The Foundation of 2015: 2014 in Review

Summary: Trail of Bits' 2014 review cites Apple, Target, and JPMorgan Chase among the year's front-page security incidents and describes its own work, including McSema, a framework for translating machine-code programs to LLVM bitcode that supports x86 semantics and subsets of integer arithmetic, floating point, and vector operations. The post also notes Andrew Ruef's clang-analyzer checker for finding Heartbleed-like bugs, three completed DARPA Cyber Fast Track projects (CodeReason, MAST, and PointsTo) demonstrated at the Pentagon by five employees, and selection as one of seven funded teams competing for a $2 million robot that repairs insecure software without human input.
What you should know: The firm's answer to a year of breaches at Apple, Target, and JPMorgan Chase was tooling and automation, including a $2 million DARPA challenge to build a robot that fixes insecure software without human input, which sets the bar for how much of security work is expected to run without people.

Read the original at Trail of Bits Blog ↗