NDLI: Software Vulnerability Detection Using Backward Trace Analysis and Symbolic Execution

Content Provider	IEEE Xplore Digital Library
Author	Hongzhe Li Taebeom Kim Bat-Erdene, M. Heejo Lee
Copyright Year	2013
Description	Author affiliation: Div. of Comput. & Commun. Eng., Korea Univ., Seoul, South Korea (Hongzhe Li; Taebeom Kim; Bat-Erdene, M.; Heejo Lee)
Abstract	Software vulnerability has long been considered an important threat to the safety of software systems. When source code is accessible, we can get much help from the information of source code to detect vulnerabilities. Static analysis has been used frequently to scan code for errors that cause security problems when source code is available. However, they often generate many false positives. Symbolic execution has also been proposed to detect vulnerabilities and has shown good performance in some researches. However, they are either ineffective in path exploration or could not scale well to large programs. During practical use, since most of paths are actually not related to security problems and software vulnerabilities are usually caused by the improper use of security-sensitive functions, the number of paths could be reduced by tracing sensitive data backwardly from security-sensitive functions so as to consider paths related to vulnerabilities only. What's more, in order to leave ourselves free from generating bug triggering test input, formal reasoning could be used by solving certain program conditions. In this research, we propose backward trace analysis and symbolic execution to detect vulnerabilities from source code. We first find out all the hot spot in source code file. Based on each hot spot, we construct a data flow tree so that we can get the possible execution traces. Afterwards, we do symbolic execution to generate program constraint(PC) and get security constraint(SC) from our predefined security requirements along each execution trace. A program constraint is a constraint imposed by program logic on program variables. A security constraint(SC) is a constraint on program variables that must be satisfied to ensure system security. Finally, this hot spot will be reported as a vulnerability if there is an assignment of values to program inputs which could satisfy PC but violates SC, in other words, satisfy PC Λ S̅C̅. We have implemented our approach and conducted experiments on test cases which we randomly choose from Juliet Test Suites provided by US National Security Agency(NSA). The results show that our approach achieves Precision value of 83.33%, Recall value of 90.90% and F1 Value of 86.95% which gains the best performance among competing tools. Moreover, our approach can efficiently mitigate path explosion problem in traditional symbolic execution.
Starting Page	446
Ending Page	454
File Size	787757
Page Count	9
File Format	PDF
ISBN	9780769550084
DOI	10.1109/ARES.2013.59
Language	English
Publisher	Institute of Electrical and Electronics Engineers, Inc. (IEEE)
Publisher Date	2013-09-02
Publisher Place	Germany
Access Restriction	Subscribed
Rights Holder	Institute of Electrical and Electronics Engineers, Inc. (IEEE)
Subject Keyword	program constraint static analysis symbolic execution Software Explosions Concrete Cognition vulnerability detection Security Pattern matching Testing
Content Type	Text
Resource Type	Article

Sl.	Authority	Responsibilities	Communication Details
1	Ministry of Education (GoI), Department of Higher Education	Sanctioning Authority	https://www.education.gov.in/ict-initiatives
2	Indian Institute of Technology Kharagpur	Host Institute of the Project: The host institute of the project is responsible for providing infrastructure support and hosting the project	https://www.iitkgp.ac.in
3	National Digital Library of India Office, Indian Institute of Technology Kharagpur	The administrative and infrastructural headquarters of the project	Dr. B. Sutradhar bsutra@ndl.gov.in
4	Project PI / Joint PI	Principal Investigator and Joint Principal Investigators of the project	Dr. B. Sutradhar bsutra@ndl.gov.in Prof. Saswat Chakrabarti will be added soon
5	Website/Portal (Helpdesk)	Queries regarding NDLI and its services	support@ndl.gov.in
6	Contents and Copyright Issues	Queries related to content curation and copyright issues	content@ndl.gov.in
7	National Digital Library of India Club (NDLI Club)	Queries related to NDLI Club formation, support, user awareness program, seminar/symposium, collaboration, social media, promotion, and outreach	clubsupport@ndl.gov.in
8	Digital Preservation Centre (DPC)	Assistance with digitizing and archiving copyright-free printed books	dpc@ndl.gov.in
9	IDR Setup or Support	Queries related to establishment and support of Institutional Digital Repository (IDR) and IDR workshops	idr@ndl.gov.in

File Parsing Vulnerability Detection with Symbolic Execution

Testing c programs for vulnerability using trace-based symbolic execution and satisfiability analysis.

Improving guide-based vulnerability detection with hybrid symbolic execution

Research on Parallel Symbolic Execution through Program Dependence Analysis

A scalable and accurate hybrid vulnerability analysis framework

Automatic software vulnerability detection based on guided deep fuzzing

Intrusion detection using signatures extracted from execution profiles

Postconditioned Symbolic Execution

Detecting Vulnerabilities in C Programs Using Trace-Based Testing

Software Vulnerability Detection Using Backward Trace Analysis and Symbolic Execution

Similar Documents

File Parsing Vulnerability Detection with Symbolic Execution

Testing c programs for vulnerability using trace-based symbolic execution and satisfiability analysis.

Improving guide-based vulnerability detection with hybrid symbolic execution

Research on Parallel Symbolic Execution through Program Dependence Analysis

A scalable and accurate hybrid vulnerability analysis framework

Automatic software vulnerability detection based on guided deep fuzzing

Intrusion detection using signatures extracted from execution profiles

Postconditioned Symbolic Execution

Detecting Vulnerabilities in C Programs Using Trace-Based Testing

Software Vulnerability Detection Using Backward Trace Analysis and Symbolic Execution