Abstract

This talk will cover results of collaborative research between SSLab in Georgia Tech and the affiliated institute of ETRI. Our research focused on finding security bugs in commodity software by using concolic testing. We could automatically disclose many crashes in Windows kernel drivers using our practical concolic testing tool, CAB-Fuzz. We reported all crashes to venders. Microsoft and ESET confirmed that four of them are new vulnerabilities to be fixed. In this talk, we will explain problems and solutions of concolic testing in Windows kernel drivers.