Scaling Concolic Execution of Binary Programs for Security Applications

Keywords

Concolic testing, Symbolic execution, Computer science, Program analysis, Code (set theory)

References

• Towards Automatic Discovery of Deviations in Binary Implementations with Applications to Error Detection and Fingerprint GenerationDavid Brumley, Juan Caballero, Zhenkai Liang — 2007
• MACE: Model-inference-Assisted Concolic Exploration for Protocol and Vulnerability DiscoveryChia Yuan Cho, Domagoj Babić, Pongsin Poosankam — 2011
• IntScope: Automatically Detecting Integer Overflow Vulnerability in X86 Binary Using Symbolic ExecutionTielei Wang, Tao Wei, Zhiqiang Lin — 2009
• Automated Whitebox Fuzz TestingPatrice Godefroid, Michael Y. Levin, David A. Molnar — 2008
• Take Two Software Updates and See Me in the Morning: The Case for Software Security Evaluations of Medical DevicesSteven Hanna, Rolf Rolles, Andrés Molina–Markham — 2011
• Automatic Protocol Format Reverse Engineering through Context-Aware Monitored ExecutionZhiqiang Lin, Xuxian Jiang, Dongyan Xu — 2008
• Binary Code Extraction and Interface Identification for Security ApplicationsJuan Caballero, Noah M. Johnson, Stephen McCamant — 2009
• Towards Generating High Coverage Vulnerability-Based Signatures with Protocol-Level Constraint-Guided ExplorationJuan Caballero, Zhenkai Liang, Pongsin Poosankam — 2009
• AEG: Automatic Exploit GenerationThanassis Avgerinos, Cha, Sang Kil, Brent Lim Tze Hao — 2011
• Technology, Policy, Law, and Ethics Regarding U.S. Acquisition and Use of Cyberattack CapabilitiesNational Research Council — 2009
• Dynamic Test Generation to Find Integer Bugs in x86 Binary Linux ProgramsDávid Molnár, Xue Cong Li, David Wagner — 2009
• Insights from the Inside: A View of Botnet Management from InfiltrationChia Yuan Cho, Juan Caballero, Chris Grier — 2010
• Discoverer: Automatic Protocol Reverse Engineering from Network TracesWeidong Cui, Jayanthkumar Kannan, Helen J. Wang — 2007
• Limits of Learning-based Signature Generation with AdversariesShobha Venkataraman, Avrim Blum, Dawn Song — 2008
• Black Box CheckingDoron Peled, Moshe Y. Vardi, Mihalis Yannakakis — 1999
• Colin de la Higuera: Grammatical inference: learning automata and grammarsWalter Daelemans — 2010
• KLEE: unassisted and automatic generation of high-coverage tests for complex systems programsCristian Cadar, Daniel Dunbar, Dawson Engler — 2008
• Scalable error detection using boolean satisfiabilityYichen Xie, Alex Aiken — 2005
• Inspector Gadget: Automated Extraction of Proprietary Gadgets from Malware BinariesClemens Kolbitsch, Thorsten Holz, Christopher Kruegel — 2010
• Pentagons: a weakly relational abstract domain for the efficient validation of array accessesFrancesco Logozzo, Manuel Fähndrich — 2008

Cited by

• Scaling Concolic Testing for the Environment-Intensive ProgramLei Xue, Wei Huang, W. Fan — 2015
• Application Model of Modern Artificial Neural Network Methods for the Analysis of Information Systems SecurityRoman Demidov, Alexander Pechenkin, P. D. Zegzhda — 2018
• Implementation of an effective dynamic concolic execution framework for analyzing binary programsErzhou Zhu, Peng Wen, Kanqi Ni — 2019

Related papers

• SynFuzz: Efficient Concolic Execution via Branch Condition SynthesisWookhyun Han, Md Lutfor Rahman, Yuxuan Chen — 2019
• Dynamic Symbolic Execution of Higher-Order FunctionsShu Hung You, Robert Bruce Findler, Christos Dimoulas — 2020
• Novel Approach to Improve Concolic TestingArun Kumar Sahani — 2015
• A Search Strategy Guided by Uncovered Branches for Concolic TestingQixing Dong, Jun Yan, Jian Zhang — 2013
• TRANSIT: specifying protocols with concolic snippetsAbhishek Udupa, Arun Raghavan, Jyotirmoy V. Deshmukh — 2013
• MultiSE: multi-path symbolic execution using value summariesKoushik Sen, George C. Necula, Liang Gong — 2015