SaTC: CORE: Small: Collaborative: Deep and Efficient Dynamic Analysis of Operating System Kernels

本项目的目标是通过深入的分析和测试来提高操作系统(OS)内核的安全性。OS内核是个人计算机、智能手机、服务器等计算机系统的基础，也是整个互联网基础设施的基础。现代操作系统内核极其复杂，包含大量安全漏洞，这些漏洞会在测试阶段溜到终端设备上。不幸的是，最先进的测试解决方案是不够的，因为操作系统的更深层次部分仍然难以触及，因此在很大程度上没有经过测试。该项目旨在通过开发一套创新的动态分析和测试技术来解决这一精确问题，这些技术将极大地提高OS内核的安全性和质量。其结果将有利于几乎所有计算设备的安全。最先进的操作系统内核测试技术被称为模糊测试，它会生成随机输入，希望它们可以执行内核代码的各个部分。它有两个独特的瓶颈：(1)空间瓶颈，阻止Fuzzer到达所需的代码块并触发潜在的漏洞，即syscall之间的依赖关系；(2)时间瓶颈，迫使Fuzzer停止执行一段时间，导致浪费的Fuzz时间，即重复重新启动，重复触发相同的错误。该项目将开发一套程序分析技术，通过使Fuzzer在解决依赖项方面更加智能并帮助其避免重复重启来改进OS内核的Fuzz测试。该奖项反映了NSF的法定使命，并通过使用基金会的智力优势和更广泛的影响审查标准进行评估，被认为值得支持。

The objective of this project is to improve the security of operating system (OS) kernels through deep analysis and testing. OS kernels are the foundation of computer systems such as personal computers, smartphones, servers, as well as the Internet infrastructure in general. Modern OS kernels are enormously complex and contain a large number of security vulnerabilities that slip through the testing phase onto end devices. Unfortunately, the state-of-the-art testing solution is insufficient as deeper parts of the OS remain hard-to-reach and therefore largely untested. The project aims to solve this precise issue by developing a set of innovative dynamic analysis and testing techniques that will greatly improve the security and quality of OS kernels. The results will benefit the security of virtually all computing devices. The state-of-the-art testing technique for OS kernels is called fuzz testing, which generates random inputs in the hope that they will exercise various parts of the kernel code. It has two unique bottlenecks: (1) space bottlenecks that prevent the fuzzer from reaching desired code blocks and triggering potential vulnerabilities, i.e., dependencies among syscalls, and (2) time bottlenecks that force the fuzzer to stop its execution for some period of time, resulting in wasted fuzz time, i.e., repetitive reboots where the same bugs are triggered repetitively. The project will develop a set of program analysis techniques to improve fuzz testing of OS kernels by making the fuzzer more intelligent in resolving dependencies and by helping it avoid repetitive reboots.This award reflects NSF's statutory mission and has been deemed worthy of support through evaluation using the Foundation's intellectual merit and broader impacts review criteria.