-
Notifications
You must be signed in to change notification settings - Fork 0
Commit
This commit does not belong to any branch on this repository, and may belong to a fork outside of the repository.
- Loading branch information
Showing
3 changed files
with
194 additions
and
1 deletion.
There are no files selected for viewing
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Original file line number | Diff line number | Diff line change |
---|---|---|
@@ -0,0 +1,117 @@ | ||
<!doctype html> | ||
<html> | ||
|
||
<head> | ||
<!-- Google tag (gtag.js) --> | ||
<script async src="https://www.googletagmanager.com/gtag/js?id=G-EER1LDV4TH"></script> | ||
<script> | ||
window.dataLayer = window.dataLayer || []; | ||
function gtag(){dataLayer.push(arguments);} | ||
gtag('js', new Date()); | ||
|
||
gtag('config', 'G-EER1LDV4TH'); | ||
</script> | ||
<title>ARGUS</title> | ||
<meta charset="utf-8" name="viewport" content="width=device-width, initial-scale=1"> | ||
<link href="css/frame.css" media="screen" rel="stylesheet" type="text/css" /> | ||
<link href="css/controls.css" media="screen" rel="stylesheet" type="text/css" /> | ||
<link href="css/custom.css" media="screen" rel="stylesheet" type="text/css" /> | ||
<link href='https://fonts.googleapis.com/css?family=Open+Sans:400,700' rel='stylesheet' type='text/css'> | ||
<link href='https://fonts.googleapis.com/css?family=Open+Sans+Condensed:300,700' rel='stylesheet' type='text/css'> | ||
<link href="https://fonts.googleapis.com/css?family=Source+Sans+Pro:400,700" rel="stylesheet"> | ||
<script src="https://ajax.googleapis.com/ajax/libs/jquery/3.3.1/jquery.min.js"></script> | ||
<script src="js/menu.js"></script> | ||
<style> | ||
.menu-index { | ||
color: rgb(255, 255, 255) !important; | ||
opacity: 1 !important; | ||
font-weight: 700 !important; | ||
} | ||
</style> | ||
</head> | ||
|
||
<body> | ||
<div class="menu-container"></div> | ||
<div class="content-container"> | ||
<div class="content"> | ||
<div class="content-table flex-column"> | ||
<!--------------------------------------------------------------------------------------------> | ||
<!--Start Intro--> | ||
<div class="flex-row"> | ||
<div class="flex-item flex-column"> | ||
<h2 class="add-top-margin">ARGUS Overview</h2> | ||
<hr> | ||
<p style="font-size:14pt;"> | ||
ARGUS is a static taint tracker build to detect code injection vulnerabilities inside GitHub Workflows. Argus can track the dangerous sources across workflow configuration and JavaScript actions. | ||
You can see examples page to see the type of vulnerabilities Argus can detect. | ||
</p> | ||
<h2 class="add-top-margin">Getting Started</h2> | ||
<p style="font-size:14pt;"> | ||
To improve the usability of Argus for developers, we created Docker image that contains all the required dependencies to run Argus and detect code injection vulnerabilities inside the workflows. | ||
<br> | ||
Following are step-by-step instructions on how to run Argus: | ||
|
||
<ol> | ||
<li>docker-compose build</li> | ||
<li>...</li> | ||
<li>...</li> | ||
<li>...</li> | ||
</ol> | ||
|
||
</p> | ||
<pre> | ||
@inproceedings{muralee2021Argus, | ||
title={ARGUS: A Framework for Staged Static Taint Analysis of GitHub Workflows and Actions}, | ||
author={S. Muralee, I. Koishybayev, A. Nahapetyan, G. Tystahl, B. Reaves, A. Bianchi, W. Enck, | ||
A. Kapravelos, A. Machiry}, | ||
booktitle={32st USENIX Security Symposium (USENIX Security 23)}, | ||
year={2023}, | ||
} | ||
</pre> | ||
</div> | ||
|
||
<!-- <div class="flex-item flex-column"> | ||
<p style="font-size:14pt;">Until now the following institutions were given access:</p> | ||
<ol> | ||
</ol> | ||
</div> --> | ||
</div> | ||
<!--End Intro--> | ||
|
||
|
||
<!--------------------------------------------------------------------------------------------> | ||
<!--Start Team--> | ||
<div class="flex-row"> | ||
<div class="flex-item flex-column"> | ||
<h2 class="add-top-margin">Team</h2> | ||
<hr> | ||
<p style="font-size:14pt;"> | ||
The ARGUS is built by <a href="https://purs3lab.github.io/" target="_blank">Purdue Systems and Software Security Lab (PurS3) and <a href="https://pursec.cs.purdue.edu/" target="_blank"> PurSec Lab </a> at <a href="https://www2.purdue.edu/" target="_blank">Purdue University</a> <br/> and <a href="https://wspr.csc.ncsu.edu/" target="_blank">Wolfpack Security and Privacy Research (WSPR)</a> lab at <a href="https://ncsu.edu" target="_blank"> North Carolina State University</a>. | ||
</p> | ||
<div align="center" display="flex"> | ||
