint-Based Generation of Database States for Testing Database Applications
-
批准号:1434590
-
项目类别:Standard Grant
-
资助金额:$15.86万
-
财政年份:2013
-
负责人:Tao Xie
-
依托单位:
Collaborative Research: II-EN: Infrastructure Support for Software Testing Research
-
批准号:0958235
-
项目类别:Continuing Grant
-
资助金额:$26.3万
-
财政年份:2010
-
负责人:Tao Xie
-
依托单位:
CAREER: Architectural Support for Integrating NAND Flash Solid State Disks into Enterprise-Class Storage Systems
-
批准号:0845105
-
项目类别:Standard Grant
-
资助金额:$43.6万
-
财政年份:2009
-
负责人:Tao Xie
-
依托单位:
CAREER: Cooperative Developer Testing with Test Intentions
-
批准号:0845272
-
项目类别:Continuing Grant
-
资助金额:$42.5万
-
财政年份:2009
-
负责人:Tao Xie
-
依托单位:
SHF: Small: Collaborative Research: Constraint-Based Generation of Database States for Testing Database Applications
-
批准号:0915400
-
项目类别:Standard Grant
-
资助金额:$24.99万
-
财政年份:2009
-
负责人:Tao Xie
-
依托单位:
CSR-DMSS, SM: Energy-Efficient and Reliability-Aware Data Management in Mobile Storage Systems
-
批准号:0834466
-
项目类别:Continuing Grant
-
资助金额:$16.0万
-
财政年份:2008
-
负责人:Tao Xie
-
依托单位:
Collaborative Research: SoD-TEAM: Designing Tests for Evolving Software Systems
-
批准号:0725190
-
项目类别:Standard Grant
-
资助金额:$22.5万
-
财政年份:2008
-
负责人:Tao Xie
-
依托单位:
CT-ISG: Collaborative Research: A New Approach to Testing and Verification of Security Policies
-
批准号:0716579
-
项目类别:Standard Grant
-
资助金额:$0.0万
-
财政年份:2007
-
负责人:Tao Xie
-
依托单位:
CSR---SMA: Improving Software System Reliability via Mining Properties for Software Verification
-
批准号:0720641
-
项目类别:Standard Grant
-
资助金额:$2.0万
-
财政年份:2007
-
负责人:Tao Xie
-
依托单位:
国内基金
海外基金
登录
查看更多内容
昼夜节律性small RNA在血斑形成时间推断中的法医学应用研究
-
批准号:
-
项目类别:省市级项目
-
资助金额:--
-
批准年份:2024
-
负责人:
-
依托单位:
tRNA-derived small RNA上调YBX1/CCL5通路参与硼替佐米诱导慢性疼痛的机制研究
-
批准号:
-
项目类别:省市级项目
-
资助金额:10.0万元
-
批准年份:2022
-
负责人:张祥忠
-
依托单位:
Small RNA调控I-F型CRISPR-Cas适应性免疫性的应答及分子机制
-
批准号:32000033
-
项目类别:青年科学基金项目
-
资助金额:24.0万元
-
批准年份:2020
-
负责人:林平
-
依托单位:
Small RNAs调控解淀粉芽胞杆菌FZB42生防功能的机制研究
-
批准号:31972324
-
项目类别:面上项目
-
资助金额:58.0万元
-
批准年份:2019
-
负责人:高学文
-
依托单位:
变异链球菌small RNAs连接LuxS密度感应与生物膜形成的机制研究
-
批准号:81900988
-
项目类别:青年科学基金项目
-
资助金额:21.0万元
-
批准年份:2019
-
负责人:毛梦莹
-
依托单位:
肠道细菌关键small RNAs在克罗恩病发生发展中的功能和作用机制
-
批准号:31870821
-
项目类别:面上项目
-
资助金额:56.0万元
-
批准年份:2018
-
负责人:陈江宁
-
依托单位:
基于small RNA 测序技术解析鸽分泌鸽乳的分子机制
-
批准号:31802058
-
项目类别:青年科学基金项目
-
资助金额:26.0万元
-
批准年份:2018
-
负责人:麻慧
-
依托单位:
Small RNA介导的DNA甲基化调控的水稻草矮病毒致病机制
-
批准号:31772128
-
项目类别:面上项目
-
资助金额:60.0万元
-
批准年份:2017
-
负责人:吴建国
-
依托单位:
基于small RNA-seq的针灸治疗桥本甲状腺炎的免疫调控机制研究
-
批准号:81704176
-
项目类别:青年科学基金项目
-
资助金额:20.0万元
-
批准年份:2017
-
负责人:赵继梦
-
依托单位:
水稻OsSGS3与OsHEN1调控small RNAs合成及其对抗病性的调节
-
批准号:91640114
-
项目类别:重大研究计划
-
资助金额:85.0万元
-
批准年份:2016
-
负责人:何祖华
-
依托单位: