Paper Info
Title
Concolic Execute Fuzzing Based on Control-Flow Analysis.
Abstract
This paper proposes a method which utilizing taint analysis to reduce the unnecessary analysis routine, concentrating on the control-flow altering input using concolic (concrete and symbolic) execution procedure. A prototype, Concolic Fuzz is implemented based on this method, which is built on Pin platform at x86 binary level and using Z3 as the SMT (Satisfiability Modulo Theories) solver. The results of experiments verify that our approach is effective in increasing code coverage with remarkably lower resource and time cost than the standard fuzzing and concolic testing tools. The scale of fuzzing range and symbols are reduced, so as the computing resource and time consumption, especially when the input data is in highly structured and complex file format.
Year
DOI
Venue
2015
10.1109/CIS.2015.99
CIS
Keywords
Field
DocType
dynamic taint analysis, concolic execution, control-flow, fuzzing test, code coverage
Code coverage,Fuzz testing,Programming language,Computer science,Taint checking,Concolic testing,Control flow analysis,Artificial intelligence,Satisfiability modulo theories,File format,Solver,Machine learning,Embedded system
Conference
Citations 
PageRank 
References 
0
0.34
13
Authors
4
Name
Order
Citations
PageRank
Jingxi Li100.34
Xiaojie Xu28825.08
Lejian Liao320232.25
L. Li478.13