Fri, Jun 23, 2017 | updated 11:06 PM IST

Adding bugs to build better computer bug-finder

Updated: Jul 10, 2016 12:12 IST      
Adding bugs to build better computer bug-finder

Washington D.C, Jul 10 (ANI): A team of researchers has come up with a new strategy that can help train bug-finding tools to catch more vulnerabilities.

Researchers at the New York University Tandon School of Engineering, in collaboration with the MIT Lincoln Laboratory and Northeastern University, are taking an unorthodox approach: Instead of finding and remediating bugs, they're adding them by the hundreds of thousands.

Brendan Dolan-Gavitt is a co-creator of LAVA, or Large-Scale Automated Vulnerability Addition, a technique of intentionally adding vulnerabilities to a program's source code to test the limits of bug-finding tools and ultimately help developers improve them. In experiments using LAVA, they showed that many popular bug finders detect merely 2 percent of vulnerabilities.

Dolan-Gavitt explained that the efficacy of bug-finding programs is based on two metrics: the false positive rate and the false negative rate, both of which are notoriously difficult to calculate. It is not unusual for a program to detect a bug that later proves not to be there - a false positive, and to miss vulnerabilities that are actually present - a false negative. Without knowing the total number of real bugs, there is no way to gauge how well these tools perform.

"The only way to evaluate a bug finder is to control the number of bugs in a program, which is exactly what we do with LAVA," said Dolan-Gavitt. The automated system inserts known quantities of novel vulnerabilities that are synthetic yet possess many of the same attributes as computer bugs in the wild.

Dolan-Gavitt and his colleagues dodged the typical five-figure price tag for manual, custom-designed vulnerabilities and instead created an automated system that makes judicious edits in real programs' source code.

The result: hundreds of thousands of unstudied, highly realistic vulnerabilities that are inexpensive, span the execution lifetime of a program, are embedded in normal control and data flow, and manifest only for a small fraction of inputs lest they shut the entire program down. The researchers had to create novel bugs, and in significant numbers, in order to have a large enough body to study the strengths and shortcomings of bug-finding software. Previously identified vulnerabilities would easily trip current bug finders, skewing the results.

The team tested existing bug-finding software and found that just 2 percent of bugs created by LAVA were detected. Dolan-Gavitt explained that automated bug identification is an extremely complex task that developers are constantly improving. The researchers will share their results to assist these efforts.

The research was presented at the IEEE Symposium on Security and Privacy and was published in the conference proceedings. (ANI)

New Delhi [India], June 23 (ANI): Global mobile technology company OnePlus on Thursday launched its most awaited flagship 'OnePlus 5' in India priced at Rs. 32,999 for the 6GB RAM and 64GB storage version and Rs. 37,999 for 88GB RAM and 128GB storage version.

Full Story >>

New Delhi [India], June 23 (ANI): Social media giant Facebook has finally set up its new 'Group Insights' feature to enable proper administration of groups administrators (admins) to hold a more stringent check of the content being posted online.

Full Story >>

Online banking users to reach 150 billion by 2020: Study

Updated: Jun 22, 2017 16:35 IST     

New Delhi [India], June 22 (ANI): With the ongoing digital drive in India, the number of users opting for online banking is expected to double to reach 150 million mark by 2020, from the current 45 million active urban online banking users in India, according to a report drafted by Facebook and The Boston Consulting Group (BCG).

Full Story >>

Video-calling made easier with Google Allo's latest update

Updated: Jun 22, 2017 14:46 IST     

New Delhi [India], June 22 (ANI): With the latest update on Allo messaging app, users can now make video calls using Google Duo, without going to the app itself!

Full Story >>

Instagram Stories now has 250m users, new 'replay' feature

Updated: Jun 21, 2017 17:38 IST     

New Delhi [India], June 21 (ANI): Commemorating its achievement of registering 250 million daily users on its 'Stories' feature, social media engagement platform Instagram on Wednesday announced an update to its 'Live Video' segment.

