Projects

We have a bunch of other active projects in stealth mode, which in fact we are actually working on. If you'd like to know more about, please let us know (<mailto:sslab>).

Please check our opensource projects on Github.

& *
   tags...

autofz

0

autofz is a meta fuzzer for automated fuzzer composition at runtime.

Fuzzing

Rudra

0

Rudra is a static analyzer to detect common undefined behaviors in Rust programs. This project received the distinguished artifact award in SOSP.

Bug Finding Rust

hydra

0

An Extensible Fuzzing Framework for Finding Semantic Bugs in File Systems

Fuzzing FileSystem C MIT

qsym

0

A hybrid fuzzer based on concolic execution. This project is famous with its practicality, also it got best-paper award from USENIX Security.

Fuzzing C++

apollo

0

A toolchain for automatically detecting, reporting, and diagnosing performance bugs in DBMSs.

fuzzing python c++

DIE

0

Fuzzing JavaScript Engines with Aspect-preserving Mutation

Fuzzing C++ JavaScript

A project removing privacy information from crash reports while preserving the correctness of report.

python

janus

0

a state-of-the-art file system fuzzer on Linux

C MIT

Dataflow integrity based defense against kernel memory corruption attacks.

C++ GPL-3.0 linux-kernel-analysis

APISan

0

Sanitizing API Usages through Semantic Cross-Checking

Bug Finding Semantic Cross-Checking

Automatic Techniques to Systematically Discover New Heap Exploitation Primitives

C

fxmark

0

Filesystem Multicore Scalability Benchmark

FileSystem Filebench WML MIT

A project for developing scalable and practical locking algorithms for high-performance multicore system.

C

vbench

0

Multicore Scalability Application Benchmark

Python

A new mitigation technique that helps developers protect the released binary from fuzzing

anti-fuzzing python c++

A cloud-based system that enables attacks and defenses for machine learning (ML) models

adv-ml python c++

Modified Nexus 9 kernel for Kenali Project

C

libmpk

0

Building software abstraction for Intel MPK hardware feature.

C MIT

Synced with SGX101 gitbook.

System Scalability SGX

A project improving fuzzing performance by adding new design primitive to operating system.

C

A place to start designing application with Intel SGX in mind.

System Scalability SGX

eCS

0

Enlightened Critical Sections

C

latr

0

Lazy Translation Coherence - ASPLOS'18

C

This project introduces double-fetch bugs in kernel with formal definition and proposes an automatic detection method based on static analysis.

C++

ordo

0

Designing scalable ordering primitive for multicore machines with invariant hardware clocks.

This is a rowhammer-based SGX attack project alarming its serious impact to cloud providers.

SGX

Crawler for GooglePlay

HTML

The branch shadowing attack: Proof of concept

C++ Proof-of-concept

hdfi

0

Hardware-assisted Data-flow Isolation

C

An open platform for Intel SGX

System Security SGX C

A project detecting malicious PDF documents by analyzing execution traces.

C++

N-version-based software diversification project with novel strategies such as sanitizer distribution.

Python

DrK

0

The DrK Attack - Proof of concept

Python MIT Proof-of-concept

SGX Tutorial at CCS17: SGX Security and Privacy

SGX

mosaic

0

This project builds a new graph processing engine with various optimizations, capable of processing a trillion-edge graph on a single machine.

C++ MIT

Enabling Address Space Layout Randomization (ASLR) for SGX Programs

C++ SGX

avpass

0

A tool for leaking and bypassing Android malware detection system

android python smali

t-sgx

0

Compiler-based tool that protects Intel SGX applications against controlled-channel attacks

C++ MIT SGX

This project implements scalable NUMA-aware locks by newly adding synchronization primitives to mutex and semaphore in the Linux kernel.

C

UniSan

0

Proactive Kernel Memory Initialization to Eliminate Data Leakages

System Security

A performance-oriented re-design of FakeRoot project - a tool that offers applications the illusion of root privileges - for multicore architectures

Makefile

Preventing code-reuse attacks by stopping code pointer leakages

System Security GPL-3.0

juxta

0

Cross-checking Semantic Correctness for File Systems

Bug Finding C++

Private Browsing without Tears

Sandboxing C

caver

0

This is a Facebook-Internet-Defense-Prize winning project that automatically discovers type casting bugs in C++.

C++

kup

0

Prototype for seamlessly updating Linux kernel with application checkpoint-and-restart

Software Update linux