Toward Partial Proofs of Vulnerabilities - Archive ouverte HAL
Communication Dans Un Congrès Année : 2024

Toward Partial Proofs of Vulnerabilities

Résumé

With the adoption of compelling legislation regulating Product Security, quickly replicating or disproving the presence of publicly known vulnerabilities is becoming an essential part of the software life cycle. Moreover, third-party code is often integrated and shipped in binary form rather than source code. In this article, we present an original debugger named the Witchcraft Shell (WSH), aiming at helping software maintainers validate the existence of public vulnerabilities when source code is unavailable. By making C/C++ dynamically linked ELF executables scriptable and their internal functions callable with no or little context, we open the way to new heuristics: "partial proofs of vulnerabilities". This tool is published under a permissive dual BSD/MIT open-source license.
Fichier principal
Vignette du fichier
secdev-brossard.pdf (93.9 Ko) Télécharger le fichier
Origine Fichiers produits par l'(les) auteur(s)
Licence

Dates et versions

hal-04795578 , version 1 (21-11-2024)

Licence

Identifiants

Citer

Jonathan Brossard. Toward Partial Proofs of Vulnerabilities. 2024 IEEE Secure Development Conference (SecDev), Oct 2024, Pittsburgh, United States. pp.180-182, ⟨10.1109/secdev61143.2024.00023⟩. ⟨hal-04795578⟩
0 Consultations
0 Téléchargements

Altmetric

Partager

More