Formalization of Error Criteria for static symbolic execution
This paper is devoted to the formalization of the error criteria for program static analysis, based on symbolic execution. Using the original error criteria of symbolic execution approach in program static analysis leads to an excessive number of false ...
V. K. Koshelev
doaj +1 more source
Security protocol code analysis method combining model learning and symbolic execution
Symbolic execution can comprehensively analyze program execution space in theory, but it is not feasible in practice for large programs like security protocols, due to the explosion of path space and the limitation of difficulty in solving path ...
ZHANG Xieli, ZHU Yuefei, GU Chunxiang, CHEN Xi
doaj +3 more sources
Testcase Synchronization Method for Hybrid Fuzzing Based on Keypoints
The hybrid fuzzing technique leverages the symbolic execution techniques and the fuzz testing techniques to achieve complementary goals. The synchronization of testcase is the key to collaborate between modules.
Lei ZHAO +3 more
doaj
Generation of the weakest preconditions of programs with dynamic memory in symbolic execution
Symbolic execution is a widely used method for the systematic study of program execution paths; it allows solving a number of important problems related to verification of correctness: searching for errors and vulnerabilities, automatic test generation ...
A. V. Misonizhnik +4 more
doaj +1 more source
Ffuzz: Towards full system high coverage fuzz testing on binary executables. [PDF]
Bugs and vulnerabilities in binary executables threaten cyber security. Current discovery methods, like fuzz testing, symbolic execution and manual analysis, both have advantages and disadvantages when exercising the deeper code area in binary ...
Bin Zhang +4 more
doaj +1 more source
Abstract Interpretation, Symbolic Execution and Constraints [PDF]
interpretation is a static analysis framework for sound over-approximation of all possible runtime states of a program. Symbolic execution is a framework for reachability analysis which tries to explore all possible execution paths of a program. A shared
Schachte, P +15 more
core +1 more source
Test Readability Optimization in Context of Symbolic Execution
Software testing is a time consuming process. In general, software companies spend about 50% of development time on testing. On the other hand, lack of testing implies financial and other risks.
I. A. Yakimov, A. S. Kuznetsov
doaj +1 more source
PDF Malicious Indicators Extraction Technique Based on Improved Symbolic Execution [PDF]
The malicious PDF document is a common attack method used by APT organizations.Analyzing extracted indicators of embedded JavaScript code is an important means to determine the maliciousness of the documents.However,attackers can adopt high obfuscation ...
SONG Enzhou, HU Tao, YI Peng, WANG Wenbo
doaj +1 more source
On the Automatic Analysis of the Practical Resistance of Obfusting Transformations
A method is developed for assessing the practical persistence of obfuscating transformations of programs based on the calculation of the similarity index for the original, obfuscated and deobfuscated programs.
Petr D. Borisov, Yu. V. Kosolapov
doaj +1 more source
Building security predicates for some types of vulnerabilities
Approaches for code execution using program vulnerabilities are considered in this paper. Particularly, ways of code execution using buffer overflow on stack and on heap, using use-after-free vulnerabilities and format string vulnerabilities are examined
A. N. Fedotov +3 more
doaj +1 more source

