Browser Enhancements Against Phishing Attacks Rohin Dabas Adrian Perrig Dawn Song

Source URL: cups.cs.cmu.edu

Automatic Patch-Based Exploit Generation is Possible: Techniques and Implications David Brumley, Pongsin Poosankam Dawn Song Jiang Zheng {dbrumley,ppoosank}@cs.cmu.edu

Source URL: users.ece.cmu.edu

• Software testing
• Software bugs
• Hacking
• Buffer overflow
• Computer memory
• Vulnerability
• Static single assignment form
• Exploit
• Patch
• Test data generation
• Concolic testing

Towards Automatic Generation of Vulnerability-Based Signatures David Brumley, James Newsome, and Dawn Song Carnegie Mellon University Pittsburgh, PA, USA {dbrumley,jnewsome,dawnsong}@cmu.edu

Source URL: users.ece.cmu.edu

• Computability theory
• Vulnerability
• Public-key cryptography
• Theoretical computer science
• Models of computation
• Buffer overflow
• Social vulnerability
• Zero-day
• Ring signature
• Symbolic execution
• Turing machine
• Halting problem

Towards Attack-Agnostic Defenses David Brumley and Dawn Song Carnegie Mellon University {dbrumley,dawnsong}@cs.cmu.edu Abstract

Source URL: users.ece.cmu.edu

• Cyberwarfare
• Computer network security
• Peer-to-peer
• Botnet
• Hosts
• Denial-of-service attack
• Public-key cryptography
• Computer security
• Fabric of Security

Code-Pointer Integrity Volodmyr Kuzentsov, László Szekeres, Mathias Payer, George Candea, R. Sekar, and Dawn Song (c) TriStar Pictures, Inc. & Touchstone Pictures, 1997

Source URL: hexhive.github.io

• Software engineering
• Computing
• Computer programming
• Software bugs
• Data types
• Primitive types
• Memory management
• Pointer
• Swift
• Memory corruption
• Reference
• C dynamic memory allocation

The Correctness-Security Gap in Compiler Optimization Vijay D’Silva, Mathias Payer, Dawn Song LangSec 2015 1

Source URL: hexhive.github.io

• Software
• Computer programming
• Procedural programming languages
• Object-oriented programming languages
• Cross-platform software
• Compilers
• GNU Compiler Collection
• Programming language implementation
• Fortran
• C
• D

Code-Pointer Integrity Volodymyr Kuznetsov∗ , L´aszl´o Szekeres‡ , Mathias Payer†,§ George Candea∗ , R. Sekar‡ , Dawn Song† ∗ Ecole ´ † UC

Source URL: hexhive.github.io

• Software engineering
• Computing
• Computer programming
• Software bugs
• Data types
• Memory management
• Primitive types
• Programming language implementation
• Pointer
• Memory safety
• Dangling pointer
• Buffer overflow protection

SoK: Eternal War in Memory L´aszl´o Szekeres† , Mathias Payer‡ , Tao Wei∗‡ , Dawn Song‡ † Stony Brook University ‡ University of California, Berkeley ∗ Peking University

Source URL: hexhive.github.io

• Computing
• Software engineering
• Software bugs
• Computer programming
• Pointer
• Stack buffer overflow
• Address space layout randomization
• Buffer overflow
• Dangling pointer
• Memory safety
• C dynamic memory allocation
• Return-to-libc attack

Code-Pointer Integrity Volodymyr Kuznetsov∗ , L´aszl´o Szekeres‡ , Mathias Payer†,§ George Candea∗ , R. Sekar‡ , Dawn Song† ∗ Ecole ´ † UC

Source URL: www.nebelwelt.net

The Correctness-Security Gap in Compiler Optimization Vijay D’Silva, Mathias Payer, Dawn Song LangSec 2015 1

Source URL: www.nebelwelt.net