JevProbe finds frequent decision flips in tested Jev apps
Cette page n’a pas encore de traduction vérifiée. La version anglaise est affichée. Lire la version anglaise
En termes simples
Some applications use Jev to turn outside information into structured judgments that their code acts on. An attacker might change that information and redirect the application’s choice even if Jev’s answer still has the right format.
JevProbe checks which outside inputs reach Jev, changes attacker-controlled context, and compares what the application does in paired runs. In tests of 228 open-source applications, it found changed application decisions in 81.5% of 2,273 cases; that does not mean every change caused harm.
La recherche
When an application uses a structured Jev judgment to make a decision, can an attacker-controlled outside context redirect that decision even though the judgment still has the required format?
The answer matters because application code acts on the judgment, so a format-valid response may still change what the program does.
JevProbe traces attacker-controlled context through Jev applications to test whether it changes decisions their program logic consumes.
JevProbe traces reachable attacker-controlled inputs, checks which reach Jev judgments, and compares paired application runs that differ in that context. Across 2,273 cases in 228 applications, 81.5% had a changed decision consumed by program logic.
The study’s application-specific protocol classified 98.6% of those flips as potentially unsafe. That supports concern about downstream consequences in the tested cases, while a flip or classification alone does not establish real-world harm.
These results come from open-source applications tested in controlled local environments. A flip classified as potentially unsafe is not evidence of real-world harm, and the measured rates do not establish what would happen in closed-source or live production systems.
Analyse
Détails
- Auteurs de l’article original
- Yang Luo, Tiantian Ji, Zifeng Kang, Yucheng Wang, Yong Liu
- Soumis à arXiv
- Licence
- arXiv non-exclusive