Compartmentalization-Aware Automated Program Repair
Jia Hu, Youcheng Sun, Pierre Olivier

TL;DR
This paper explores using Large Language Model-based Automated Program Repair to automatically secure cross-compartment interfaces in software, addressing vulnerabilities that compromise compartmentalization security promises.
Contribution
It introduces a novel APR framework tailored for compartment interface safety, combining fuzzing, specialized patch generation, and validation techniques.
Findings
Framework successfully identified and repaired a sample interface vulnerability.
Specialized APR outperformed naive LLM approaches in fixing cross-compartment issues.
Early results show promise for automating security enhancements in compartmentalized software.
Abstract
Software compartmentalization breaks down an application into compartments isolated from each other: an attacker taking over a compartment will be confined to it, limiting the damage they can cause to the rest of the application. Despite the security promises of this approach, recent studies have shown that most existing compartmentalized software is plagued by vulnerabilities at cross-compartment interfaces, allowing an attacker taking over a compartment to escape its confinement and negate the security guarantees expected from compartmentalization. In that context, securing cross-compartment interfaces is notoriously difficult and engineering-intensive. In light of recent advances in Automated Program Repair (APR), notably through the use of Large Language Models (LLMs), this paper presents a work in progress investigating the suitability of LLM-based APR at securing…
Peer Reviews
No public reviews on file for this paper yet. If you reviewed it on a platform where reviews are public (OpenReview, ICLR, NeurIPS, ICML), you can paste yours below so the community can read it here.
Videos
No videos yet. Explain this paper in a talk, walkthrough, or lecture? Add one.
Taxonomy
TopicsSecurity and Verification in Computing · Information and Cyber Security · Web Application Security Vulnerabilities
