Главная
Study mode:
on
1
Intro
2
Question
3
Motivation
4
Scalable & Accurate Vulnerable Code Clone discovery
5
Demonstration of VUDDY
6
Proposed method: VUDDY
7
Collecting vulnerable code
8
Fingerprinting a program
9
Abstraction
10
Normalization
11
Vulnerable code clone detection
12
Performance
13
Case study
14
Summary
Description:
Explore a scalable approach for detecting vulnerable code clones in this IEEE conference talk presented at the 2017 IEEE Symposium on Security & Privacy. Dive into the principles of VUDDY, a technique designed to efficiently and accurately identify security vulnerabilities in large software programs. Learn how function-level granularity and length-filtering techniques enable VUDDY to preprocess billions of lines of code in hours, followed by rapid clone detection. Discover the security-aware abstraction technique that allows VUDDY to identify variants of known vulnerabilities with high accuracy. Compare VUDDY's performance against state-of-the-art code clone detection techniques and examine its effectiveness in detecting zero-day vulnerabilities in widely used software systems like Apache HTTPD and Ubuntu OS Distribution. Gain insights into the growing ecosystem of open source software, the proliferation of code clones, and their impact on software security.

VUDDY - A Scalable Approach for Vulnerable Code Clone Discovery

IEEE
Add to list
0:00 / 0:00