IEEE Security & Privacy · 2011 · 34 citations · 2 references
ComputingComputer ScienceCybersecurityComputer SecuritySoftware EngineeringVulnerability AnalysisSoftware Security EngineeringSoftware Vulnerability DiscoveryVulnerability ManagementAutomated Vulnerability DetectionVulnerability DetectionVulnerability Discovery
This paper discussed why academic research has failed to create effective vulnerability detection software and offer some suggestions on how we can reap practical benefits from future research. The reasons for this failure also help explain why this software can't be completely automatic but must in corporate human knowledge and capabilities to be effective.
2
AEG: Automatic Exploit Generation
Thanassis Avgerinos, Brent Lim Tze Hao, David Brumley · Figshare · 2018 · 209 citations · Full text
Charlie Miller, Noah M. Johnson, Stephen McCamant et al. · 2010 · 26 citations