中国科学院软件研究所机构知识库
Advanced  
ISCAS OpenIR  > 软件所图书馆  > 会议论文
Title:
Heuristic path pruning algorithm based on error handling pattern recognition in detecting vulnerability
Author: Chen, Dong (1) ; Zhang, Yang (1) ; Cheng, Liang (1) ; Deng, Yi (1) ; Sun, Xiaoshan (1)
Conference Name: 2013 IEEE 37th Annual Computer Software and Applications Conference Workshops, COMPSACW 2013
Conference Date: July 22, 2013 - July 26, 2013
Issued Date: 2013
Conference Place: Kyoto, Japan
Keyword: symbolic execution ; path pruning ; error handling ; binary code ; vulnerability detection
Publish Place: IEEE Computer Society, 2001 L Street N.W., Suite 700, Washington, DC 20036-4928, United States
Indexed Type: CPCI ; EI
ISSN: 7303157
ISBN: 9780769549873
Department: (1) Institute of Software, Chinese Academy of Sciences, Beijing, China
Abstract: Using symbolic execution in path sensitive detection of software vulnerabilities develop quickly recently. It has a lot of application and research progress. However, symbolic execution still suffers from the scalability problem in practice, especially when applied to large scale or very complex programs. In this paper, we propose a new heuristic path pruning algorithm based on non-fatal error handling(NFEH) pattern recognition. Firstly, it use three patterns to recognize NFEH module in binary code and then stop analyzing NFEH branches when using symbolic execution. To demonstrate the effectiveness of this new approach, we have implemented a prototype tool PrunEbt based on a binary static integer vulnerability detecting tool (Statictaint). Experimental results are quite encouraging. PrunEbt can effectively recognize NFEH modules in binary program, significantly reduce the search space and have no omissions of true vulnerabilities. At last, it has detected one zero-day integer vulnerability in widely used image recognition library Libpng v1.5.13. © 2013 IEEE.
English Abstract: Using symbolic execution in path sensitive detection of software vulnerabilities develop quickly recently. It has a lot of application and research progress. However, symbolic execution still suffers from the scalability problem in practice, especially when applied to large scale or very complex programs. In this paper, we propose a new heuristic path pruning algorithm based on non-fatal error handling(NFEH) pattern recognition. Firstly, it use three patterns to recognize NFEH module in binary code and then stop analyzing NFEH branches when using symbolic execution. To demonstrate the effectiveness of this new approach, we have implemented a prototype tool PrunEbt based on a binary static integer vulnerability detecting tool (Statictaint). Experimental results are quite encouraging. PrunEbt can effectively recognize NFEH modules in binary program, significantly reduce the search space and have no omissions of true vulnerabilities. At last, it has detected one zero-day integer vulnerability in widely used image recognition library Libpng v1.5.13. © 2013 IEEE.
Language: 英语
Content Type: 会议论文
URI: http://ir.iscas.ac.cn/handle/311060/16542
Appears in Collections:软件所图书馆_会议论文

Files in This Item:

There are no files associated with this item.


Recommended Citation:
Chen, Dong ,Zhang, Yang ,Cheng, Liang ,et al. Heuristic path pruning algorithm based on error handling pattern recognition in detecting vulnerability[C]. 见:2013 IEEE 37th Annual Computer Software and Applications Conference Workshops, COMPSACW 2013. Kyoto, Japan. July 22, 2013 - July 26, 2013.
Service
Recommend this item
Sava as my favorate item
Show this item's statistics
Export Endnote File
Google Scholar
Similar articles in Google Scholar
[Chen, Dong (1)]'s Articles
[Zhang, Yang (1)]'s Articles
[Cheng, Liang (1)]'s Articles
CSDL cross search
Similar articles in CSDL Cross Search
[Chen, Dong (1)]‘s Articles
[Zhang, Yang (1)]‘s Articles
[Cheng, Liang (1)]‘s Articles
Related Copyright Policies
Null
Social Bookmarking
Add to CiteULike Add to Connotea Add to Del.icio.us Add to Digg Add to Reddit
所有评论 (0)
暂无评论
 
评注功能仅针对注册用户开放,请您登录
您对该条目有什么异议,请填写以下表单,管理员会尽快联系您。
内 容:
Email:  *
单位:
验证码:   刷新
您在IR的使用过程中有什么好的想法或者建议可以反馈给我们。
标 题:
 *
内 容:
Email:  *
验证码:   刷新

Items in IR are protected by copyright, with all rights reserved, unless otherwise indicated.

 

 

Valid XHTML 1.0!
Copyright © 2007-2019  中国科学院软件研究所 - Feedback
Powered by CSpace