- Read : https://www.cs.purdue.edu/mlg2011/papers/paper_1.pdf
- Create function that parses through a JSON and generates the values for each of the relevant attributes mentioned in this paper.
- Read about the severity function from: https://mediatum.ub.tum.de/doc/1329071/1329071.pdf
- Learn to use the correlation function (https://docs.scipy.org/doc/numpy/reference/generated/numpy.corrcoef.html)
- Transform .dot graphs to .json (dot_to_json.py)
- Compile all programs with make+llvm.
- Check for dependencies, and install them
- Create callgraphs for all of them.
- Mark functions that have the vulnerabilities.
- How to extract callgraphs using LLVM Opt.
- Get NVD bugs for 15 years ( for the ones that have CVSS3 available )
- Filter entries by CVSS3 and CVE_probelmtype_data = CWE-119
- Description must value must have "function" and ".c"
- For all filtered bugs get program name, version and link
- Download sources of filtered programs.
- Google Sheets link to Saahil. Create a tuple for each individual program.
- Proposal on user interface for assessment tool. (Wireframe only)
- Look at the complete output of Macke on Kaleidoscope programs. (Don't save in /tmp)
- Which fields are indicative of attack complexity and why?
- Look at GNU Bugzilla repositories to learn about known severities.
- List all required and optional fields in Bugzilla.
- Which fields are indicative of attack complexity?
- Read papers regarding CVSS (https://www.first.org/cvss/calculator/3.0)
- Solve a maze using KLEE (https://feliam.wordpress.com/2010/10/07/the-symbolic-maze/)
- Read papers for severity assessment
- Send docker link to thomas and saahil by email (ricardonales/macke:0.6)
- Run KLEE on all Kaleidoscope programs
- Install macke from tum-i22 github page
- Run all kaleidoscope programs with Macke
- Play around with all options
- Run with multiple time limits (per function)
- Look at the outputs, and compare to KLEE outputs
- Create Bitbucket repo and grant me (“saahil") access.
- List of programs for which bitcodes can be automatically generated. https://github.com/hutoTUM/bitcode-kaleidoscope
- Run tutorial one and two from KLEE’s website. https://klee.github.io
- Read Macke paper (attached) and its related works.