國立虎尾科技大學 |

Run-Time Analysis and Security of Multi-Language Systems.

紀錄類型:	書目-語言資料,手稿 : Monograph/item
正題名/作者:	Run-Time Analysis and Security of Multi-Language Systems./
作者:	Li, Wen.
面頁冊數:	1 online resource (167 pages)
附註:	Source: Dissertations Abstracts International, Volume: 85-12, Section: A.
Contained By:	Dissertations Abstracts International85-12A.
標題:	Electrical engineering. -
電子資源:	click for full text (PQDT)
ISBN:	9798383110232

Run-Time Analysis and Security of Multi-Language Systems.
Li, Wen.

Run-Time Analysis and Security of Multi-Language Systems. - 1 online resource (167 pages)

Source: Dissertations Abstracts International, Volume: 85-12, Section: A.

Thesis (Ph.D.)--Washington State University, 2024.

Includes bibliographical references

The contemporary software development landscape has witnessed a widespread integration of diverse programming languages, leveraging the specific advantages of each, such as the efficiency of C and the programmability of Python. This trend finds notable applications in prominent domains, including the Android operating system and advanced machine learning frameworks like PyTorch. However, adopting this multi-language approach has ushered in a series of great challenges for developers, necessitating the identification of robust solutions to tackle potential security vulnerabilities.Traditional techniques such as program analysis and fuzzing, initially designed for single-language software, face limitations in effectively uncovering vulnerabilities in multi-language systems. Program analysis grapples with challenges in comprehending the intricate control and data flows across diverse languages, often resulting in incomplete vulnerability detection. Conversely, greybox fuzzing encounters difficulties adapting to the nuances of various languages, leading to incomplete code coverage and complications in reproducing identified vulnerabilities. The intricacies within runtime systems supporting multilingual software exacerbate the security clearance predicament, as these systems are often constructed using multiple languages. This complexity adds an additional layer of difficulty for conventional security techniques, emphasizing the need for more adaptive and comprehensive approaches tailored to the unique challenges posed by the multifaceted nature of multi-language systems. Within the scope of my dissertation, I endeavored to tackle the intricate challenges posed by vulnerabilities in multi-language software through a comprehensive and multifaceted approach. This approach entailed conducting extensive empirical investigations into vulnerability susceptibility, facilitating the development of dynamic cross-language information flow analysis. Recognizing the pivotal significance of comprehensive test input coverage, I devised an integrated greybox fuzzing methodology. This innovative approach integrates sensitivity analysis and comprehensive whole-system coverage measurements, significantly enhancing the efficiency of the fuzzing process and vulnerability identification. Furthermore, I focused on fortifying runtime security by proposing a novel two-level collaborative fuzzing framework tailored explicitly for Python language runtime. This contribution was pivotal in reinforcing the software system's foundational safeguards, ensuring a robust defense mechanism against potential security threats.

Electronic reproduction.
Ann Arbor, Mich. :
ProQuest,
2024

Mode of access: World Wide Web

ISBN: 9798383110232Subjects--Topical Terms:

596380
Electrical engineering.
Subjects--Index Terms:

FuzzingIndex Terms--Genre/Form:

554714
Electronic books.

Run-Time Analysis and Security of Multi-Language Systems.
LDR:04044ntm a22004217 4500 001 1150127
005 20241022111553.5
006 m o d
007 cr bn ---uuuuu
008 250605s2024 xx obm 000 0 eng d
020 $a 9798383110232
035 $a (MiAaPQ)AAI30812250
035 $a AAI30812250
040 $a MiAaPQ $b eng $c MiAaPQ $d NTU
100 1 $a Li, Wen. $e author. $3 1265299
245 1 0 $a Run-Time Analysis and Security of Multi-Language Systems.
264 0 $c 2024
300 $a 1 online resource (167 pages)
336 $a text $b txt $2 rdacontent
337 $a computer $b c $2 rdamedia
338 $a online resource $b cr $2 rdacarrier
500 $a Source: Dissertations Abstracts International, Volume: 85-12, Section: A.
500 $a Advisor: Cai, Haipeng.
502 $a Thesis (Ph.D.)--Washington State University, 2024.
504 $a Includes bibliographical references
520 $a The contemporary software development landscape has witnessed a widespread integration of diverse programming languages, leveraging the specific advantages of each, such as the efficiency of C and the programmability of Python. This trend finds notable applications in prominent domains, including the Android operating system and advanced machine learning frameworks like PyTorch. However, adopting this multi-language approach has ushered in a series of great challenges for developers, necessitating the identification of robust solutions to tackle potential security vulnerabilities.Traditional techniques such as program analysis and fuzzing, initially designed for single-language software, face limitations in effectively uncovering vulnerabilities in multi-language systems. Program analysis grapples with challenges in comprehending the intricate control and data flows across diverse languages, often resulting in incomplete vulnerability detection. Conversely, greybox fuzzing encounters difficulties adapting to the nuances of various languages, leading to incomplete code coverage and complications in reproducing identified vulnerabilities. The intricacies within runtime systems supporting multilingual software exacerbate the security clearance predicament, as these systems are often constructed using multiple languages. This complexity adds an additional layer of difficulty for conventional security techniques, emphasizing the need for more adaptive and comprehensive approaches tailored to the unique challenges posed by the multifaceted nature of multi-language systems. Within the scope of my dissertation, I endeavored to tackle the intricate challenges posed by vulnerabilities in multi-language software through a comprehensive and multifaceted approach. This approach entailed conducting extensive empirical investigations into vulnerability susceptibility, facilitating the development of dynamic cross-language information flow analysis. Recognizing the pivotal significance of comprehensive test input coverage, I devised an integrated greybox fuzzing methodology. This innovative approach integrates sensitivity analysis and comprehensive whole-system coverage measurements, significantly enhancing the efficiency of the fuzzing process and vulnerability identification. Furthermore, I focused on fortifying runtime security by proposing a novel two-level collaborative fuzzing framework tailored explicitly for Python language runtime. This contribution was pivotal in reinforcing the software system's foundational safeguards, ensuring a robust defense mechanism against potential security threats.
533 $a Electronic reproduction. $b Ann Arbor, Mich. : $c ProQuest, $d 2024
538 $a Mode of access: World Wide Web
650 4 $a Electrical engineering. $3 596380
650 4 $a Linguistics. $3 557829
650 4 $a Computer science. $3 573171
653 $a Fuzzing
653 $a Multi-language analysis
653 $a Program analysis
653 $a Runtime analysis
653 $a Software security
653 $a Machine learning
655 7 $a Electronic books. $2 local $3 554714
690 $a 0984
690 $a 0544
690 $a 0800
690 $a 0290
710 2 $a Washington State University. $b School of Electrical Engineering and Computer Science. $3 1467514
710 2 $a ProQuest Information and Learning Co. $3 1178819
773 0 $t Dissertations Abstracts International $g 85-12A.
856 4 0 $u http://pqdd.sinica.edu.tw/twdaoapp/servlet/advanced?query=30812250 $z click for full text (PQDT)