Software Security Analysis - Present and Future Research Initiatives

This talk surveys software security analysis research, including vulnerability detection, fuzzing, attack mitigation, automatic exploit generation, and automated software repair. It also considers program comprehension and analysis for complex applications.

Syllabus

Intro
About the Talk
Take Away
Vulnerability Research
Attack Mitigation techniques
Self-Healing (automated patching)
Program comprehension from its security properties standpoint
Program Analysis for complex (large) applications
Program analysis...
Exploit Mitigations
Automatic Exploit Generation (AEG)
Things to solve for patching
Hybrid approaches to vulnerability discovery