NDLI: EXE: Automatically Generating Inputs of Death

Please wait, while we are loading the content...

ACM Transactions on Information and System Security (TISSEC) : Volume 18

ACM Transactions on Information and System Security (TISSEC) : Volume 17

ACM Transactions on Information and System Security (TISSEC) : Volume 16

ACM Transactions on Information and System Security (TISSEC) : Volume 15

ACM Transactions on Information and System Security (TISSEC) : Volume 14

ACM Transactions on Information and System Security (TISSEC) : Volume 13

ACM Transactions on Information and System Security (TISSEC) : Volume 12

Issue 4, April 2009

Issue 3, January 2009

Issue 2, December 2008

Guest Editorial: Special Issue on Computer and Communications Security

Enforcing Safety and Consistency Constraints in Policy-Based Authorization Systems

Data Collection with Self-Enforcing Privacy

EXE: Automatically Generating Inputs of Death

Fast and Black-box Exploit Detection and Signature Generation for Commodity Software

Puppetnets: Misusing Web Browsers as a Distributed Attack Infrastructure

Thwarting E-mail Spam Laundering

Issue 1, October 2008

ACM Transactions on Information and System Security (TISSEC) : Volume 11

ACM Transactions on Information and System Security (TISSEC) : Volume 10

ACM Transactions on Information and System Security (TISSEC) : Volume 9

ACM Transactions on Information and System Security (TISSEC) : Volume 8

ACM Transactions on Information and System Security (TISSEC) : Volume 7

ACM Transactions on Information and System Security (TISSEC) : Volume 6

ACM Transactions on Information and System Security (TISSEC) : Volume 5

ACM Transactions on Information and System Security (TISSEC) : Volume 4

ACM Transactions on Information and System Security (TISSEC) : Volume 3

ACM Transactions on Information and System Security (TISSEC) : Volume 2

ACM Transactions on Information and System Security (TISSEC) : Volume 1

EXE: Automatically Generating Inputs of Death

Content Provider	ACM Digital Library
Author	Cadar, Cristian Ganesh, Vijay Dill, David L. Pawlowski, Peter M. Engler, Dawson R.
Copyright Year	2008
Abstract	This article presents EXE, an effective bug-finding tool that automatically generates inputs that crash real code. Instead of running code on manually or randomly constructed input, EXE runs it on symbolic input initially allowed to be anything. As checked code runs, EXE tracks the constraints on each symbolic (i.e., input-derived) memory location. If a statement uses a symbolic value, EXE does not run it, but instead adds it as an input-constraint; all other statements run as usual. If code conditionally checks a symbolic expression, EXE forks execution, constraining the expression to be true on the true branch and false on the other. Because EXE reasons about all possible values on a path, it has much more power than a traditional runtime tool: (1) it can force execution down any feasible program path and (2) at dangerous operations (e.g., a pointer dereference), it detects if the current path constraints allow $\textit{any}$ value that causes a bug. When a path terminates or hits a bug, EXE automatically generates a test case by solving the current path constraints to find concrete values using its own co-designed constraint solver, STP. Because EXE’s constraints have no approximations, feeding this concrete input to an uninstrumented version of the checked code will cause it to follow the same path and hit the same bug (assuming deterministic code). EXE works well on real code, finding bugs along with inputs that trigger them in: the BSD and Linux packet filter implementations, the dhcpd DHCP server, the pcre regular expression library, and three Linux file systems.
Starting Page	1
Ending Page	38
Page Count	38
File Format	PDF
ISSN	10949224
e-ISSN	15577406
DOI	10.1145/1455518.1455522
Volume Number	12
Issue Number	2
Journal	ACM Transactions on Information and System Security (TISSEC)
Language	English
Publisher	Association for Computing Machinery (ACM)
Publisher Date	2008-12-01
Publisher Place	New York
Access Restriction	One Nation One Subscription (ONOS)
Subject Keyword	Attack generation Bug finding Constraint solving Dynamic analysis Symbolic execution Test case generation
Content Type	Text
Resource Type	Article
Subject	Computer Science Safety, Risk, Reliability and Quality

Sl.	Authority	Responsibilities	Communication Details
1	Ministry of Education (GoI), Department of Higher Education	Sanctioning Authority	https://www.education.gov.in/ict-initiatives
2	Indian Institute of Technology Kharagpur	Host Institute of the Project: The host institute of the project is responsible for providing infrastructure support and hosting the project	https://www.iitkgp.ac.in
3	National Digital Library of India Office, Indian Institute of Technology Kharagpur	The administrative and infrastructural headquarters of the project	Dr. B. Sutradhar bsutra@ndl.gov.in
4	Project PI / Joint PI	Principal Investigator and Joint Principal Investigators of the project	Dr. B. Sutradhar bsutra@ndl.gov.in Prof. Saswat Chakrabarti will be added soon
5	Website/Portal (Helpdesk)	Queries regarding NDLI and its services	support@ndl.gov.in
6	Contents and Copyright Issues	Queries related to content curation and copyright issues	content@ndl.gov.in
7	National Digital Library of India Club (NDLI Club)	Queries related to NDLI Club formation, support, user awareness program, seminar/symposium, collaboration, social media, promotion, and outreach	clubsupport@ndl.gov.in
8	Digital Preservation Centre (DPC)	Assistance with digitizing and archiving copyright-free printed books	dpc@ndl.gov.in
9	IDR Setup or Support	Queries related to establishment and support of Institutional Digital Repository (IDR) and IDR workshops	idr@ndl.gov.in

EXE: automatically generating inputs of death

EXE: A system for automatically generating inputs of death using symbolic execution

EXE: Automatically generating inputs of death (2006)

ABSTRACT EXE: Automatically Generating Inputs of Death

ABSTRACT EXE: Automatically Generating Inputs of Death

EXE: A System for Automatically Generating Inputs of Death Using Symbolic Execution (2006)

ABSTRACT EXE: Automatically Generating Inputs of Death

Test-case generation and bug-finding through symbolic execution

Symbolic execution with mixed concrete-symbolic solving

EXE: Automatically Generating Inputs of Death

Similar Documents

EXE: automatically generating inputs of death

EXE: A system for automatically generating inputs of death using symbolic execution

EXE: Automatically generating inputs of death (2006)

ABSTRACT EXE: Automatically Generating Inputs of Death

ABSTRACT EXE: Automatically Generating Inputs of Death

EXE: A System for Automatically Generating Inputs of Death Using Symbolic Execution (2006)

ABSTRACT EXE: Automatically Generating Inputs of Death

Test-case generation and bug-finding through symbolic execution

Symbolic execution with mixed concrete-symbolic solving

EXE: Automatically Generating Inputs of Death