Massachusetts Institute of Technology

Nikolaos Vasilakis

Martin Conway Rinard

A privilege metric application quantifies a privilege reduction for a subject software module M. Target critical resources Maccessible by the subject module are identified. Permissions P(M, M) for the subject module to access each of the target critical resources as a result of the privilege reduction are determined. Default library permissions P(M, M) without the privilege reduction are determined. A metric regarding the vulnerability reduction of P(M, M) with respect to P(M, M) is quantified.

Privilege metric for evaluating the security of a library

A system for analysis and steering use of online libraries, contains program source code comprising a plurality of modules, at least one third party library, and a processor and a memory configured to store non-transitory instructions that, when executed by the processor, run a module recontextualization application. The module recontextualization application is configured to decompose a program within the third-party library at boundaries of modules of the program, apply transformations to the decomposed program to insert analysis specific code, and reassemble individual components of the decomposed program to maintain original semantics of the program, while incorporating the transformations that were applied to the decomposed program.

Growing community of inventors

Somerville, MA, United States of America

Nikolaos Vasilakis