<img src="./img/purdue.png" height = "120" alt="purdue" align="center" /> | ||
      | ||
<img src="./img/ncsu.png" height = "125" alt="ncsu" align="center" /> | ||
</div> | ||
</div> | ||
</div> | ||
<!--End Team--> | ||
<!--------------------------------------------------------------------------------------------> | ||
<!--Start Credits--> | ||
<div class="flex-row"> | ||
<div class="flex-item flex-item-stretch flex-column"> | ||
<br /><br /> | ||
<p class="text text-small text-italic"> | ||
ARGUS | <span class="highlight-text">PurS3 Lab</span> at <span class="highlight-text">Purdue University</span> | <span class="highlight-text">PurSec Lab</span> at <span class="highlight-text">Purdue University</span> | <span class="highlight-text">WSPR Lab</span> at <span class="highlight-text">North Carolina State University</span> | ||
</p> | ||
</div> | ||
</div> | ||
<!--End Credits--> | ||
<!--------------------------------------------------------------------------------------------> | ||
</div> | ||
</div> | ||
</div> | ||
</body> | ||
|
||
</html> |
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Original file line number | Diff line number | Diff line change |
---|---|---|
@@ -0,0 +1,75 @@ | ||
<!doctype html> | ||
<html> | ||
|
||
<head> | ||
<!-- Google tag (gtag.js) --> | ||
<script async src="https://www.googletagmanager.com/gtag/js?id=G-EER1LDV4TH"></script> | ||
<script> | ||
window.dataLayer = window.dataLayer || []; | ||
function gtag(){dataLayer.push(arguments);} | ||
gtag('js', new Date()); | ||
|
||
gtag('config', 'G-EER1LDV4TH'); | ||
</script> | ||
<title>PatchDB</title> | ||
<meta charset="utf-8" name="viewport" content="width=device-width, initial-scale=1"> | ||
<link href="https://use.fontawesome.com/releases/v5.2.0/css/all.css" media="screen" rel="stylesheet" type="text/css" /> | ||
<link href="https://ajax.googleapis.com/ajax/libs/jqueryui/1.12.1/themes/base/jquery-ui.css" media="screen" rel="stylesheet" type="text/css" /> | ||
<link href="css/frame.css" media="screen" rel="stylesheet" type="text/css" /> | ||
<link href="css/controls.css" media="screen" rel="stylesheet" type="text/css" /> | ||
<link href="css/widgets.css" media="screen" rel="stylesheet" type="text/css" /> | ||
<link href="css/custom.css" media="screen" rel="stylesheet" type="text/css" /> | ||
<link href='https://fonts.googleapis.com/css?family=Open+Sans:400,700' rel='stylesheet' type='text/css'> | ||
<link href='https://fonts.googleapis.com/css?family=Open+Sans+Condensed:300,700' rel='stylesheet' type='text/css'> | ||
<link href="https://fonts.googleapis.com/css?family=Source+Sans+Pro:400,700" rel="stylesheet"> | ||
<script src="https://ajax.googleapis.com/ajax/libs/jquery/3.3.1/jquery.min.js"></script> | ||
<script src="https://ajax.googleapis.com/ajax/libs/jqueryui/1.12.1/jquery-ui.min.js"></script> | ||
<script src="js/menu.js"></script> | ||
<script src="js/widgets.js"></script> | ||
<script src="js/custom.js"></script> | ||
<style> | ||
.menu-examples { | ||
color: rgb(255, 255, 255) !important; | ||
opacity: 1 !important; | ||
font-weight: 700 !important; | ||
} | ||
pre { | ||
font-family: Consolas, "courier new"; | ||
color: gray; | ||
background-color: #f1f1f1; | ||
padding: 10px; | ||
font-size: 90%; | ||
} | ||
</style> | ||
</head> | ||
|
||
<body> | ||
<div class="menu-container"></div> | ||
<div class="content-container"> | ||
<div class="content"> | ||
<div class="content-table flex-column"> | ||
<!--------------------------------------------------------------------------------------------> | ||
<div class="flex-row"> | ||
<div class="flex-item flex-column"> | ||
<h2 class="add-top-margin"></h2> | ||
<hr> | ||
<p style="font-size:14pt;"> | ||
Security Patches contains multiple categories. | ||
</p> | ||
</div> | ||
</div> | ||
<!--------------------------------------------------------------------------------------------> | ||
<div class="flex-row"> | ||
<div class="flex-item flex-item-stretch flex-column"> | ||
<br /><br /> | ||
<p class="text text-small text-italic"> | ||
ARGUS | <span class="highlight-text">PurS3 Lab</span> at <span class="highlight-text">Purdue University</span> | <span class="highlight-text">PurSec Lab</span> at <span class="highlight-text">Purdue University</span> | <span class="highlight-text">WSPR Lab</span> at <span class="highlight-text">North Carolina State University</span> | ||
</p> | ||
</div> | ||
</div> | ||
</div> | ||
</div> | ||
</div> | ||
</body> | ||
|
||
</html> |
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters