Automatic vulnerability detection and repair

• Main Author: MA, Siqi
• Format: text
• Language: English
• Published: Institutional Knowledge at Singapore Management University 2018
• Subjects: Vulnerability detection; Vulnerability repair; Mobile application; Cryptographic misuse; Authentication misuse; Databases and Information Systems
• Online Access: https://ink.library.smu.edu.sg/etd_coll/185; https://ink.library.smu.edu.sg/cgi/viewcontent.cgi?article=1185&context=etd_coll
• Institution: Singapore Management University

Vulnerability becomes a major threat to the security of many systems, including computer systems (e.g., Windows and Linux) and mobile systems (e.g., Android and iOS). Attackers can steal private information and perform harmful actions by exploiting unpatched vulnerabilities. Vulnerabilities often remain undetected for a long time as they may not affect the typical functionalities of systems. Thus, it is important to detect and repair a vulnerability in time. However, it is often difficult for a developer to detect and repair a vulnerability correctly and timely if he/she is not a security expert. Fortunately, automatic repair approaches significantly assist developers to deal with different types of vulnerabilities. There are lots of work to detect different vulnerabilities, and only few vulnerability repair approaches are proposed to repair certain types of vulnerabilities.