4 citations · 4 across the 11 of their papers we have counts for
3 papers · 1 filter
Trusting-Trust Attack against an Entire Linux Distribution through Binary Manipulation
Julien Malka, Aman Sharma, Martin Monperrus +2
Ken Thompson's trusting-trust attack, in which a compromised compiler backdoors the programs it builds and reproduces the backdoor in subsequent rebuilds of itself, is widely regar…
NICE: A Framework for Declarative and Machine-Checkable Vulnerability Reproduction
Minh-Luân Nguyen, Olivier Levillain, Julien Malka +2
Reproducing software vulnerabilities is fundamental to security researchers, open-source maintainers, and educators. Yet, vulnerabilities remain hard to reproduce today, and even w…
Did You Forkget It? Detecting One-Day Vulnerabilities in Open-source ForksWith Global History Analysis
Romain Lefeuvre, Charly Reux, Stefano Zacchiroli +2
Tracking vulnerabilities inherited from third-party open-source software is a well-known challenge, often addressed by tracing the threads of dependency information. However, vulne…