Michael Ernst, page 1 Application Communities: Next steps MIT & Determina October 2006

Michael Ernst, page 2 Instrumentation Client Interface: Done: Working prototype - proof-of-concept integration with Daikon toolchain QA-certified client interface. Integrate symbol info when available Application State Probing: Create probes to test control flow over patches Liveshield coordination center: Import and deploy probes, and return data from them Hybrid System for Binary Analysis: Import a saved code cache from a previous or separate run.

Michael Ernst, page 3 Learning Windows executables Extend prototype tracing tool (e.g., pointers) Infer debug information from binaries Static and dynamic analysis Scale to larger programs Algorithmic changes to take advantage of falsifications Reduce false positives Statistical and machine learning approaches Mitigation strategies Repair or other approaches

Michael Ernst, page 4 Mutability inference and modeling Modeling Use generated tests Find anomalies before deployment Enrich models: augment user-supplied executions Apply models to anomaly detection Mutability More output: Enrich tracing tool Less output (& improve efficiency) Ignore non-modifying calls

Michael Ernst, page 5 Community Collaborative learning Communication of learned models, and attacks, to central resource Distribution of specifications, patches Proactive Situation Awareness: Done: Study of enterprise requirements Done: Community awareness initial experiment Prototype system implementation AC testbed: Put together the AC testbed Create initial scenarios

Michael Ernst, page 6 Evaluation Choose specific programs Select metrics Run experiments