lava

LAVA: Large Scale Automated Vulnerability Addition Evaluating and improving bug-finding tools is currently difficult due to a shortage of ground truth corpora i.e., software that has known bugs with triggering inputs. LAVA attempts to solve this problem by automatically injecting bugs into...

lava

LAVA: Adición Automatizada de Vulnerabilidades a Gran Escala Evaluar y mejorar las herramientas de búsqueda de errores es actualmente difícil debido a la escasez de corpus de referencia es decir, software que tiene errores conocidos con entradas que los desencadenan. LAVA intenta resolver este...

‘Chaff Bug’ Defense Rolls Out Shiny Objects for Attackers to Find

Camouflage and distraction have long been hallmarks of warfare, and it’s no different when it comes to the cyber-front. A group of researchers from New York University are taking the idea further than it’s gone before with the idea of introducing decoy bugs into code – ultimately non-exploitable...