Analysis of Program Patches Nature and Searching for Unpatched Code Fragments

Arutunian, Mariam; Aslanyan, Hayk; Vardanyan, Vahagn; Sirunyan, Vahagn; Kurmangaleev, Shamil; Gaissaryan, Serguei

doi:10.1109/ivmem.2019.00014

Cited by 3 publications

(1 citation statement)

References 13 publications

Supporting

Mentioning

Contrasting

Order By: Relevance

“…In order to improve software reliability, developers should repeatedly and constantly analyze and test their product. There are several methods and tools for that purpose [1][2][3][4][5]. Fuzzing is one of the most popular and efficient method of dynamic analysis.…”

Section: Introductionmentioning

confidence: 99%

Improving fuzzing performance by applying interval mutations

Саргсян¹,

Акопян²,

Мовсисян³

et al. 2019

Proceedings of ISP RAS

View full text Add to dashboard Cite

This paper presents a novel approach of generation effective inputs for fuzz testing. Most applications check input format before performing basic calculations. That kind of applications usually parse service information of input file to decide whether it is supported or not. Input formats which are not supported are discarded and the application finishes its execution immediately. For example, the service information of ELF (Extensible Linking Format) file should start with the following data: "0x7f 'E' 'L' 'F'". If a file does not contain this information in header section then it will not be considered as ELF. Effective fuzzing of an application which has input validation stage is a relevant and important problem. Random changes of input files usually malform service data and the target application finishes immediately without execution of main code. This makes fuzzing process inefficient. To solve this problem, we have designed and implemented three special plugins for ISP-Fuzzer. The first plugin is intended to collect execution traces. The second plugin connects fragments of input data and executed basic blocks of the target program. Based on that information we can determine potential fragments (critical fragments) of input data which should not be mutated for new test case generation. The third plugin is designed for interval mutations. It mutates input file escaping critical fragments detected by the second plugin. Experimental results prove the effectiveness of proposed method.

show abstract