Results 21 to 30 of about 99 (87)

Concolic Execution for WebAssembly.

, 2022
WebAssembly (Wasm) is a new binary instruction format that allows targeted compiled code written in high-level languages to be executed by the browser’s JavaScript engine with near-native speed. Despite its clear performance advantages, Wasm opens up the opportunity for bugs or security vulnerabilities to be introduced into Web programs, as pre ...
Filipe Marques, José Fragoso Santos, Nuno Santos 0001, Pedro Adão   +3 more
openaire   +3 more sources

An approach of reachability determination for static analysis defects with help of dynamic symbolic execution

Труды Института системного программирования РАН, 2018
Historically program analysis methods are divided into two groups - static program analysis methods and dynamic program analysis methods. In this paper, we present a combined approach which allows to determine reachability for defects found by static ...
A. Y. Gerasimov, L. V. Kruglov, M. K. Ermakov, S. P. Vartanov   +3 more
doaj   +1 more source

Dynamic analysis of programs with graphical user interface based on symbolic execution

Труды Института системного программирования РАН, 2018
In this paper, we explore the possibilities of applying dynamic symbolic execution (or concolic testing) methods to applications with graphical user interfaces.
S. P. Vartanov, A. Y. Gerasimov, M. K. Ermakov, D. O. Kutz, A. A. Novikov   +4 more
doaj   +1 more source

Deobfuscation, unpacking, and decoding of obfuscated malicious JavaScript for machine learning models detection performance improvement

CAAI Transactions on Intelligence Technology, Volume 5, Issue 3, Page 184-192, September 2020., 2020
Obfuscation is rampant in both benign and malicious JavaScript (JS) codes. It generates an obscure and undetectable code that hinders comprehension and analysis. Therefore, accurate detection of JS codes that masquerade as innocuous scripts is vital. The existing deobfuscation methods assume that a specific tool can recover an original JS code entirely.
Samuel Ndichu, Sangwook Kim, Seiichi Ozawa   +2 more
wiley   +1 more source

Survey on automated symbolic verification and its application for synthesising cyber‐physical systems

IET Cyber-Physical Systems: Theory &Applications, Volume 5, Issue 1, Page 1-24, March 2020., 2020
Dependency on the correct operation of embedded systems is rapidly growing, mainly due to their wide range of applications. Their structures are becoming more complex and currently require multi‐core processors with scalable shared memory, signal‐processing pipelines, and sophisticated software modules to meet increasing computational power ...
Lucas C. Cordeiro, Eddie B. de Lima Filho, Iury V. Bessa   +2 more
wiley   +1 more source

Grammar-aware test case trimming for efficient hybrid fuzzing

Journal of King Saud University: Computer and Information Sciences
In recent years, hybrid fuzzing has garnered significant attention by combining the benefits of both fuzzing and concolic execution. However, existing hybrid fuzzing techniques face problems such as the performance overhead of concolic execution and low ...
Yiru Zhao, Long Gao, Qihan Wan, Lei Zhao
doaj   +1 more source

Improving Symbolic Automata Learning with Concolic Execution

, 2020
Inferring the input grammar accepted by a program is central for a variety of software engineering problems, including parsers verification, grammar-based fuzzing, communication protocol inference, and documentation. Sound and complete active learning techniques have been developed for several classes of languages and the corresponding automaton ...
Donato Clun, Phillip van Heerden, Antonio Filieri, Willem Visser   +3 more
openaire   +2 more sources

Investigation into the effectiveness of white‐box T‐way testing

IET Software, Volume 13, Issue 6, Page 610-616, December 2019., 2019
An unduly large number of test cases are required for effective testing of programmes containing complex decision statements. In this context, modified condition/decision coverage (MC/DC) testing has been acknowledged to provide effective testing using a test suite whose size is linear in the number of the clauses present in a predicate.
Arpita Dutta, Anwesha Patel, Rajib Mall
wiley   +1 more source

ColorGo: Directed Concolic Execution

CoRR
Directed fuzzing is a critical technique in cybersecurity, targeting specific sections of a program. This approach is essential in various security-related domains such as crash reproduction, patch testing, and vulnerability detection. Despite its importance, current directed fuzzing methods exhibit a trade-off between efficiency and effectiveness. For
Jia Li, Jiacheng Shen, Yuxin Su 0001, Michael R. Lyu   +3 more
openaire   +2 more sources

Automatic Testing of Program Slicers

Scientific Programming, Volume 2019, Issue 1, 2019., 2019
Program slicing is a technique to extract the part of a program (the slice) that influences or is influenced by a set of variables at a given point (the slicing criterion). Computing minimal slices is undecidable in the general case, and obtaining the minimal slice of a given program is normally computationally prohibitive even for very small programs.
Sergio Pérez, Josep Silva, Salvador Tamarit, Michele Risi   +3 more
wiley   +1 more source