删除或更新信息,请邮件至freekaoyan#163.com(#换成@)

Digger:采用新路径记录方法的fuzzing工具

本站小编 Free考研考试/2021-12-21

本文二维码信息
二维码(扫一下试试看!)
Digger:采用新路径记录方法的fuzzing工具
Digger: a Fuzzer with an Improved Path-Recording Method
投稿时间:2019-10-22
DOI:10.15918/j.tbit1001-0645.2019.270
中文关键词:软件安全模糊测试混合执行覆盖率引导
English Keywords:software securityfuzzingdynamic symbolic executioncoverage-guided
基金项目:
作者单位
梁洪亮北京邮电大学 计算机学院, 北京 100876
陈奕修北京邮电大学 计算机学院, 北京 100876
裴霄潇北京邮电大学 计算机学院, 北京 100876
谢卓思北京邮电大学 计算机学院, 北京 100876
摘要点击次数:452
全文下载次数:167
中文摘要:
fuzzing和混合执行是二进制代码分析和测试领域的两个重要技术.为了探索结合这两种技术的潜力,并找到代码中的深层缺陷,本文提出了一种新的路径记录方法,以推进混合执行来辅助fuzzing,并在工具Digger中实现了该方法,Digger能够分析测试接收文件输入或使用额外参数的目标程序.在实际应用程序(如coreutils,catdvi等)上评估了Digger,结果表明,通过使用新的路径记录方法,相比现有成熟工具Driller,Digger能够达到更高的代码覆盖率并找到更多的缺陷.
English Summary:
Fuzzing and concolic execution are two important techniques in the area of binary analyzing and testing,and they are able to complement each other well.To find deep bugs in the code,a new path-recording approach was proposed to make concolic execution assist fuzzing.And the approach was implemented in a tool called Digger.The Digger was arranged to deal with target programs that require input from files or with extra arguments.The Digger was evaluated on an example program as well as real-world applications (e.g.,coreutils,catdvi,etc.).Experimental results show that by using the new path-recording approach,Digger can reach higher code coverage and find more bugs than a well-established tool,i.e.,Driller.
查看全文查看/发表评论下载PDF阅读器
相关话题/北京邮电大学 计算机 北京 代码 测试