Title:
VULNERABILITY DISCOVERY DEVICE, VULNERABILITY DISCOVERY METHOD, AND VULNERABILITY DISCOVERY PROGRAM
Document Type and Number:
WIPO Patent Application WO/2024/079793
Kind Code:
A1
Abstract:
This vulnerability discovery device (10) includes: a virtual machine analyzing unit (121) that analyzes the VM of a script engine; a command set architecture analyzing unit (122) that analyzes a command set architecture that is a system of VM commands, collects the VM commands, and determines the command content of the collected VM commands; and a vulnerability discovery unit (123) that uses a mutated code to perform fuzzing on the VM on the basis of architecture information acquired by the virtual machine analyzing unit (121) and the command set architecture analyzing unit (122).
Inventors:
USUI TOSHINORI (JP)
KAWAKOYA YUHEI (JP)
IWAMURA MAKOTO (JP)
KAWAKOYA YUHEI (JP)
IWAMURA MAKOTO (JP)
Application Number:
PCT/JP2022/037924
Publication Date:
April 18, 2024
Filing Date:
October 11, 2022
Export Citation:
Assignee:
NIPPON TELEGRAPH & TELEPHONE (JP)
International Classes:
G06F21/57
Domestic Patent References:
| WO2022180702A1 | 2022-09-01 |
Other References:
USUI, TOSHINORI; IKUSE, TOMONORI; KAWAKOYA, YUHEI; IWAMURA, MAKOTO; MATSUURA, KANTA: "Automatically Appending Execution Stall/Stop Prevention to Vanilla Script Engines", IPSJ COMPUTER SECURITY SYMPOSIUM (CSS 2021); OCTOBER 26-29, 2021, INFORMATION PROCESSING SOCIETY OF JAPAN (IPSJ), vol. 2021, 1 January 2021 (2021-01-01) - 29 October 2021 (2021-10-29), pages 794 - 801, XP009554372
KYLE STEPHEN S.KYLE@ED.AC.UK; LEATHER HUGH HLEATHER@INF.ED.AC.UK; FRANKE BJöRN BFRANKE@INF.ED.AC.UK; BUTCHER DAVE DAVE.BUTCHE: "Application of Domain-aware Binary Fuzzing to Aid Android Virtual Machine Testing", ACM SIGPLAN NOTICES, ASSOCIATION FOR COMPUTING MACHINERY, US, vol. 50, no. 7, 14 March 2015 (2015-03-14), US , pages 121 - 132, XP058493219, ISSN: 0362-1340, DOI: 10.1145/2817817.2731198
YUTING CHEN ; TING SU ; ZHENDONG SU: "Deep differential testing of JVM implementations", SOFTWARE ENGINEERING, IEEE PRESS, 25 May 2019 (2019-05-25) - 31 May 2019 (2019-05-31), pages 1257 - 1268, XP058432850, DOI: 10.1109/ICSE.2019.00127
KYLE STEPHEN S.KYLE@ED.AC.UK; LEATHER HUGH HLEATHER@INF.ED.AC.UK; FRANKE BJöRN BFRANKE@INF.ED.AC.UK; BUTCHER DAVE DAVE.BUTCHE: "Application of Domain-aware Binary Fuzzing to Aid Android Virtual Machine Testing", ACM SIGPLAN NOTICES, ASSOCIATION FOR COMPUTING MACHINERY, US, vol. 50, no. 7, 14 March 2015 (2015-03-14), US , pages 121 - 132, XP058493219, ISSN: 0362-1340, DOI: 10.1145/2817817.2731198
YUTING CHEN ; TING SU ; ZHENDONG SU: "Deep differential testing of JVM implementations", SOFTWARE ENGINEERING, IEEE PRESS, 25 May 2019 (2019-05-25) - 31 May 2019 (2019-05-31), pages 1257 - 1268, XP058432850, DOI: 10.1109/ICSE.2019.00127
Attorney, Agent or Firm:
SAKAI INTERNATIONAL PATENT OFFICE (JP)
Download PDF: