{"681635":{"#nid":"681635","#data":{"type":"event","title":"PhD Defense by Ammar Askar","body":[{"value":"\u003Cp\u003E\u003Cstrong\u003ETitle\u003C\/strong\u003E: Security and bug-finding in foreign function interfaces and multi-language programs\u003C\/p\u003E\u003Cp\u003E\u0026nbsp;\u003C\/p\u003E\u003Cp\u003E\u003Cstrong\u003EDate\u003C\/strong\u003E: Friday, April 18, 2025\u003C\/p\u003E\u003Cp\u003E\u003Cstrong\u003ETime\u003C\/strong\u003E: 1:00 PM \u2013 3:00 PM EST\u003C\/p\u003E\u003Cp\u003E\u003Cstrong\u003ELocation\u003C\/strong\u003E: (hybrid) CODA 1006 West End, and Zoom (\u003Ca href=\u0022https:\/\/gatech.zoom.us\/j\/98789993263\u0022\u003Ehttps:\/\/gatech.zoom.us\/j\/98789993263\u003C\/a\u003E)\u003C\/p\u003E\u003Cp\u003E\u0026nbsp;\u003C\/p\u003E\u003Cp\u003E\u003Cstrong\u003EAmmar\u0026nbsp;Askar\u003C\/strong\u003E\u003C\/p\u003E\u003Cp\u003ESchool of Computer Science \u0026amp; School of Cybersecurity and Privacy\u003C\/p\u003E\u003Cp\u003ECollege of Computing\u003C\/p\u003E\u003Cp\u003EGeorgia Institute of Technology\u003C\/p\u003E\u003Cp\u003E\u0026nbsp;\u003C\/p\u003E\u003Cp\u003E\u003Cstrong\u003ECommittee:\u003C\/strong\u003E\u003C\/p\u003E\u003Cp\u003EDr. Taesoo Kim \u003Cem\u003E(advisor)\u003C\/em\u003E, School of Cybersecurity and Privacy, Georgia Institute of Technology\u003C\/p\u003E\u003Cp\u003EDr. Brendan D. Saltaformaggio, School of Cybersecurity and Privacy, Georgia Institute of Technology\u003C\/p\u003E\u003Cp\u003EDr. Qirun Zhang - School of Computer Science, Georgia Institute of Technology\u003C\/p\u003E\u003Cp\u003EDr. Alessandro Orso - School of Computer Science, Georgia Institute of Technology\u003C\/p\u003E\u003Cp\u003EDr. Sangho Lee - Redmond Security Research Group, Microsoft Research\u003C\/p\u003E\u003Cp\u003E\u0026nbsp;\u003C\/p\u003E\u003Cp\u003E\u003Cstrong\u003EAbstract:\u003C\/strong\u003E\u003C\/p\u003E\u003Cp\u003EModern programs often require the use of multiple programming languages. High level languages like Java and Python allow rapid prototyping and fast development speeds without having to worry about low level details such as memory management. However, due to performance constraints, and to interface with many foundational libraries, it is sometimes necessary to write code in low level languages such as C.\u003C\/p\u003E\u003Cp\u003E\u0026nbsp;\u003C\/p\u003E\u003Cp\u003EDue to the differences in the semantics and security considerations in different languages, there is a likelihood of security issues being introduced when programmers context-switch between writing in multiple languages. For example, a programmer who is used to array accesses being bounds-checked by the language may end up introducing a spatial memory-safety issue with an out of bounds access. One who is unfamiliar with the nuances of manual memory management may introduce a use-after-free vulnerability.\u003C\/p\u003E\u003Cp\u003E\u0026nbsp;\u003C\/p\u003E\u003Cp\u003EThis thesis presents how the use of synthesized fuzzing harnesses can explore program and data flow in one language that triggers bugs in the foreign language. We also propose a novel new method of applying concolic execution to a variety of programming languages. Through this technique, the process of implementing concolic execution only requires simple debugging primitives and uses LLMs to ease the implementation burden. This technique can be applied to multi-language programs to find bugs between them.\u0026nbsp;\u003C\/p\u003E\u003Cp\u003E\u0026nbsp;\u003C\/p\u003E","summary":"","format":"limited_html"}],"field_subtitle":"","field_summary":[{"value":"\u003Cp\u003ESecurity and bug-finding in foreign function interfaces and multi-language programs\u003C\/p\u003E","format":"limited_html"}],"field_summary_sentence":[{"value":"Security and bug-finding in foreign function interfaces and multi-language programs"}],"uid":"27707","created_gmt":"2025-04-07 18:51:36","changed_gmt":"2025-04-07 18:52:04","author":"Tatianna Richardson","boilerplate_text":"","field_publication":"","field_article_url":"","field_event_time":{"event_time_start":"2025-04-18T13:00:00-04:00","event_time_end":"2025-04-18T15:00:00-04:00","event_time_end_last":"2025-04-18T15:00:00-04:00","gmt_time_start":"2025-04-18 17:00:00","gmt_time_end":"2025-04-18 19:00:00","gmt_time_end_last":"2025-04-18 19:00:00","rrule":null,"timezone":"America\/New_York"},"location":"CODA 1006 West End, and Zoom ","extras":[],"groups":[{"id":"221981","name":"Graduate Studies"}],"categories":[],"keywords":[{"id":"100811","name":"Phd Defense"}],"core_research_areas":[],"news_room_topics":[],"event_categories":[{"id":"1788","name":"Other\/Miscellaneous"}],"invited_audience":[{"id":"78771","name":"Public"}],"affiliations":[],"classification":[],"areas_of_expertise":[],"news_and_recent_appearances":[],"phone":[],"contact":[],"email":[],"slides":[],"orientation":[],"userdata":""}}}