Global ETD Search
Search theses and dissertations gathered from participating repositories worldwide. Every result links back to the library that holds it. No account is needed.
Results
Showing 1 to 11 of 11 for “"Vulnerability Discovery"”.
-
Empirical Methods for Evaluating Vulnerability Models
… and systematically validate empirical vulnerability models?”. Based on the survey of past studies about the vulnerability discovery process, the dissertation has pointed out several critical issues in the traditional methodology for evaluating the performance of vulnerability discovery …
-
Software defect localization using explainable deep learning
… is the field of machine learning-based software vulnerability detection, where models are trained to classify code as either vulnerable or clean. These models offer advantages over traditional static application testing tools, including adaptability to project-specific code and tunable decision …
-
Fuzzing with Performance Monitoring and Tracing Hardware
… to improve the state of the art of automated vulnerability discovery systems. However, there are instances where the adoption of such new techniques and tools improves the state of the art of these systems while at the expense of portability, accessibility, and performance. Additionally, while …
-
SECURITY VULNERABILITIES: DISCOVERY, PREDICTION, EFFECT, AND MITIGATION
… systems. In this dissertation, the software Vulnerability Discovery Models (VDMs) are studied and it is illustrated that they cannot provide accurate vulnerability prediction even with large amount of historical vulnerability data. We then propose and study a scheme that incorporates software …
-
No Linux, No Problem: Fast and Correct Windows Binary Fuzzing via Target-embedded Snapshotting
… exploration of programs—leading to faster vulnerability discovery. High-performance fuzzers exploit the Linux kernel's customizability to implement process snapshotting: fuzzing-oriented execution primitives that dramatically increase fuzzing throughput. Unfortunately, such speeds remain …
-
Security Research for the Public Good: A Principled Approach
… this vision: Our first case study considers vulnerability discovery as applied to Internet voting. We perform a security analysis of the dominant Internet voting systems used in U.S. federal elections, including those used in the 2020 U.S. presidential race. We find that, despite decades of …
-
Machine Learning in Security Vulnerability Research
… existing work on the roles of AI and ML in vulnerability discovery, I conducted a targeted review of the literature, which indicated that fuzz testing, a method in which an automated tool evaluates software for security flaws using random input data, is a promising area for further …
-
Practical Feedback and Instrumentation Enhancements for Performant Security Testing of Closed-source Executables
… bugs for every 1,000 lines of code, the prompt discovery of security flaws is now vital to mitigating the next major cyberattack. Over the last decade, the software industry has overwhelmingly turned to a lightweight defect discovery approach known as fuzzing: automated testing that uncovers …
-
Market Based Models for CYBersecurity information EXchange (CYBEX)
… hinder the firms to share their breach/vulnerability information with the external agencies. Hence it is crucial to understand how the firms can be encouraged, so that they become self-enforced towards sharing their threat intelligence, which will not only increase their own payoff but …
-
Improving Internet Security through Empirical and Qualitative Studies of Email and DNS Ecosystem
… By combining large-scale empirical measurement, vulnerability analysis, and automated remediation, this dissertation advances our understanding of Internet infrastructure security and provides actionable paths toward more reliable, verifiable, and self-healing email and DNS ecosystems.
-
Securing the software-defined networking control plane by using control and data dependency techniques
Software-defined networking (SDN) fundamentally changes how network and security practitioners design, implement, and manage their networks. SDN decouples the decision-making about traffic forwarding (i.e., the control plane) from the traffic being forwarded (i.e., the data plane). SDN also allows …