Automated Search for Vulnerabilities in ARM Software Using Dynamic Symbolic Execution

被引：1
|
作者：
Ovasapyan, T. D. [1 ]
Knyazev, P., V [1 ]
Moskvin, D. A. [1 ]
机构：
[1] Peter Great St Petersburg Polytech Univ, St Petersburg 195251, Russia
来源：
AUTOMATIC CONTROL AND COMPUTER SCIENCES | 2021年 / 55卷 / 08期
基金：
俄罗斯基础研究基金会;
关键词：
symbolic execution; ARM architecture; taint analysis; Internet of Things; cyberphysical systems; fuzzing; NETWORKS;
D O I：
10.3103/S014641162108023X
中图分类号：
TP [自动化技术、计算机技术];
学科分类号：
0812 ;
摘要：
Automated search for vulnerabilities in ARM IoT devices is considered. The problems of using symbolic execution for vulnerability detection are investigated. A dynamic symbolic execution approach with taint analysis is proposed to improve the efficiency of vulnerability detection, which eliminates the problems that arise when using classical symbolic execution.
引用
收藏
页码：932 / 940
页数：9
相关论文
共 50 条
  • [1] Automated Search for Vulnerabilities in ARM Software Using Dynamic Symbolic Execution
    T. D. Ovasapyan
    P. V. Knyazev
    D. A. Moskvin
    Automatic Control and Computer Sciences, 2021, 55 : 932 - 940
  • [2] Automated Compatibility Testing Method for Software Logic by Using Symbolic Execution
    Uetsuki, Keiji
    Matsuodani, Tohru
    Tsuda, Kazuhiko
    2015 IEEE EIGHTH INTERNATIONAL CONFERENCE ON SOFTWARE TESTING, VERIFICATION AND VALIDATION WORKSHOPS (ICSTW), 2015,
  • [3] A Survey of Search Strategies in the Dynamic Symbolic Execution
    Liu, Yu
    Zhou, Xu
    Gong, Wei-Wei
    4TH ANNUAL INTERNATIONAL CONFERENCE ON INFORMATION TECHNOLOGY AND APPLICATIONS (ITA 2017), 2017, 12
  • [4] A Systematic Review of Search Strategies in Dynamic Symbolic Execution
    Sabbaghi, Arash
    Keyvanpour, Mohammad Reza
    COMPUTER STANDARDS & INTERFACES, 2020, 72
  • [5] Dynamic symbolic execution approach based on tabu search
    Cai, Jun
    Zou, Peng
    Ma, Jinxin
    He, Jun
    Beijing Hangkong Hangtian Daxue Xuebao/Journal of Beijing University of Aeronautics and Astronautics, 2015, 41 (12): : 2348 - 2355
  • [6] AUTOMATED REGRESSION TESTING USING SYMBOLIC EXECUTION
    Barisas, Dominykas
    Milasius, Tomas
    Bareisa, Eduardas
    INFORMATION TECHNOLOGIES' 2011, 2011, : 117 - 124
  • [7] Automated Regression Testing using Symbolic Execution
    Barisas, D.
    Milasius, T.
    Bareisa, E.
    ELEKTRONIKA IR ELEKTROTECHNIKA, 2011, (06) : 101 - 105
  • [8] Automated Coverage-Driven Test Data Generation Using Dynamic Symbolic Execution
    Su, Ting
    Pu, Geguang
    Fang, Bin
    He, Jifeng
    Yan, Jun
    Jiang, Siyuan
    Zhao, Jianjun
    2014 EIGHTH INTERNATIONAL CONFERENCE ON SOFTWARE SECURITY AND RELIABILITY, 2014, : 98 - 107
  • [9] Parallel Symbolic Execution for Automated Real-World Software Testing
    Bucur, Stefan
    Ureche, Vlad
    Zamfir, Cristian
    Candea, George
    EUROSYS 11: PROCEEDINGS OF THE EUROSYS 2011 CONFERENCE, 2011, : 183 - 197
  • [10] State of the art: Dynamic symbolic execution for automated test generation
    Chen, Ting
    Zhang, Xiao-song
    Guo, Shi-ze
    Li, Hong-yuan
    Wu, Yue
    FUTURE GENERATION COMPUTER SYSTEMS-THE INTERNATIONAL JOURNAL OF ESCIENCE, 2013, 29 (07): : 1758 - 1773
12345