Demo: EverParse: Automatic generation of formally verified secure parsers for cloud integrity
92
Microsoft Research334 тыс
Следующее
08.02.22 – 10018:28Популярные
21 день – 44949:37
255 дней – 99 59816:22Опубликовано 8 февраля 2022, 17:10
Speaker: Tahina Ramananandro, Principal Research Software Development Engineer, Microsoft Research Redmond
DARPA and MITRE estimate that 80 percent of software security vulnerabilities have incorrect input validation as their root cause. In such scenarios, attackers provide malformed input, which, when not properly rejected, causes various misbehaviors such as buffer overruns or integer overflows, which ultimately lead to giving the attacker full control of the system. Thus, hardening critical software systems by systematically replacing their input validation code with formally proven message parsers can make a radical difference. This research talk by Tahina Ramananandro is the second of three research talks that will present ongoing and future research and engineering efforts to this end, demonstrating how projects such as Microsoft Research EverParse and DARPA SafeDocs harden input validation for various applications, ranging from network communication protocols to document formats. See talks by Sergey Bratus, DARPA, and Aseem Rastogi, Microsoft Research Redmond, for more information.
Learn more about the 2021 Microsoft Research Summit: Aka.ms/researchsummit
DARPA and MITRE estimate that 80 percent of software security vulnerabilities have incorrect input validation as their root cause. In such scenarios, attackers provide malformed input, which, when not properly rejected, causes various misbehaviors such as buffer overruns or integer overflows, which ultimately lead to giving the attacker full control of the system. Thus, hardening critical software systems by systematically replacing their input validation code with formally proven message parsers can make a radical difference. This research talk by Tahina Ramananandro is the second of three research talks that will present ongoing and future research and engineering efforts to this end, demonstrating how projects such as Microsoft Research EverParse and DARPA SafeDocs harden input validation for various applications, ranging from network communication protocols to document formats. See talks by Sergey Bratus, DARPA, and Aseem Rastogi, Microsoft Research Redmond, for more information.
Learn more about the 2021 Microsoft Research Summit: Aka.ms/researchsummit
Свежие видео
8 дней – 6790:30
9 дней – 4910:54
11 дней – 6585:33
13 дней – 356 7624:22
14 дней – 2 8350:19Случайные видео
358 дней – 6 8350:12
363 дня – 1 661 0993:51:15
11.06.23 – 193 2188:39
4 часа – 5780:57
2 дня – 22 4207:55
3 дня – 4 8101:01
6 дней – 42611:06
7 дней – 1061:11
8 дней – 130 0970:57
9 дней – 1 2070:32
19 часов – 1 0301:00
2 дня – 420 9695:15