Software Engineering Institute | Carnegie Mellon University
Software Engineering Institute | Carnegie Mellon University

Digital Library

Poster

Vulnerability Discovery

  • October 2016
  • By David Warren
  • Vulnerability Discovery
  • Publisher: Software Engineering Institute
  • Abstract

    Current vulnerability discovery techniques such as black-box fuzz testing and concolic testing are so effective that they routinely find hundreds of thousands of crashers, which crash the target program. We created a new methodology for precisely and naturally defining vulnerabilities through the creation of patches. We use our methodology to debunk three commonly held beliefs in fuzzing practice.

  • Download

Part of a Collection

SEI 2016 Research Review