VUDDY is an approach for scalable and accurate vulnerable code clone detection. This approach is specifically designed to accurately find vulnerabilities in massive code bases (e.g., Linux kernel, 25 MLoC). Principles and results are discussed in our paper, which was published in 38th IEEE Symposium on Security and Privacy (S&P'17).

hmark is the implementation of VUDDY, which is also the client-side preprocessing tool for "Vulnerable Code Clone Detection" testing provided by IoTcube, an automated vulnerability testing platform. Details are available here.

This project is part of the international collaborative research which is being conducted by CSSA (Center for Software Security and Assurrance).

You're going to need:

• Linux or OS X - hmark is designed to work on any of the operating systems. Tested OS distributions include Ubuntu 14.04 and 16.04, Fedora 25, and OS X. Let me know if your OS is not supported.
• Python 2, version 2.7.10 or newer - earlier versions may work, but unsupported.
• Java Runtime Environment (JRE) - We recommend openjdk-8-jre.

1. cd hmark
2. python hmark.py [-h] [-c path ON/OFF] [-n] [-V]

You can see the help message below by passing an -h (or --help) argument.

usage: python hmark.py [-h] [-c path ON/OFF] [-n] [-V]

- optional arguments:
    -h, --help            show this help message and exit
    
  -c path ON/OFF, --cli-mode path ON/OFF
                        run hmark without GUI by specifying the path to the
                        target directory, and the abstraction mode
  -n, --no-updatecheck  bypass update checking (not recommended)
  -V, --version         print hmark version and exit

3. Upload the resulting hidx file on IoTcube's Vulnerable Code Clone Detection testing.

Instead of running hmark from source code, you can also download and execute prebuilt binaries. Binaries for Windows, Linux, and OS X are available here.

For reporting bugs, you can submit an issue to the VUDDY GitHub, or send me a mail. Feel free to send pull requests if you have suggestions or bugfixes!

This program is authored and maintained by Seulbae Kim

GitHub @squizz617