Skip to main content

Debug/optimize/secure

Latest Innovations
A Systematic Approach to Uncover Security Flaws in GUI Logic Website spoofing, or phishing, is a serious problem targeting online user information. It can be used to steal usernames and passwords from important websites such... Read More Website spoofing, or phishing, is a serious problem targeting online user information. It can be used to steal usernames and passwords from important websites such as bank websites. Dr. Meseguer from the University of Illinois, jointly with Microsoft Research, developed a method for uncovering GUI logic flaws in software implementations. The systems specifically address status-bar spoofing and address bar spoofing scenarios but could also address a variety of other classes of problems.
iWatcher: Simple and General Architectural Support for Software Debugging Methods and systems for memory monitoring. A triggering access is detected at one or more monitored memory regions. When a triggering access is detected, a... Read More Methods and systems for memory monitoring. A triggering access is detected at one or more monitored memory regions. When a triggering access is detected, a function is accessed for determining a monitoring function, and a monitoring function associated with a particular triggered memory location address is automatically determined.
Application Level Hardware Tracing for Scaling Post-Silicon Debug Dr. Vasudevan from the University of IL has developed an advanced algorithm for optimizing design-for-debug hardware. This algorithm takes advantage of high level... Read More Dr. Vasudevan from the University of IL has developed an advanced algorithm for optimizing design-for-debug hardware. This algorithm takes advantage of high level abstraction to enable accurate bug localization, eliminating almost 90% of possible root causes in tests using an industrial SoC. This technology, which is broadly scalable versus existing methods, addresses a great need in the field of Electronic Design Automation by decreasing the cost and shortening the timescale of chip debugging, accelerating time-to-market and streamlining the post-silicon validation phase. Application: Incorporation into chip design and verification software Publication: Pal, D.; Sharma, A.; Ray, S.; de Paula, F. M.; and Vasudevan, S. In Proceedings of the 55th Annual Design Automation Conference, DAC 2018, San Francisco, CA, USA, June 24-29, 2018, pages 92:1–92:6, 2018.
Robust Obfuscation of Encrypted DNS Traffic against Advanced Traffic Analysis Attacks The Domain Name System (DNS) introduced in 1985 has been a security risk because it allowed internet users' online browsing activities to be tracked and analyzed. Despite... Read More The Domain Name System (DNS) introduced in 1985 has been a security risk because it allowed internet users' online browsing activities to be tracked and analyzed. Despite many protocols developed to encrypt DNS for the protection of user privacy, websites visited by users can still be identified with high accuracy based on gathered traffic pattern information. The invention here is an algorithm that incorporates a novel obfuscation method to websites, as demonstrated, encrypted with a DNS-over-HTTPS protocol. This new algorithm/method reduces the accuracy of traffic analysis from 97% to 7-9%.