Greybox fuzzing has been the most scalable and practical approach to software testing.
Most greybox fuzzing tools are coverage guided as code coverage is strongly correlated …

Direct Memory Access (DMA) is a popular mechanism for improving hardware I/O
performance, and it has been widely used by many existing device drivers. However, DMA …

Discovering kernel concurrency bugs through fuzzing is challenging. Identifying kernel
concurrency bugs, as opposed to non-concurrency bugs, necessitates an analysis of …

Code-reuse attacks are dangerous threats that attracted the attention of the security
community for years. These attacks aim at corrupting important control-flow transfers for …

Double-fetch bugs are a plague across all major operating system kernels. They occur when
data is fetched twice across the user/kernel trust boundary while allowing concurrent …

File-based Time-of-Check to Time-of-Use (TOCTOU) race conditions are a well-known type
of security vulnerability. A wide variety of techniques have been proposed to detect, mitigate …

Trusted execution environments, such as Intel SGX, allow executing enclaves shielded from
the rest of the system. This fosters new application scenarios not only in cloud settings but …

Currently, in Android, applications (apps for short) rely heavily on external storage to provide
their services. Race conditions are introduced by the inappropriate file operations. Through …

Greybox fuzzing is a scalable and practical approach for software testing. Most greybox
fuzzing tools are coverage‐guided as reaching high code coverage is more likely to find …

The double fetch problem occurs when the data is maliciously changed between two kernel
reads of the supposedly same data, which can cause serious security problems in the …