Automated Explotability Reasoning

Determining the severity of a crash in an application is a vital but time-consuming step in security research. The objective of this research project is to develop a system that can be used to automatically measure and triage the exploitability of crashes. In Phase 1 Trail of Bits performed a survey of extant crash triage tools and approaches and developed a prototype tool for crash triage. Current crash triage tools require an experienced end user to both provide useful input as well as to interpret results in a meaningful fashion. Phase 2 will pursue development of fuzzing and crash triage as a service. The service will reduce the level of expertise and time required to make effective use of fuzzing and crash triage technology. Automated fuzzing and crash triage as a service could find application by governmental and commercial entities for both offensive and defensive security applications. The fully-developed service could provide a low-effort security evaluation for application developers lacking in-house security expertise or the requisite time to develop such expertise.