Závěrečná práce: Bc. Pavol Žáčik: Analyzing semantic stability of cryptography libraries using Diffkemp
Diplomová práce
Analyzing semantic stability of cryptography libraries using Diffkemp
Anotace
DiffKemp je nástroj pre statickú analýzu sémantickej ekvivalencie rôznych verzií projektov napísaných v jazyku C. Na rozdiel od iných nástrojov s rovnakým účelom využíva iba jednoduché formálne metódy, vďaka čomu je schopný dobre škálovať aj pri veľkých projektoch. Hlavným kompromisom je jeho obmedzená účinnosť, konkrétne hlásenie sémantických rozdielov, ktoré nie sú skutočné. Táto práca navrhuje poloautomatickú …více
Abstract
DiffKemp is a static analysis tool for checking the semantic equivalence of different versions of C projects. Unlike other tools with the same purpose, it employs only lightweight formal methods, which allows it to scale well with large code bases. The main trade-off is its effectiveness, namely the presence of reported semantic differences that are not genuine. This thesis proposes a semi-automatic …více
Zadání práce
Diffkemp is a static analysis tool for evaluating semantic differences between different versions of large-scale C projects. Its main focus is the Linux kernel, but it can also be used on other projects, such as cryptography libraries. Within this thesis, the student will:
- Use Diffkemp to evaluate semantic differences in API functions of three cryptographic libraries across multiple (10+) releases.
- Analyze the reported semantic differences, enumerate true positives and false positives. Look for common patterns in the results and compare the results across the libraries. Comment on any major inconsistencies in the behavior of the libraries, if such are found.
- Based on the previous step, propose and implement improvements of Diffkemp which mitigate some of the false positives.
17. 12. 2023 22:29, RNDr. Martin Ukrop, Ph.D., učo 374297
Konzultant
KPSK FI MU
Práce na příbuzné téma
Seznam prací, které mají shodná klíčová slova.
-
Enhancing DiffKemp to Support Generic Projects
Mgr. Tomáš Glozar, učo 492787 -
Detecting cryptographic primitives in malicious Windows binaries
Mgr. Mykhailo Klunko -
Reduced product of abstract domains
Mgr. Jan Dupal -
Zjišťování podobnosti malware
Mgr. Ondřej Fujtík -
Symbolic-size Memory Allocation Support for Klee
Mgr. Michael Šimáček -
Slicing of Parallel Programs
Mgr. Lukáš Tomovič -
Detecting Overcomplicated Conditions in Student Code
Bc. Daniel Czinege -
Survey of cryptographic pairing schemes
Mgr. Adam Mariš




