Galois Open Sources Tools for Finding Vulnerabilities in C, C++ Code

guest · Sep 3, 2022

By Ionut Arghire - August 29, 2022

Galois, a firm specialized in the research and development of new technologies, has open sourced a suite of tools for identifying vulnerabilities in C and C++ code.

Dubbed MATE, the tools are the result of a collaborative effort supported by the United States Air Force and Defense Advanced Research Project Agency (DARPA).
Click to expand...

Now available under the BSD 3-clause license, MATE relies on code property graphs (CPGs) for static program analysis, and can identify application-specific bugs that depend on implementation details and high-level semantics.

The CPG includes a target’s abstract syntax tree (AST), call graph (CG), control-flow graph (CFG), inter-procedural control-flow graph (ICFG), inter-procedural dataflow-graph (DFG), control-dependence graph (CDG), memory layout and DWARF type graph, points-to graph (PTG), and source-code to machine-code mapping.
Click to expand...

The suite includes several applications built on top of the foundation of the CPG, including Flowfinder, MATE Notebooks, MATE POIs, and Mantiserve.

In addition to helping researchers hunt for bugs in C and C++ applications, MATE is also meant to help with the integration of the CPG and corresponding Python API into other programs.
Click to expand...

MATE: Merged Analysis To prevent Exploits

MATE is a suite of tools for interactive program analysis with a focus on hunting for bugs in C and C++ code. MATE unifies application-specific and low-level vulnerability analysis using code property graphs (CPGs), enabling the discovery of highly application-specific vulnerabilities that depend on both implementation details and the high-level semantics of target C/C++ programs.

For a high-level overview of MATE, see Overview. To start using MATE to explore a program, see Quick Start. Contributors should read Hacking on MATE.
Click to expand...

The source code and documentation are available online.
Click to expand...

Log in or Sign up

Galois Open Sources Tools for Finding Vulnerabilities in C, C++ Code

guest Guest

Log in or Sign up

Galois Open Sources Tools for Finding Vulnerabilities in C, C++ Code

guest Guest

Useful Searches