S2E Lab Research


Stats

Description

As part of my senior year, I took a credit in research with the S2E Lab headed by Professor da Silva Santos. My portion of research was in the Synthetic-VCCs project, a resource of vulnerable code commits to be used in further projects. The test scripts that I analyzed looked at a vulnerable snippet of code from a dataset, as well as which line the vulnerability was at. Then, the test would see if the transformer correctly could, based on what the vulnerable line of code was, edit other lines of code in the document so that the vulnerability reported would be removed. For example, a vulnerability in a variable declaration might track and remove/edit lines of code using that variable so that the code would no longer be vulnerable. This could be used to create an example of a change that presents a vulnerability. Based on a few example test scripts, I ran a few extra tests and found a couple curiosities to present, such as possible attempts to remove a line multiple times or long run times.