Results 41 to 50 of about 949,278 (287)

Formalization of Error Criteria for static symbolic execution

open access: yesТруды Института системного программирования РАН, 2018
This paper is devoted to the formalization of the error criteria for program static analysis, based on symbolic execution. Using the original error criteria of symbolic execution approach in program static analysis leads to an excessive number of false ...
V. K. Koshelev
doaj   +1 more source

Security protocol code analysis method combining model learning and symbolic execution

open access: yes网络与信息安全学报, 2021
Symbolic execution can comprehensively analyze program execution space in theory, but it is not feasible in practice for large programs like security protocols, due to the explosion of path space and the limitation of difficulty in solving path ...
ZHANG Xieli, ZHU Yuefei, GU Chunxiang, CHEN Xi
doaj   +3 more sources

Testcase Synchronization Method for Hybrid Fuzzing Based on Keypoints

open access: yes工程科学与技术, 2022
The hybrid fuzzing technique leverages the symbolic execution techniques and the fuzz testing techniques to achieve complementary goals. The synchronization of testcase is the key to collaborate between modules.
Lei ZHAO   +3 more
doaj  

Generation of the weakest preconditions of programs with dynamic memory in symbolic execution

open access: yesНаучно-технический вестник информационных технологий, механики и оптики
Symbolic execution is a widely used method for the systematic study of program execution paths; it allows solving a number of important problems related to verification of correctness: searching for errors and vulnerabilities, automatic test generation ...
A. V. Misonizhnik   +4 more
doaj   +1 more source

Ffuzz: Towards full system high coverage fuzz testing on binary executables. [PDF]

open access: yesPLoS ONE, 2018
Bugs and vulnerabilities in binary executables threaten cyber security. Current discovery methods, like fuzz testing, symbolic execution and manual analysis, both have advantages and disadvantages when exercising the deeper code area in binary ...
Bin Zhang   +4 more
doaj   +1 more source

Abstract Interpretation, Symbolic Execution and Constraints [PDF]

open access: yes, 2020
interpretation is a static analysis framework for sound over-approximation of all possible runtime states of a program. Symbolic execution is a framework for reachability analysis which tries to explore all possible execution paths of a program. A shared
Schachte, P   +15 more
core   +1 more source

Test Readability Optimization in Context of Symbolic Execution

open access: yesТруды Института системного программирования РАН, 2018
Software testing is a time consuming process. In general, software companies spend about 50% of development time on testing. On the other hand, lack of testing implies financial and other risks.
I. A. Yakimov, A. S. Kuznetsov
doaj   +1 more source

PDF Malicious Indicators Extraction Technique Based on Improved Symbolic Execution [PDF]

open access: yesJisuanji kexue
The malicious PDF document is a common attack method used by APT organizations.Analyzing extracted indicators of embedded JavaScript code is an important means to determine the maliciousness of the documents.However,attackers can adopt high obfuscation ...
SONG Enzhou, HU Tao, YI Peng, WANG Wenbo
doaj   +1 more source

On the Automatic Analysis of the Practical Resistance of Obfusting Transformations

open access: yesМоделирование и анализ информационных систем, 2019
A method is developed for assessing the practical persistence of obfuscating transformations of programs based on the calculation of the similarity index for the original, obfuscated and deobfuscated programs.
Petr D. Borisov, Yu. V. Kosolapov
doaj   +1 more source

Building security predicates for some types of vulnerabilities

open access: yesТруды Института системного программирования РАН, 2018
Approaches for code execution using program vulnerabilities are considered in this paper. Particularly, ways of code execution using buffer overflow on stack and on heap, using use-after-free vulnerabilities and format string vulnerabilities are examined
A. N. Fedotov   +3 more
doaj   +1 more source

Home - About - Disclaimer - Privacy