Demonstration venue · read-only. Every page can be browsed; the buttons that would change it are switched off. Create an account to run TaxoReview on your own data. A simulation from public publication records: the people listed were not invited and did not agree to review.
? Tutorial for this page

Jake Corina

dblp:205/2073 · DBLP profile ↗
← Back
3ranked-venue papers
1as first author
1since 2021 · last 2021
—ORCID · none

Domains — the database's venue-derived domains; a paper can count in several

Security and privacy · 3 · 1 first-author · 1 since 2021

Expertise — from the expertise taxonomy: the topics of the expert's papers under the CCF categories. A weight counts papers with recency: 1 for a paper about the topic, 0.3 when the topic is its context, halved every five years.

Software engineering, system software, and programming languages
3 papers
Program analysis · 54% Software testing · 46%
Network and information security
3 papers
Systems and software security · 100%

Topics — the 5 heaviest of 5, each with the papers that count most for it

TopicWeightPapersLastEvidence papers
Program analysis
static analysis
0.622017
DR. CHECKER: A Soundy Analysis for Linux Kernel Drivers · USENIX Security Symposium 2017
DIFUZE: Interface Aware Fuzzing for Kernel Drivers · CCS 2017
Software testing
fuzzing
0.512021
Token-Level Fuzzing · USENIX Security Symposium 2021
Systems and software security
vulnerability discovery
0.422021
DIFUZE: Interface Aware Fuzzing for Kernel Drivers · CCS 2017
Token-Level Fuzzing · USENIX Security Symposium 2021
Systems and software security › vulnerability discovery › fuzzing
kernel driver fuzzing
0.312017
DIFUZE: Interface Aware Fuzzing for Kernel Drivers · CCS 2017
Systems and software security
operating system security
0.312017
DR. CHECKER: A Soundy Analysis for Linux Kernel Drivers · USENIX Security Symposium 2017

Methods — techniques the papers use, named apart from their topics

fuzzing · 1.6static analysis · 1.1pointer analysis · 0.6
YearPublicationVenuePosition
2021 Token-Level Fuzzing
Christopher Salls, Chani Jindal, Jake Corina, Christopher Krügel, Giovanni Vigna
USENIX Security Symposium3
2017 DIFUZE: Interface Aware Fuzzing for Kernel Drivers
abstract
Device drivers are an essential part in modern Unix-like systems to handle operations on physical devices, from hard disks and printers to digital cameras and Bluetooth speakers. The surge of new hardware, particularly on mobile devices, introduces an explosive growth of device drivers in system kernels. Many such drivers are provided by third-party developers, which are susceptible to security vulnerabilities and lack proper vetting. Unfortunately, the complex input data structures for device drivers render traditional analysis tools, such as fuzz testing, less effective, and so far, research on kernel driver security is comparatively sparse. In this paper, we present DIFUZE, an interface-aware fuzzing tool to automatically generate valid inputs and trigger the execution of the kernel drivers. We leverage static analysis to compose correctly-structured input in the userspace to explore kernel drivers. DIFUZE is fully automatic, ranging from identifying driver handlers, to mapping to device file names, to constructing complex argument instances. We evaluate our approach on seven modern Android smartphones. The results show that DIFUZE can effectively identify kernel driver bugs, and reports 32 previously unknown vulnerabilities, including flaws that lead to arbitrary code execution.
Jake Corina, Aravind Machiry, Christopher Salls, Yan Shoshitaishvili, Shuang Hao 0001, Christopher Krügel, Giovanni Vigna
CCS1
2017 DR. CHECKER: A Soundy Analysis for Linux Kernel Drivers
Aravind Machiry, Chad Spensky, Jake Corina, Nick Stephens, Christopher Krügel, Giovanni Vigna
USENIX Security Symposium3