Cramming Software With Thousands of Fake Bugs Could Make It More Secure

guest · Aug 6, 2018

Cramming Software With Thousands of Fake Bugs Could Make It More Secure
August 06, 2018
https://motherboard.vice.com/en_us/article/43p7dm/software-chaff-bugs-could-make-it-more-secure

Carefully scatter non-exploitable decoy bugs in software, and attackers will waste time and resources on trying to exploit them. The hope is that attackers will get bored, overwhelmed, or run out of time and patience before finding an actual vulnerability.

Computer science researchers at NYU suggested this strategy in a study published August 2, and call these fake-vulnerabilities “chaff bugs.”

[...] limitations: It can’t be used on open-source software, you have to be positive that the chaff bugs are in fact harmless, it only works if it’s okay if the program crashes on malicious outputs, and you have to make sure the faux bugs are indistinguishable from naturally occurring bugs.

Whether this is smarter or more efficient that trying to write airtight code in the first place is yet to be seen—but as automated systems get smarter and faster at coming up with ways to defeat each other, it might be better to join them if we can’t beat them.
Click to expand...

Log in or Sign up

Cramming Software With Thousands of Fake Bugs Could Make It More Secure

guest Guest

Log in or Sign up

Cramming Software With Thousands of Fake Bugs Could Make It More Secure

guest Guest

Useful Searches