Syracuse Sun

Endadul Hoque, an assistant professor in electrical engineering and computer science in the College of Engineering and Computer Science, has been awarded the National Science Foundation (NSF) CAREER Award to conduct research on context-sensitive fuzzing for networked systems. This grant aims to support early career faculty members in their professional development and will enable Hoque to further his research on computer networks and systems security, program analysis, and software engineering.

Hoque expressed his enthusiasm for the project, stating, "Many big tech companies like Google and Microsoft have been investing in fuzzing techniques and have seen the importance of finding bugs in existing software." He highlighted the significance of fuzzing as an automated technique for security testing, noting that the National Institute of Standards in Technology also endorses this approach. Hoque believes that the project will push boundaries in the field and make a meaningful impact on cybersecurity.

The project led by Hoque focuses on three primary research goals. The first goal involves creating a language capable of encoding complex structures of inputs that adapt based on the context, along with developing algorithms to efficiently generate correct inputs using this language. The second goal aims to devise techniques for mutating inputs without losing their context sensitivity, crucial for the fuzzing process. The final goal is to establish mechanisms that ensure the accurate maintenance of the internal state of a protocol, enabling effective testing of fuzz inputs in a suitable state for the protocol being examined.

Discussing the significance of his research, Hoque emphasized the importance of identifying vulnerabilities in real-world security-critical systems and advancing existing methodologies. He stated, "In this area of research, people tend to focus on strengthening the system by finding flaws in the existing system that we use in our day-to-day life."

Apart from his research endeavors, Hoque plans to enhance cybersecurity courses and conduct workshops for K-12 students to raise awareness about cybersecurity, integrating his research findings into these educational initiatives. Furthermore, the project aims to engage undergraduate and graduate students from historically marginalized communities in educational and research activities.

Additionally, Hoque intends to assemble a team for cybersecurity competitions like capture-the-flag contests, which involve participants searching for hidden text strings in vulnerable websites or programs. These competitions serve as an interactive approach to bolster cybersecurity education and skill development.

In conclusion, Hoque expressed his optimism about the project's potential impact, stating, "This project has the potential to significantly enhance the robustness of protocol implementations and cybersecurity education, benefiting society. I’m happy to have received this prestigious award."