An Exploration of Automated Software Testing, Verification, and Repair Strategies using ESBMC and ChatGPT
In this talk, I’ll discuss automated testing, verification, and repair techniques that establish a robust foundation for building secure software systems. We’ll begin by exploring security concepts, demystifying traditional notions and vulnerabilities unique to (low-level) software systems. Building on this, we’ll dive into cutting-edge methods, covering state-of-the-art testing, verification, and repair techniques. This dynamic spectrum spans fuzzing, model checking, constraint programming, and abstract interpretation for vulnerability detection using ESBMC; we’ll also touch on leveraging large language models for root cause analysis and program repair using ChatGPT. Lastly, I’ll showcase recent achievements highlighting a hybrid approach for safeguarding against embedded software’s memory safety and concurrency vulnerabilities. This forward-looking combined approach employs a logic-based automated reasoning framework as its main ingredient, thoughtfully examining search, learning, memory, and parallelization aspects. Throughout the talk, practical examples will bring concepts to life, spanning scenarios such as inspecting firmware security vulnerabilities in modern processors and ensuring the integrity of communication protocols.
Mon 11 SepDisplayed time zone: Amsterdam, Berlin, Bern, Rome, Stockholm, Vienna change
09:00 - 10:00 | |||
09:00 60mTalk | An Exploration of Automated Software Testing, Verification, and Repair Strategies using ESBMC and ChatGPT [Workshop] CPAchecker Lucas C. Cordeiro University of Manchester, UK and Federal University of Amazonas, Brazil Link to publication |