Symbolic execution optimization method based on input constraint
To solve path explosion,low rate of new path’s finding in the software testing,a new vulnerability discovering architecture based on input constraint symbolic execution (ICBSE) was proposed.ICBSE analyzed program source code to extract three types of constraints automatically.ICBSE then used these i...
Saved in:
| Main Authors: | , , , |
|---|---|
| Format: | Article |
| Language: | zho |
| Published: |
Editorial Department of Journal on Communications
2019-03-01
|
| Series: | Tongxin xuebao |
| Subjects: | |
| Online Access: | http://www.joconline.com.cn/zh/article/doi/10.11959/j.issn.1000-436x.2019062/ |
| Tags: |
Add Tag
No Tags, Be the first to tag this record!
|
| _version_ | 1841539440732798976 |
|---|---|
| author | Sunlyu WANG Yuqi LIN Qiusong YANG Mingshu LI |
| author_facet | Sunlyu WANG Yuqi LIN Qiusong YANG Mingshu LI |
| author_sort | Sunlyu WANG |
| collection | DOAJ |
| description | To solve path explosion,low rate of new path’s finding in the software testing,a new vulnerability discovering architecture based on input constraint symbolic execution (ICBSE) was proposed.ICBSE analyzed program source code to extract three types of constraints automatically.ICBSE then used these input constraints to guide symbolic execution to focus on core functions.Through implemented this architecture in KLEE,and evaluated it on seven programs from five GNU software suites,such as coreutils,binutils,grep,patch and diff.ICBSE detected seven previously unknown bugs (KLEE found three of the seven).In addition,ICBSE increases instruction line coverage/branch coverage by about 20%,and decreases time for finding bugs by about 15%. |
| format | Article |
| id | doaj-art-8f5a21fb251b4343ac467e4d97e7ab9e |
| institution | Kabale University |
| issn | 1000-436X |
| language | zho |
| publishDate | 2019-03-01 |
| publisher | Editorial Department of Journal on Communications |
| record_format | Article |
| series | Tongxin xuebao |
| spelling | doaj-art-8f5a21fb251b4343ac467e4d97e7ab9e2025-01-14T07:16:26ZzhoEditorial Department of Journal on CommunicationsTongxin xuebao1000-436X2019-03-0140192759725530Symbolic execution optimization method based on input constraintSunlyu WANGYuqi LINQiusong YANGMingshu LITo solve path explosion,low rate of new path’s finding in the software testing,a new vulnerability discovering architecture based on input constraint symbolic execution (ICBSE) was proposed.ICBSE analyzed program source code to extract three types of constraints automatically.ICBSE then used these input constraints to guide symbolic execution to focus on core functions.Through implemented this architecture in KLEE,and evaluated it on seven programs from five GNU software suites,such as coreutils,binutils,grep,patch and diff.ICBSE detected seven previously unknown bugs (KLEE found three of the seven).In addition,ICBSE increases instruction line coverage/branch coverage by about 20%,and decreases time for finding bugs by about 15%.http://www.joconline.com.cn/zh/article/doi/10.11959/j.issn.1000-436x.2019062/symbolic executioninput constraintpath explosionbug finding |
| spellingShingle | Sunlyu WANG Yuqi LIN Qiusong YANG Mingshu LI Symbolic execution optimization method based on input constraint Tongxin xuebao symbolic execution input constraint path explosion bug finding |
| title | Symbolic execution optimization method based on input constraint |
| title_full | Symbolic execution optimization method based on input constraint |
| title_fullStr | Symbolic execution optimization method based on input constraint |
| title_full_unstemmed | Symbolic execution optimization method based on input constraint |
| title_short | Symbolic execution optimization method based on input constraint |
| title_sort | symbolic execution optimization method based on input constraint |
| topic | symbolic execution input constraint path explosion bug finding |
| url | http://www.joconline.com.cn/zh/article/doi/10.11959/j.issn.1000-436x.2019062/ |
| work_keys_str_mv | AT sunlyuwang symbolicexecutionoptimizationmethodbasedoninputconstraint AT yuqilin symbolicexecutionoptimizationmethodbasedoninputconstraint AT qiusongyang symbolicexecutionoptimizationmethodbasedoninputconstraint AT mingshuli symbolicexecutionoptimizationmethodbasedoninputconstraint |