MIT EECS Lincoln Labs Undergraduate Research and Innovation Scholar
Improving Bug Realism in LAVA, a Vulnerability Injection System
Electrical Engineering and Computer Science
- Computer Systems
Improving and Augmenting LAVA
There is a pressing need for a way to evaluate the effectiveness of vulnerability discovery programs. LAVA a system that can inject bugs in a C program provides a promising technique to easily generate large corpora of known buggy programs that can be used for evaluation however the bugs that LAVA injects currently suffer from a lack of realism. We will focus on improving the realism of LAVA bugs by improving their data flow.
A lot of people have tried to research how to discover bugs in software. My project is essentially to do the opposite: inject realistic-looking bugs into software at a large scale. Why? Simply put being able to easily generate buggy code allows us to evaluate how effective bug-finding program are at actually spotting errors.