Results 1 to 10 of about 80 (68)
Annotary: A Concolic Execution System for Developing Secure Smart Contracts [PDF]
Lecture Notes in Computer Science, 2019 Ethereum smart contracts are executable programs, deployed on a peer-to-peer network and executed in a consensus-based fashion. Their bytecode is public, immutable and once deployed to the blockchain, cannot be patched anymore. As smart contracts may hold Ether worth of several million dollars, they are attractive targets for attackers and indeed some ...
Konrad Weiss, Julian Schütte
exaly +4 more sources
Vulnerability Repair via Concolic Execution and Code Mutations
ACM Transactions on Software Engineering and MethodologySecurity vulnerabilities detected via techniques like greybox fuzzing are often fixed with a significant time lag. This increases the exposure of the software to vulnerabilities. Automated fixing of vulnerabilities where a tool can generate fix suggestions is thus of value.
Ridwan Shariffdeen +2 more
exaly +3 more sources
Exploratory Review of Hybrid Fuzzing for Automated Vulnerability Detection
IEEE Access, 2021 Recently, software testing has become a significant component of information security. The most reliable technique for automated software testing is a fuzzing tool that feeds programs with random test-input and detects software vulnerabilities that are ...
Fayozbek Rustamov +3 more
doaj +1 more source
Concolic Execution of NMap Scripts for Honeyfarm Generation [PDF]
Proceedings of the 8th ACM Workshop on Moving Target Defense, 2021 Attackers rely upon a vast array of tools for automating attacksagainst vulnerable servers and services. It is often the case thatwhen vulnerabilities are disclosed, scripts for detecting and exploit-ing them in tools such asNmapandMetasploitare released soonafter, leading to the immediate identification and compromise ofvulnerable systems.
Zhe Li 0014 +3 more
openaire +2 more sources
SymFusion: Hybrid Instrumentation for Concolic Execution
Proceedings of the 37th IEEE/ACM International Conference on Automated Software Engineering, 2022 Concolic execution is a dynamic twist of symbolic execution de- signed with scalability in mind. Recent concolic executors heavily rely on program instrumentation to achieve such scalability. The instrumentation code can be added at compilation time (e.g., using an LLVM pass), or directly at execution time with the help of a dynamic binary translator ...
Emilio Coppa +2 more
openaire +4 more sources
Enhancing Security of Web-Based IoT Services via XSS Vulnerability Detection
Sensors, 2023 The Internet of Things (IoT) technology is experiencing significant growth and integration into various aspects of daily life. With the rising number of connected devices, diverse security challenges are emerging as substantial threats to IoT. Cross-Site
Jemin Kim, Joonseok Park
doaj +1 more source
Testing concolic execution through consistency checks
Journal of Systems and Software, 2023 Symbolic execution is a well-known software testing technique that evaluates how a program runs when considering a symbolic input, i.e., an input that can initially assume any concrete value admissible for its data type. The dynamic twist of this technique is dubbed concolic execution and has been demonstrated to be a practical technique for testing ...
Emilio Coppa, Alessio Izzillo
openaire +1 more source
SHFuzz: Selective Hybrid Fuzzing with Branch Scheduling Based on Binary Instrumentation
Applied Sciences, 2020 Hybrid fuzzing is a popular software testing technique that combines random fuzzing with concolic execution. It is widely used in the security domain known for its ability to find deeply hidden vulnerabilities and reach high code coverage. Hybrid fuzzing
Xianya Mi +4 more
doaj +1 more source
Concolic Execution for WebAssembly (Artifact).
Dagstuhl Artifacts Ser., 2022 This artifact contains the implementation of WASP, a symbolic execution engine for Wasm, and WASP-C, a symbolic execution framework for testing C programs built using WASP . WASP works directly on Wasm code and was built on top of a standard-compliant Wasm reference implementation [Andreas Haas et al., 2017].
Filipe Marques +3 more
openaire +3 more sources
Future Internet, 2020 Fuzz testing is a simple automated software testing approach that discovers software vulnerabilities at a high level of performance by using randomly generated seeds.
Fayozbek Rustamov +2 more
doaj +1 more source