diff --git a/argus.html b/argus.html new file mode 100644 index 0000000..c35941e --- /dev/null +++ b/argus.html @@ -0,0 +1,117 @@ + + + + + + + + ARGUS + + + + + + + + + + + + + +
+
+
+
+ + +
+
+

ARGUS Overview

+
+

+ ARGUS is a static taint tracker build to detect code injection vulnerabilities inside GitHub Workflows. Argus can track the dangerous sources across workflow configuration and JavaScript actions. + You can see examples page to see the type of vulnerabilities Argus can detect. +

+

Getting Started

+

+ To improve the usability of Argus for developers, we created Docker image that contains all the required dependencies to run Argus and detect code injection vulnerabilities inside the workflows. +
+ Following are step-by-step instructions on how to run Argus: + +

    +
  1. docker-compose build
    2. +
  2. ...
    3. +
  3. ...
    4. +
  4. ...
    5. +
+ +

+ 
+        @inproceedings{muralee2021Argus,
+          title={ARGUS: A Framework for Staged Static Taint Analysis of GitHub Workflows and Actions},
+          author={S. Muralee, I. Koishybayev, A. Nahapetyan, G. Tystahl, B. Reaves, A. Bianchi, W. Enck, 
+            A. Kapravelos, A. Machiry},
+          booktitle={32st USENIX Security Symposium (USENIX Security 23)},
+          year={2023},
+        }
+
+
+ + +
+ + + + + +
+
+

Team

+
+

+ The ARGUS is built by Purdue Systems and Software Security Lab (PurS3) and PurSec Lab at Purdue University
and Wolfpack Security and Privacy Research (WSPR) lab at North Carolina State University. +

+
+ purdue +       + ncsu +
+
+
+ + + +
+
+

+

+ ARGUS | PurS3 Lab at Purdue University | PurSec Lab at Purdue University | WSPR Lab at North Carolina State University +

+
+
+ + +
+
+
+ + + diff --git a/dataset.html b/dataset.html new file mode 100644 index 0000000..abf9c6d --- /dev/null +++ b/dataset.html @@ -0,0 +1,75 @@ + + + + + + + + PatchDB + + + + + + + + + + + + + + + + + + + +
+
+
+
+ +
+
+

+
+

+ Security Patches contains multiple categories. +

+
+
+ +
+
+

+

+ ARGUS | PurS3 Lab at Purdue University | PurSec Lab at Purdue University | WSPR Lab at North Carolina State University +

+
+
+
+
+
+ + + diff --git a/menu.html b/menu.html index 5ac9d51..ba7d356 100644 --- a/menu.html +++ b/menu.html @@ -8,7 +8,8 @@
Home - Examples + PoCs + Dataset Materials GitHub