Cooper Knows the Shortest Stave - Finding 134 Bugs in the Binding Code of Scripting Languages

Cooper Knows the Shortest Stave - Finding 134 Bugs in the Binding Code of Scripting Languages

Explore a groundbreaking approach to bug detection in scripting language binding code through this 30-minute Black Hat conference talk. Dive into the concept of cooperative mutation, which simultaneously modifies script code and program native input to uncover elusive bugs. Learn about three innovative solutions developed for popular scripting languages: object clustering for search space reduction, statistical inference of script-object relationships, and targeted mutation based on inferred connections. Gain insights from the speakers' successful identification of 134 bugs using this method, and understand how the interplay between initial program state and dynamic operations can reveal previously undetected vulnerabilities.