Automatically Detecting and Surviving Exploitable Compiler Bugs

自动检测并避免可利用的编译器错误

• 批准号: EP/R011605/1
• 负责人: Cristian Cadar
• 金额: $ 85.64万
• 依托单位: Imperial College London
• 依托单位国家: 英国
• 项目类别: Research Grant
• 财政年份: 2018
• 资助国家: 英国
• 起止时间: 2018 至 无数据
• 项目状态: 已结题
• 来源: https://gtr.ukri.org/projects?ref=EP%2FR011605%2F1
• 关键词: Automatically; Detecting; Surviving; Exploitable; Compiler

The focus of this proposal is on the detection and survival of wrong code compiler defects, which we argue present a cyber-security threat that has been largely ignored to date. First, incorrectly compiled code can introduce exploitable vulnerabilities that are not visible at the source code level, and thus cannot be detected by source-level static analysers. Second, incorrectly compiled code can undermine the reliability of the application, which can have dramatic repercussions in the context of safety-critical systems. Third, wrong code compiler defects can also be the target of some of the most insidious security attacks. A crafty attacker posing as an open source developer can introduce a compiler-bug-based backdoor into a security-critical application by adding a patch that looks perfectly innocent but which, when compiled with a certain compiler, yields binary code that allows the attacker to compromise the software.In this project, we aim to explore automated techniques that can detect and prevent such problems. In particular, we plan to investigate techniques for automatically finding compiler-induced vulnerabilities in real software, approaches for understanding the extent to which an attacker could maliciously modify an application to create a compiler-induced vulnerability, and methods for preventing against such vulnerabilities at runtime.

该提案的重点是错误代码编译器缺陷的检测和生存，我们认为这是迄今为止在很大程度上被忽视的网络安全威胁。首先，错误编译的代码可能会引入可利用的漏洞，这些漏洞在源代码级别不可见，因此无法被源代码级别的静态分析器检测到。其次，错误编译的代码会破坏应用程序的可靠性，这在安全关键系统的上下文中会产生巨大的影响。第三，错误的代码编译器缺陷也可能成为某些最阴险的安全攻击的目标。一个狡猾的攻击者冒充一个开源开发人员可以引入一个编译器错误为基础的后门程序到一个安全关键的应用程序通过添加一个补丁，看起来完全无辜的，但当与特定的编译器编译，产生的二进制代码，允许攻击者危及软件。在这个项目中，我们的目标是探索自动化技术，可以检测和防止这样的问题。特别是，我们计划调查的技术，自动发现编译器引起的漏洞在真实的软件，了解攻击者可以恶意修改应用程序，以创建一个编译器引起的漏洞的程度的方法，并在运行时防止这种漏洞的方法。

项目成果

Fuzzing: Challenges and Reflections

• DOI: 10.1109/ms.2020.3016773
• 发表时间: 2021-05-01
• 期刊: IEEE SOFTWARE
• 影响因子: 3.3
• 作者: Bohme, Marcel;Cadar, Cristian;Roychoudhury, Abhik
• 通讯作者: Roychoudhury, Abhik

Fine-Grain Memory Object Representation in Symbolic Execution

符号执行中的细粒度内存对象表示

• DOI: 10.1109/ase.2019.00089
• 发表时间: 2019
• 作者: Nowack M

Artifact of GrayC: Greybox Fuzzing of Compilers and Analysers for C

GrayC 的神器：C 编译器和分析器的灰盒模糊测试

• DOI: 10.5281/zenodo.7948109
• 发表时间: 2023
• 作者: Even-Mendoza K

Closer to the edge

离边缘更近

• DOI: 10.1145/3324884.3418933
• 发表时间: 2020
• 作者: Even-Mendoza K

Test-case reduction and deduplication almost for free with transformation-based compiler testing

• DOI: 10.1145/3453483.3454092
• 发表时间: 2021-06
• 期刊: Proceedings of the 42nd ACM SIGPLAN International Conference on Programming Language Design and Implementation
• 作者: Alastair F. Donaldson;Paul Thomson;Vasyl Teliman;Stefano Milizia;André Perez Maselco;Antoni Karpiński