The Johns Hopkins University

Ryan W Gardner

C Durward McDonell, Iii

Margaret F Lospinuso

Laura J Glendenning

Douglas Charles Schmidt

Jonathan D Cohen

David R Zaret

David J Heine

Nathan S Reller

Sakunthala Harshavardhana

David P Silberberg

Benjamin R Salazar

Forest C Deal, Jr

Vina H Nguyen

Yanni A Kouskoulas

David M Patrone

Robert T Hider

Dennis S Patrone

A method executable via operation of configured processing circuitry to identify vulnerabilities in program code may include receiving a program and employing a disassembler to disassemble the program, generating a function call tree for the program based on disassembly of the program, receiving an indication of a post condition for which analysis of the program is desired, transforming program statements into logical equations, simplifying the logical equations, propagating post conditions backwards via Dijkstra's weakest precondition variant, analyzing aliases and processing loops to generate a precondition, and using an automated solver to determine whether the precondition is realizable and, if so, providing program inputs required to realize the precondition.

Method and apparatus for automated vulnerability detection

An apparatus for identifying related code variants may include processing circuitry configured to execute instructions for receiving query binary code, processing the query binary code to generate one or more query code fingerprints comprising compressed representations of respective functional components of the query binary code, comparing the one or more query code fingerprints to at least some reference code fingerprints stored in a database to determine a similarity measure between the one or more query code fingerprints and at least some of the reference code fingerprints, and preparing at least one report based on the similarity measure.

Apparatus and method for identifying related code variants in binaries

Growing community of inventors

Columbia, MD, United States of America

Ryan W Gardner