Vulnerabilities in Bytecode Removed by Analysis, Nuanced Confinement and Diversification (VIBRANCE)
Alessandro Coglio, Marcel Becker, Stephen Fitzpatrick, Limei Gilham, Cordell Green, Eric McCarthy, Henny B. Sipma, Matthew J. Barry, Anca Browne, Eric Bush, D. G. Smith, Arnaud Venet, Martin Rinard, Jeff H. Perkins, Jordan Eikenberry, Douglas Kramm, Paolo Piselli, Daniel Willenson · 2015
Abstract : The VIBRANCE tool starts with a vulnerable Java application and automatically hardens it against SQL injection, OS command injection, file path traversal, numeric errors, denial of service, and other attacks. For a large class of attacks, the protection added by VIBRANCE blocks the attacks and safely continues execution.