Full Story >>

HP Inc. introduces two new convertible notebooks

Updated: Jun 21, 2017 15:22 IST     

New Delhi [India], June 21 (ANI): Aiming to instill creativity among students, professionals and millennials, HP Inc. on Wednesday introduced two new convertible notebooks - HP Pavillion x360 and HP Spectre x360, enabled with Windows Ink capabilities.

Full Story >>

New Delhi [India], June 20 (ANI): In a bid to inspire art enthusiasts around the world to brush up their art knowledge and become art experts, Google has announced the latest updates on Search and Maps driving newer ways to experience artworks online.

Full Story >>

Hike launches wallet, UPI payments for quick transactions

Updated: Jun 20, 2017 17:32 IST     

New Delhi [India], June 20 (ANI): Home-grown messaging platform Hike Messenger on Tuesday launched the feature of 'Hike Wallet' on its all-new visually unique version Hike 5.0 to send and receive money in the most easiest manner.

Full Story >>

Waterloo [Ontario], June 20 (ANI): BlackBerry Limited on Tuesday announced productivity and security enhancements to its enterprise software platform designed to power the 'Enterprise of Things'.

Full Story >>

New Delhi [India], June 20 (ANI):The crippling financial implications of online banking security incidents have been brought to light by the latest Kaspersky Lab report into cyber security threats in the financial sector.

Full Story >>

New Delhi [India], June 19 (ANI): India's leading mobility solutions provider Avis India has announced the launch of its mobile app to enable Chauffeur Drive and Self Drive rentals in India.

Full Story >>

Google marks Father's Day through special doodle

Updated: Jun 18, 2017 08:10 IST     

New Delhi [India], June 18 (ANI): Google today is celebrating Father's Day 2017 dedicating an endearing doodle to all the fathers out there.

Full Story >>

Fujifilm launches Instax mini 9 cameras with selfie mirror

Updated: Jun 15, 2017 23:47 IST     

New Delhi [India], June 15 (ANI): Fujifilm India Pvt Ltd., on Thursday announced the launch of its new iconic Instax mini 9 instant camera, built in with a selfie mirror and close-up lens.

Full Story >>

New Delhi [India], June 15 (ANI-NewsVoir): Alibaba Mobile Business Group, part of Alibaba Digital Media and Entertainment, has announced the appointment of Damon Xi as Head of UCWeb India and Indonesia office.

Full Story >>

New Delhi [India], June 15(ANI): Toreto, a leading aggregator of portable technology on Wednesday launched its water-resistant Bluetooth earphone, 'TBE-804 Blare', best suited for sports enthusiasts.

Full Story >>

Accenture envisioning gender-balanced workforce by 2025

Updated: Jun 15, 2017 00:47 IST     

New Delhi [India], June 15 (ANI): Accenture on Wednesday announced its vision to achieve a gender-balanced workforce by 2025, with 50 percent women and 50 percent men.

Full Story >>

Instagram introduces new 'archive' feature

Updated: Jun 14, 2017 19:12 IST     

New Delhi [India] June 14 (ANI): Now, you can re-visit your old posts and enjoy those passed-by moments on Instagram.

Full Story >>

New Delhi [India] June 14 (ANI): South Korean multinational Samsung on Wednesday launched its anticipated Samsung Galaxy J7 Max and Samsung Galaxy J7 Pro, expanding its best-selling mid-range of Galaxy J smart phones.

Full Story >>

New Delhi [India], June 14 (ANI): Ericsson in its Mobility Report 2017 releases today has reported key trends and forecasts on mobile traffic, subscriptions, consumer behavior and technology uptake in India.

Full Story >>

New Delhi [India] June 14 (ANI): In continuation of its commitment to digitally empower India's small and medium business community, Google on Wednesday announced the launch of a new simple, free, and fast way to build a website through Google My Business.

Full Story >>