News and Announcements
July 12, 2011
Technical report ``Single String Constraint Solver"
is available for the technical details of SUSHI 2.0.
July 1, 2011
SUSHI 2.0 now is available
for download.
The latest version supports the Kaluza string constraint
input format and provides various benchmark functions
for performance comparison. The SUSHI solver is enhanced
with various transformation techniques for
broadening its applicability.
We provide a VirtualBox image installation for
ease the pain of configuration.
September 26, 2010
"
Evolutionary Security Testing of Web Applications (Fast Abstract)
" is accepted for publication at ISSRE'10.
September 21, 2010
"
Relational Constraint Driven Test Case Synthesis for Web Applications
" is presented at
TAV-WEB 2010.
PPT slides are available.
September 17, 2010
"
Conformance Verification of Privacy Policies
" is presented at
WSFM 2010.
PPT slides are available.
August 11, 2010
SUSHI 1.0 now is available
for download.
We have fixed several
bugs that were recently introduced by mistake.
Special attention: Unicode 0xFEFF and 0xFEFE are
reserved for begin/end labels in FST.
July 4, 2010
"A String Constraint Solver for Detecting Web Application Vulnerability" is presented at
SEKE 2010.
PPT slides are available.
June 12, 2010
SUSHI 0.9 and JavaSye 0.9 are both
available for download.
June 1, 2010
We decide to abandon the efforts on
the .Net framework. SAFELI will be working on
the Java Platform only.
At this moment,
SAFELI = JavaSye
(symbolic execution engine for Java) +
SUSHI (string
constraint solver). In the future, we will integrate
the tool with APOGEE (test case replayer).
May 15, 2010
Solving string constraint to discover vulnerabilities
automatically! A
paper
on SUSHI constraint solver
is accepted by SEKE 2010.
SUSHI constraint solver to be integrated with APOGEE (in planning).
April 13, 2010
Does regular replacement sanitation guarantee
safety of your web application? Check out our
paper presented at the 2nd NASA Symposium on
Formal Methods. PPT
Presentation (PPT)
presentation is
available.
