Transcode: Detecting Status Code Mapping Errors in Large-Scale Systems
Wensheng Tang,
Yikun HU,
Gang Fan,
Peisen Yao,
Rongxin Wu,
Guangyuan Bai,
Pengcheng Wang,
Charles Zhang
November, 2021
Abstract
Status code mappings reveal state shifts of a program, mapping one status code to another. Due to careless programming or the lack of the system-wide knowledge of a whole program, developers can make incorrect mappings. Such errors are widely spread across modern software, some of which have even become critical vulnerabilities. Unfortunately, existing solutions merely focus on single status code values, while never considering the relationships, that is, mappings, among them. Therefore, it is imperative to propose an effective method to detect status code mapping errors.
Publication
2021 36th IEEE/ACM International Conference on Automated Software Engineering (ASE)
Assistant Research Fellow
I am working in LoCCS at SJTU. My research interests focus on (AI-assisted) Program Analysis and its application to Software Security. We are looking for motivated students interested in Software Security or AI Security. Feel free to contact us please, if you have an interest in researching or interning in our lab.