Software Vulnerabilities Detection Based on Random Programming

Abstract:

Despite many automatic vulnerability detection approaches have been well documented, existing solutions for discovering software vulnerabilities in binary software are still difficult and time consuming. In this paper we present an approach based on random programming that works to quickly discover vulnerability in programmable binary software. By extracting the code snippets for special features and fixed API usages, we can get a set of original functional templates, and then we randomize the mutable factors in those templates. After that we reasonably make combination of those templates to produce final test templates. Finally, by concretizing the random factors we execute those test templates and monitor the software be tested to discover vulnerabilities. By template programming we can produce more reasonable test case, which makes our approach more effective than other solutions.

• Periodical: Applied Mechanics and Materials (Volumes 571-572)
• Pages: 553-558
• DOI: https://doi.org/10.4028/www.scientific.net/AMM.571-572.553
• Online since: June 2014
• Authors: Bo Wu*, Meng Jun Li, Bin Zhang, Chao Feng, Quan Zhang, Chao Jing Tang
• Keywords: Random Programming, Software Vulnerability, Template Programming, Vulnerability Detection

References

[1] Kelly S. Memory Leak Detection via Static Analysis & Novel AST Traversal Optimizations for the ROSE Compiler[J]. (2013).

[2] Savitskii V O, Sidorov D V. Fast analysis of source code in C and C++[J]. Programming and Computer Software, 2013, 39(1): 49-55.

DOI: 10.1134/s0361768813010064

[3] Song D, Brumley D, Yin H, et al. BitBlaze: Binary Analysis for Computer Security[J]. (2013).

[4] Brumley D, Cha S K, Avgerinos T, et al. Detecting exploitable bugs in binary code: U.S. Patent Application 13/898, 824[P]. 2013-5-21.

[5] Godefroid P, Levin M Y, Molnar D. Sage: Whitebox fuzzing for security testing[J]. Queue, 2012, 10(1): 20.

DOI: 10.1145/2090147.2094081

[6] Cadar C, Sen K. Symbolic execution for software testing: three decades later[J]. Communications of the ACM, 2013, 56(2): 82-90.

DOI: 10.1145/2408776.2408795

[7] V. Chipounov, V. Kuznetsov, and G. Candea. S2E: a platform for in-vivo multi-path analysis of software systems. In Sixteenth International Conference on Architecture Support for Programming Languages and Operating Systems (ASPLOS '11), pages 265–278, (2011).

DOI: 10.1145/1950365.1950396

[8] V Chipounov, V Kuznetsov, G Candea. The s2e platform: Design, implementation, and applications[J]. ACM Transactions on Computer Systems (TOCS), 2012, 30(1): 2.

DOI: 10.1145/2110356.2110358

[9] Schwartz E J, Avgerinos T, Brumley D. All you ever wanted to know about dynamic taint analysis and forward symbolic execution [C]. Security and Privacy (SP), 2010 IEEE Symposium on. IEEE, 2010: 317-331.

DOI: 10.1109/sp.2010.26

[10] Browsers Standards: http: /www. w3. org/standards/agents/browsers.

[11] IE Developer Tools: http: /msdn. microsoft. com/en-us/library/dd565625%28v=vs. 85%29. aspx.

[12] JavaScript Development Tools Debug: http: /www. eclipse. org/webtools/jsdt/debug.

[13] Debugging Ref: http: /msdn. microsoft. com/en-us/library/windows/desktop/ms679304. aspx.