Articles on SaurabhK122's Blog

Weekly Check-In #13

khandelwal.saurabh31@gmail.com (SaurabhK122) — Thu, 27 Aug 2020 17:28:14 +0000

What I did this week?

I made some changes to my previous PR on updating documentation for new checkers.

What will I be doing this week?

I have been working on the final work report, and will complete it this week.

Did I get stuck anywhere?

Everything worked out and I did no get stuck anywhere.

Weekly Check-In #12

khandelwal.saurabh31@gmail.com (SaurabhK122) — Thu, 20 Aug 2020 12:03:33 +0000

What I did this week?

This week I updated the documentation on adding a new checker to the tool.

What will I be doing this week?

Since this is the last week before the final evaluations, I will work on some minor bugs and updating documentation.

Did I get stuck anywhere?

Everything worked out and I did no get stuck anywhere.

Weekly Check-In #11

khandelwal.saurabh31@gmail.com (SaurabhK122) — Tue, 11 Aug 2020 07:06:44 +0000

What I did this week?

This week I added checkers for tcpdump and qt libraries.

What will I be doing this week?

I will be working on updating documentation in the next week.

Did I get stuck anywhere?

While adding checker for qt library, I missed a vendor product pair, which was rightly pointed out by Terri. Other than this, everything else worked out.

Weekly Check-In #10

khandelwal.saurabh31@gmail.com (SaurabhK122) — Wed, 05 Aug 2020 04:18:08 +0000

I am on leave till 10th August, so there's nothing to report for this week. But there was no loss of work since I had started coding in the Community Bonding period itself.

Weekly Check-In #9

khandelwal.saurabh31@gmail.com (SaurabhK122) — Mon, 27 Jul 2020 17:52:00 +0000

What I did this week?

This week I added checkers for openldap and netpbm libraries.

What will I be doing this week?

I will be working on adding checkers for some other libraries to the tool.

Did I get stuck anywhere?

This week, thankfully, everything worked out as expected and I did not get stuck anywhere.

Weekly Check-In #8

khandelwal.saurabh31@gmail.com (SaurabhK122) — Thu, 23 Jul 2020 05:56:52 +0000

What I did this week?

This week I added checkers for libarchive and samba libraries.

What will I be doing this week?

I will be working on adding checkers for some other libraries to the tool.

Did I get stuck anywhere?

This week, thankfully, everything worked out as expected and I did not get stuck anywhere.

Weekly Check-In #7

khandelwal.saurabh31@gmail.com (SaurabhK122) — Fri, 17 Jul 2020 05:13:49 +0000

What I did this week?

This week I added checkers for avahi and bind libraries. Also there were some changes that had to be made in the out of tree checker, so I completed work on that too.

What will I be doing this week?

I will be working on adding checkers for some other libraries to the tool.

Did I get stuck anywhere?

This week, thankfully, everything worked out as expected and I did not get stuck anywhere.

Weekly Check-In #6

khandelwal.saurabh31@gmail.com (SaurabhK122) — Wed, 08 Jul 2020 16:02:33 +0000

What I did this week?

This week I added checkers for irssi and memcached libraries.

What will I be doing this week?

I will be working on adding checkers for some other libraries to the tool.

Did I get stuck anywhere?

This week, thankfully, everything worked out as expected and I did not get stuck anywhere.

Weekly Check-In #5

khandelwal.saurabh31@gmail.com (SaurabhK122) — Wed, 01 Jul 2020 15:59:49 +0000

What I did this week?

This week I added checkers for libvirt and icecast libraries. Along with this, I also updated the out of tree checker of our tool.

What will I be doing this week?

I will be working on adding checkers for some other libraries to the tool.

Did I get stuck anywhere?

This week, thankfully, everything worked out as expected and I did not get stuck anywhere.

Weekly Check-In #4

khandelwal.saurabh31@gmail.com (SaurabhK122) — Mon, 22 Jun 2020 14:27:11 +0000

What I did this week?

This week I added checkers for freeradius and haproxy libraries.

What will I be doing this week?

I will be working on adding checkers for some other libraries and also continue working on updating documentation for adding a new checker to the tool.

Did I get stuck anywhere?

I faced some difficulty in finding viable signatures for haproxy library which were consistent across different versions and distributions at first, but other than that, everything worked out.

Weekly Check-In #3

khandelwal.saurabh31@gmail.com (SaurabhK122) — Tue, 16 Jun 2020 16:18:43 +0000

What I did this week?

Last week I had a discussion with my mentors, and it came up that since now I have a fair experience working with checkers, I should work on checkers for as many libraries as possible. Terri suggested a few of them, and from that list I have added a checker for bash library. Also, I added checkers for dovecot and gimp libraries.

What will I be doing this week?

I will be working on adding checkers for some other libraries and also on updating documentation on adding a new checker to the tool.

Did I get stuck anywhere?

I faced some difficulty in finding viable signatures for bash library which were consistent across different versions and distributions at first, but other than that, everything worked out.

Weekly Check-In #2

khandelwal.saurabh31@gmail.com (SaurabhK122) — Mon, 08 Jun 2020 10:27:44 +0000

What I did this week ?

This week I added checkers for busybox and radare2 libraries. Along with this I fixed issue #546, which was for the clearer organisation of tests in test_scanner.py file. I arranged tests into sub-arrays for each checker, spilt up the giant array into arrays per checker, and chained them using itertools.chain in @pytest.mark.parametrize.

What is coming up next ?

This week I will be working on adding checkers for dovecot and gimp libraries.

Have I got stuck anywhere?

While last week, I had problems finding common signatures for different versions of polarssl libraries, this week I did not face this issue with busybox and radare. So everything worked out as expected this week.

Weekly Check-In #1

khandelwal.saurabh31@gmail.com (SaurabhK122) — Mon, 01 Jun 2020 17:21:26 +0000

Hello everyone! I am Saurabh Khandelwal, a second year undergraduate at IIT Bombay, India and I will be contributing to the CVE-Binary-Tool under PSF.

Overview of the Project

The CVE Binary Tool scans for a set of checkers, which are common, vulnerable open source components and lets us know if a given directory or binary file includes common libraries with known vulnerabilities. The tool, at its launch, had checkers for 10 different open source libraries. But since there are a lot of common open source libraries with vulnerabilities, we want to incorporate the CVE Binary Tool with as many checkers as possible.

The broad goal is obviously to add as many checkers for open source libraries as possible. I aim to add at least 24 new checkers to the CVE Binary Tool. I have focussed on popular linux libraries as well as commonly used applications with vulnerabilities, so as to make the tool more effective in determining security issues present in a system. Stretch goals include fixing minor bugs and enhancing the tool by improving the code coverage.

What did I do in the Community Bonding Period?

I started working early on the project and have added checkers for Openafs, Openvpn and Polarssl libraries. I also added a new signature test for ncurses checker and improved its coverage. Also, I had weekly meets with my mentors every Wednesday, in which we discuss any issues and what to work on next.

What am I doing this week?

I will be working on creating checkers for some other open source libraries as well on issue #546.

Have I got stuck anywhere?

The one place where I got stuck was to find common signatures in binary files of polarssl, but then I was able to find them for fedora distribution.