Search NASA⌕ Search

Engineering topics

Song, Jia

Publications and source records attributed to Song, Jia.

Speeding-up fuzzing through directional seeds

Abstract Fuzzing is an automated process for discovering inputs in a program that may trigger unexpected behavior. Today, fuzzing has become a standard practice for the discovery of bugs and security vulnerabilities. However, the main issue with such practices is that the exploration of the input space of programs can often be prohibitively expensive. Therefore, several alternative fuzzing strategies have been introduced during the last few years. Some fuzzing techniques rely on human expertise to provide a plausible set of initial input examples, namely, seeds. However, the process of handcrafting seeds for fuzzing purposes often becomes strenuous for humans as it requires a deeper understanding of the Program-Under-Test (PUT). Also, the use of known inputs to programs often does not trigger vulnerable program behavior or may not reach potentially vulnerable code locations. To address those issues, we propose a seed generation framework that enables Human-In-The-Loop (HITL) directed fuzzing where the human assumes a more active role in the creation of seeds that can penetrate and assess desired locations of the PUT. Our proposed framework uses Symbolic Execution (SE) to generate seeds that exercise paths to target program locations. Moreover, our framework enables the visualization of the explored execution paths in the binary of the PUT for the generated seeds. We evaluated our approach on a set of 12 carefully designed C programs with diverse characteristics that mimic real-world programs. The experimental results show the effectiveness of the proposed approach in improving the performance of standard fuzzing tools such as the American Fuzzy Lop ("Image missing" <#comment/> ). Specifically, our solution can generate seeds that substantially enhance the performance of the fuzzer, achieving speedups ranging from $$1.46\times $$ 1.46 × to $$68.53\times $$ 68.53 × for branch conditions, $$1.39\times $$ 1.39 × to $$254.62\times $$ 254.62 × for branch depths, $$14,879.59\times $$ 14 , 879.59 × to $$30,295.88\times $$ 30 , 295.88 × for branch widths over traditional seeds. Additionally, the speedup increases with the number of target function ranging from $$12,260\times $$ 12 , 260 × to $$22,856.07\times $$ 22 , 856.07 × over traditional seeds while only requiring less than 15 seconds on average for the seed generation step.

97 MATHEMATICS AND COMPUTING↗

StructuredFuzzer: Fuzzing Structured Text-Based Control Logic Applications

Rigorous testing methods are essential for ensuring the security and reliability of industrial controller software. Fuzzing, a technique that automatically discovers software bugs, has also proven effective in finding software vulnerabilities. Unsurprisingly, fuzzing has been applied to a wide range of platforms, including programmable logic controllers (PLCs). However, current approaches, such as coverage-guided evolutionary fuzzing implemented in the popular fuzzer American Fuzzy Lop Plus Plus (AFL++), are often inadequate for finding logical errors and bugs in PLC control logic applications. They primarily target generic programming languages like C/C++, Java, and Python, and do not consider the unique characteristics and behaviors of PLCs, which are often programmed using specialized programming languages like Structured Text (ST). Furthermore, these fuzzers are ill suited to deal with complex input structures encapsulated in ST, as they are not specifically designed to generate appropriate input sequences. This renders the application of traditional fuzzing techniques less efficient on these platforms. To address this issue, this paper presents a fuzzing framework designed explicitly for PLC software to discover logic bugs in applications written in ST specified by the IEC 61131-3 standard. The proposed framework incorporates a custom-tailored PLC runtime and a fuzzer designed for the purpose. We demonstrate its effectiveness by fuzzing a collection of ST programs that were crafted for evaluation purposes. We compare the performance against a popular fuzzer, namely, AFL++. The proposed fuzzing framework demonstrated its capabilities in our experiments, successfully detecting logic bugs in the tested PLC control logic applications written in ST. On average, it was at least 83 times faster than AFL++, and in certain cases, for example, it was more than 23,000 times faster.

47 OTHER INSTRUMENTATION↗

Signatures of superconducting triplet pairing in Ni–Ga-bilayer junctions

Ni–Ga bilayers are a versatile platform for exploring the competition between strongly antagonistic ferromagnetic and superconducting phases. We characterize the impact of this competition on the transport properties of highly-ballistic Al/Al 2 O 3 (/EuS)/Ni–Ga tunnel junctions from both experimental and theoretical points of view. While the conductance spectra of junctions comprising Ni (3 nm)–Ga (60 nm) bilayers can be well understood within the framework of earlier results, which associate the emerging main conductance maxima with the junction films’ superconducting gaps, thinner Ni (1.6 nm)–Ga (30 nm) bilayers entail completely different physics, and give rise to novel large-bias (when compared to the superconducting gap of the thin Al film as a reference) conductance-peak subseries that we term conductance shoulders. These conductance shoulders might attract considerable attention also in similar magnetic superconducting bilayer junctions, as we predict them to offer an experimentally well-accessible transport signature of superconducting triplet pairings that are induced around the interface of the Ni–Ga bilayer. We further substantiate this claim performing complementary polarized neutron reflectometry measurements on the bilayers, from which we deduce (1) a nonuniform magnetization structure in Ga in a several nanometer-thick area around the Ni–Ga boundary and can simultaneously (2) satisfactorily fit the obtained data only considering the paramagnetic Meissner response scenario. While the latter provides independent experimental evidence of induced triplet superconductivity inside the Ni–Ga bilayer, the former might serve as the first experimental hint of its potential microscopic physical origin. Finally, we introduce a simple phenomenological toy model to confirm also from the theoretical standpoint that superconducting triplet pairings around the Ni–Ga interface can indeed lead to the experimentally observed conductance shoulders, which convinces that our claims are robust and physically justified. Arranging our work in a broader context, we expect that Ni–Ga-bilayer junctions could have a strong potential for future superconducting-spintronics applications whenever an efficient engineering of triplet-pairing superconductivity is required.

