Domenico Cotroneo

EVIL: Exploiting Software via Natural Language

2021

Writing exploits for security assessment is a challenging task. The writer needs to master programming and obfuscation techniques to develop a successful exploit. To make the task easier, we propose an approach (EVIL) to automatically …

IRIS: a Record and Replay Framework to Enable Hardware-assisted Virtualization Fuzzing

2023

Nowadays, industries are looking into virtualization as an effective means to build safe applications, thanks to the isolation it can provide among virtual machines (VMs) running on the same hardware. In this context, a fundamental …

Neural Fault Injection: Generating Software Faults from Natural Language

2024 · arXiv (Cornell University)

Traditional software fault injection methods, while foundational, face limitations in adequately representing real-world faults, offering customization, and requiring significant manual effort and expertise. This paper introduces a novel methodology that harnesses the capabilities of Large …