20 citations · 66 across the 15 of their papers we have counts for
15 papers
EDEFuzz: A Web API Fuzzer for Excessive Data Exposures
Lianglu Pan, Shaanan Cohney, Toby Murray +1
APIs often transmit far more data to client applications than they need, and in the context of web applications, often do so over public channels. This issue, termed Excessive Data…
A Hoare Logic with Regular Behavioral Specifications
Gidon Ernst, Alexander Knapp, Toby Murray
We present a Hoare logic that extends program specifications with regular expressions that capture behaviors in terms of sequences of events that arise during the execution. The id…
State Selection Algorithms and Their Impact on The Performance of Stateful Network Protocol Fuzzing
Dongge Liu, Van-Thuan Pham, Gidon Ernst +2
The statefulness property of network protocol implementations poses a unique challenge for testing and verification techniques, including Fuzzing. Stateful fuzzers tackle this chal…
SecRSL: Security Separation Logic for C11 Release-Acquire Concurrency (Extended version with technical appendices)
Pengbo Yan, Toby Murray
We present Security Relaxed Separation Logic (SecRSL), a separation logic for proving information-flow security of C11 programs in the Release-Acquire fragment with relaxed accesse…
Deductive Verification via the Debug Adapter Protocol
Gidon Ernst, Johannes Blau, Toby Murray
We propose a conceptual integration of deductive program verification into existing user interfaces for software debugging. This integration is well-represented in the "Debug Adapt…
Compositional Vulnerability Detection with Insecurity Separation Logic (Extended Version)
Toby Murray, Pengbo Yan, Gidon Ernst
Memory-safety issues and information leakage are known to be depressingly common. We consider the compositional static detection of these kinds of vulnerabilities in first-order C-…