75 CONDENSED MATTER PHYSICS, SUPERCONDUCTIVITY AND↗

Deep Optical Switching on Subpicosecond Timescales in an Amorphous Ge Metamaterial

Active nanostructured optical components show promise as potential building blocks for novel light-based computing and data processing architectures. However, nanoscale all-optical switches that have low activation powers and high-contrast ultrafast switching have been elusive so far. Here, pump–probe measurements performed on amorphous-Ge-based micro-resonator metasurfaces that exhibit strong resonant modes in the mid-infrared are reported. Relative change is observed in transmittance of ΔT/T ≈ 1 with picosecond (down to τ ≈ 0.5 ps) free carrier relaxation rates, obtained with very low pump fluences of 50 μJ cm –2 . In this work, these observations are attributed to efficient free carrier promotion, affecting light transmittance via high quality-factor optical resonances, followed by an increased electron–phonon scattering of free carriers due to the amorphous crystal structure of Ge. Full-wave simulations based on a permittivity model that describes free-carrier damping through crystal structure disorder find excellent agreement with the experimental data. These findings offer an efficient and robust platform for all-optical switching at the nanoscale.

36 MATERIALS SCIENCE↗

Highly Efficient Plasmon Induced Hot-Electron Transfer at Ag/TiO 2 Interface

Plasmon induced hot carrier transfer is a promising novel approach for solar energy conversion, but its practical application is often hindered by its low efficiency. This work demonstrates an unprecedented quantum efficiency of plasmonic hot-electron transfer of up to 53 ± 2% from 1.7 nm silver nanoparticles to anatase nanoporous TiOsub>2 films at 400 nm excitation. This efficient hot-electron transfer consists of contributions of both hot electrons generated by plasmon decay through exciting Ag intraband transitions and Ag-to-TiO 2 interfacial charge-transfer transitions. The efficiencies of both pathways increase at smaller Ag particle sizes from 5.9 to 1.7 nm, suggesting that decreasing particle sizes is a promising way toward efficient plasmonic hot-carrier extraction.

37 INORGANIC, ORGANIC, PHYSICAL, AND ANALYTICAL CH↗

Plasmon Energy Transfer in Hybrid Nanoantennas

Plasmonic metal nanoparticles exhibit large dipole moments upon photoexcitation and have the potential to induce electronic transitions in nearby materials, but fast internal relaxation has to date limited the spatial range and efficiency of plasmonic mediated processes. In this work, we use photo-electrochemistry to synthesize hybrid nanoantennas comprised of plasmonic nanoparticles with photoconductive polymer coatings. Here, we demonstrate that the formation of the conductive polymer is selective to the nanoparticles and that polymerization is enhanced by photoexcitation. In situ spectroscopy and simulations support a mechanism in which up to 50% efficiency of nonradiative energy transfer is achieved. These hybrid nanoantennas combine the unmatched light-harvesting properties of a plasmonic antenna with the similarly unmatched device processability of a polymer shell.

36 MATERIALS SCIENCE↗

Effect of Process Parameters on the Mechanical Properties of Hastelloy X Alloy Fabricated by Selective Laser Melting

Mechanical properties of Hastelloy X alloys fabricated by selective laser melting were investigated and compared with the wrought counterpart. Nano-inclusions (Mo-rich carbides) distributed at the sub-grain boundaries in the selective laser-melted (SLMed) Hastelloy X alloy, whereas micron-scale precipitations existed in the wrought counterpart. The molten pool boundaries widely existed in the SLMed substrate, which acted as an initial site for crack and led to poor plasticity. However, the ultimate tensile strength values of the SLMed Hastelloy X alloys were around 910 MPa and much higher than the wrought counterpart (~ 750 MPa), which was mainly ascribed to the high-density dislocations enriched at the sub-grain boundaries. Process parameter effects on the mechanical properties were also delineated in this work, and the volumetric energy density for the best mechanical properties of the SLMed Hastelloy X alloy was in the range from 140 to 170 J/mm{sup 3}.

36 MATERIALS SCIENCE↗

Correction to: Hesperetin induces the apoptosis of hepatocellular carcinoma cells via mitochondrial pathway mediated by the increased intracellular reactive oxygen species, ATP and calcium

The original version of this article unfortunately contained a mistake. During final figure preparation and manuscript submission, the similar graphs (Fig. 6c) in different papers were accidentally switched. It was subsequently noted in a further review that Fig. 2a does not match with the hesperetin concentration. The corrected figures and graphs are herein (Figs. 2a, 6c). This correction does not affect the results or conclusions of the original paper.

62 RADIOLOGY AND NUCLEAR MEDICINE↗