期刊文献+

一种应用于动态污点分析的路径自动生成方法 被引量:2

A Path Automatic Generation Method for Dynamic Taint Analysis
下载PDF
导出
摘要 在对现有动态污点分析平台研究和分析的基础上,提出一种路径自动生成技术。借助二进制静态分析技术获取目标程序的指令序列,以基本块为粒度计算执行覆盖率,在目标程序动态执行中抓取其运行轨迹,由收集到的路径约束条件构造新的路径约束条件,经约束求解生成覆盖其它路径的新的测试用例。借助虚拟化技术实现动态污点分析各用例的并行执行,较大幅度提高污点分析的路径覆盖率和执行效率。 Based on the research and analysis of the existing dynamic taint analysis platform, a path automatic generation method is proposed. The sequence of instructions can be obtained by using binary static analysis technique and the binary code coverage rate is calculated with the base block as the granularity. The execution path of the target program is captured in the dynamic exe- cution of the target program and the new path constraint conditions are constructed by the collected path constraint conditions, new test cases which will cover other paths can be generated by constraint solving. The parallel implementation of dynamic taint analysis by using virtualization technology can greatly improve the efficiency and code coverage of the taint analysis.
出处 《计算机与现代化》 2017年第7期32-37,41,共7页 Computer and Modernization
关键词 动态污点分析 路径自动生成 约束求解 代码覆盖率 dynamic taint analysis path automatic generation constraint solving code coverage
  • 相关文献

参考文献2

二级参考文献9

  • 1Trusted Computing Group(TCG).TCG specification architecture overview[EB/OL].http://www.trustedcomputinggroup.org/files/resource_files/AC652DE1-1D09-3519-ADA026AOC05CFAC2/TCG_1_4_Architecture_Overview.pdf,2010-01-01.
  • 2Trusted Computing Group(TCG).TCG software stack(TSS)specification,Version 1.2,Errata A[EB/OL].http://www.trustedcomputing-group.org/files/resource_files/6479CD77-1D09-3519-AD89EAD1BCSC97F0/TSS_1_2_Errata_A-final.pdf,2010-01-01.
  • 3Gogul Balakrishnan.WYSINWYX:What you see is not what you execute[D].WI:University of Wisconsin,2007.
  • 4Akos Kiss,Judit Jasz,Tibor Gyimothy.Using dynamic information in the interprocedural static slicing of binary executables[J].Software Quality Journal,2005,13:227-245.
  • 5Sanjay Bhansali,Wen-Ke,Chen Stuart de Jong,et al.Framework for instruction-level tracing and analysis of program executions[C].ACM/Usenix International Conference on Virtual Execution Environments.Ottawam,CA:ACM,2006.
  • 6DataRescue.IDA pro[EB/OL].http://www.datarescue.com,2010-01-01.
  • 7James Newsome,Dawn Song.Dynamic taint analysis for automatic detection,analysis,and siguature generation of exploits on commodity software[C].San Diego,CA:Proceedings of the 12th Annual Network and Distributed System Security Symposium,2005.
  • 8Intel Corporation.Intel 64 and IA-32 architectures software developer's manual[EB/OL].http://www.intel.com/Assets/PDF/manual/253668.pdf,2010-01-01.
  • 9代伟,刘智,刘益和.基于二进制代码的动态污点分析[J].计算机应用研究,2014,31(8):2497-2501. 被引量:8

共引文献11

同被引文献20

引证文献2

二级引证文献20

相关作者

内容加载中请稍等...

相关机构

内容加载中请稍等...

相关主题

内容加载中请稍等...

浏览历史

内容加载中请稍等...
;
使用帮助 返回顶部