lava

LAVA：大规模自动化漏洞添加 目前，由于缺乏基准真值语料库（即包含已知漏洞且具有触发输入的软件），评估和改进漏洞查找工具面临困难。LAVA 尝试通过向软件自动注入漏洞来解决这一问题。每个 LAVA 漏洞都附带一个可触发它的输入，而正常输入极不可能触发该漏洞。这些漏洞虽是合成的，但我们认为，从它们嵌入程序深层且由真实输入触发这一意义上讲，仍然是逼真的。我们的工作为按需生成大规模基准真值漏洞语料库奠定了基础，从而能够进行严格的工具评估，并为工具开发者提供高质量的目标。 LAVA 是麻省理工学院林肯实验室、纽约大学和东北大学合作的成果。 快速开始 Docker LAVA master...

lava

LAVA: Large Scale Automated Vulnerability Addition Evaluating and improving bug-finding tools is currently difficult due to a shortage of ground truth corpora i.e., software that has known bugs with triggering inputs. LAVA attempts to solve this problem by automatically injecting bugs into...

EUVD-2019-6337

Malware in sbrugna...

EUVD-2017-5518

Malware in sbrugna...

EUVD-2018-4524

Malware in sbrugna...

EUVD-2019-6333

Malware in sbrugna...

EUVD-2019-6363

Malware in sbrugna...

EUVD-2018-4523

Malware in sbrugna...

EUVD-2019-6336

Malware in sbrugna...

EUVD-2019-6370

Malware in sbrugna...

EUVD-2019-6339

Malware in sbrugna...

EUVD-2019-6357

Malware in sbrugna...

EUVD-2019-6340

Malware in sbrugna...

EUVD-2018-4525

Malware in sbrugna...

EUVD-2019-6366

Malware in sbrugna...

EUVD-2019-6338

Malware in sbrugna...

EUVD-2019-6387

Malware in sbrugna...

EUVD-2019-6334

Malware in sbrugna...

EUVD-2019-6375

Malware in sbrugna...

EUVD-2019-6335

Malware in sbrugna...