loading
Papers Papers/2020

Research.Publish.Connect.

Paper

Authors: Ciprian Paduraru ; Bogdan Ghimis and Alin Stefanescu

Affiliation: Department of Computer Science, University of Bucharest, Romania, Research Institute of the University of Bucharest, Romania

ISBN: 978-989-758-443-5

Keyword(s): Security, Threats, Vulnerabilities, Concolic, Symbolic, Execution, Testing, Tool, Binaries, x86, Tainting, Z3, Reinforcement Learning.

Abstract: This paper presents a new open-source testing tool capable of performing concolic execution on x86 binaries. Using this tool, one can find out ahead of time of potential bugs that can enable threats such as process hijacking and stack buffer overflow attacks. Although a similar tool, SAGE, already exists in literature, it is closed-sourced and we think that using its description to implement an open-sourced version of its main novel algorithm, Generational Search, is beneficial to both industry and research communities. This paper describes, in more detail than previous work, how the components at the core of a concolic execution tool, such as tracers, dynamic tainting mechanisms and SMT solvers, collaborate together to ensure code coverage. Also, it briefly describes how reinforcement learning can be used to speed up the state of the art heuristics for prioritization of inputs. Research opportunities and the technical difficulties that the authors observed during the current developm ent of the project are presented as well. (More)

CC BY-NC-ND 4.0

Sign In Guest: Register as new SciTePress user now for free.

Sign In SciTePress user: please login.

PDF ImageMy Papers

You are not signed in, therefore limits apply to your IP address 3.239.33.139

In the current month:
Recent papers: 100 available of 100 total
2+ years older papers: 200 available of 200 total

Paper citation in several formats:
Paduraru, C.; Ghimis, B. and Stefanescu, A. (2020). RiverConc: An Open-source Concolic Execution Engine for x86 Binaries.In Proceedings of the 15th International Conference on Software Technologies - Volume 1: ICSOFT, ISBN 978-989-758-443-5, pages 529-536. DOI: 10.5220/0009953905290536

@conference{icsoft20,
author={Ciprian Paduraru. and Bogdan Ghimis. and Alin Stefanescu.},
title={RiverConc: An Open-source Concolic Execution Engine for x86 Binaries},
booktitle={Proceedings of the 15th International Conference on Software Technologies - Volume 1: ICSOFT,},
year={2020},
pages={529-536},
publisher={SciTePress},
organization={INSTICC},
doi={10.5220/0009953905290536},
isbn={978-989-758-443-5},
}

TY - CONF

JO - Proceedings of the 15th International Conference on Software Technologies - Volume 1: ICSOFT,
TI - RiverConc: An Open-source Concolic Execution Engine for x86 Binaries
SN - 978-989-758-443-5
AU - Paduraru, C.
AU - Ghimis, B.
AU - Stefanescu, A.
PY - 2020
SP - 529
EP - 536
DO - 10.5220/0009953905290536

Login or register to post comments.

Comments on this Paper: Be the first to review this paper.