Pre-testing Flash Device Driver through Model Checking Techniques

Kim, Moonzoo; Kim, Yun‐Ho; Choi, Yunja; Kim, Hotae

doi:10.1109/icst.2008.55

Cited by 10 publications

(6 citation statements)

References 13 publications

Supporting

Mentioning

Contrasting

Order By: Relevance

“…IJON [29] leverages annotations from a human analyst to overcome significant roadblocks in fuzzing and find deep‐state bugs. RVFUZZER [36] targets input validation bugs in robotic vehicles. GREYHOUND [15] directs a Wi‐Fi client to exhibit anomalous behaviors that deviate from Wi‐Fi protocols.…”

Section: Research Progress On Dgfmentioning

confidence: 99%

The progress, challenges, and perspectives of directed greybox fuzzing

Wang,

Zhou,

Yue

et al. 2023

Software Testing Verif & Rel

View full text Add to dashboard Cite

SummaryGreybox fuzzing is a scalable and practical approach for software testing. Most greybox fuzzing tools are coverage‐guided as reaching high code coverage is more likely to find bugs. However, since most covered codes may not contain bugs, blindly extending code coverage is less efficient, especially for corner cases. Unlike coverage‐guided greybox fuzzing which increases code coverage in an undirected manner, directed greybox fuzzing (DGF) spends most of its time allocation on reaching specific targets (e.g. the bug‐prone zone) without wasting resources stressing unrelated parts. Thus, DGF is particularly suitable for scenarios such as patch testing, bug reproduction, and special bug detection. For now, DGF has become an active research area. However, DGF has general limitations and challenges that are worth further studying. Based on the investigation of 42 state‐of‐the‐art fuzzers that are closely related to DGF, we conducted the first in‐depth study to summarize the empirical evidence on the research progress of DGF. This paper studies DGF from a broader view, which takes into account not only the location‐directed type that targets specific code parts but also the behavior‐directed type that aims to expose abnormal program behaviors. By analyzing the benefits and limitations of DGF research, we try to identify gaps in current research, meanwhile, reveal new research opportunities and suggest areas for further investigation.

show abstract

Section: Research Progress On Dgfmentioning

confidence: 99%

The progress, challenges, and perspectives of directed greybox fuzzing

Wang,

Zhou,

Yue

et al. 2023

Software Testing Verif & Rel

View full text Add to dashboard Cite

show abstract

“…The authors modelled the basic operations of filesystem as well as other features that are crucial to NAND flash hardware, such as wear-leveling and erase-unit reclamation. Papers [16,15,17,18] document experiments in the formal verification of OneNAND TM Flash Memory which is a trademark of Samsung Electronics.…”

Section: Verification Of Flash Memory Behaviourmentioning

confidence: 99%

Linking a state-rich process algebra to a state-free algebra to verify software/hardware implementation

Beg

Butterfield

2010

Proceedings of the 8th International Conference on Frontiers of Information Technology

View full text Add to dashboard Cite

Following the development of formalisms based on data and behavioural aspects of the system, there are number of attempts in which these two formalisms are mixed together to get benefit of both paradigms. 'Circus' being a living specification language with continuous collaboration from both academia and industry, is a combination of Z, CSP and the refinement calculus. To make use of the available and industry-proven tools for a particular programming paradigm, there is a need to develop a formally verified link between the one world and the other. The aim of this work is to develop a formally verified link between a state-rich process algebra i.e. 'Circus' to a state-free process algebra i.e. CSP. To achieve the research goal, the most suitable available tools are to identify. For developing link between targeted formal languages, we will identify the key translations required between the two languages. For ensuring correctness of the translation, we will formalise the key translation / refinement steps. These will form the theoretical core of the work and support the soundness of the link. In the end, we will select and verify a case study from the collection of software / hardware protocols.

show abstract

“…Through the various experiments carried out to analyze MSR, including conventional testing [16], concolic testing, and model checking [15], we found that it is important to build an accurate and efficient environment model for the analysis of a flash file system. Also, it was found that different analysis techniques can commonly use the same environment model.…”

Section: Importance Of An Environment Modelmentioning

confidence: 99%

“…The outermost loop iterates over LUs of data (line 2-18) until the numScts amount of the logical sectors are read completely. The second outermost loop iterates until the LS's of the current LU are completely read (line [5][6][7][8][9][10][11][12][13][14][15][16]. The third loop iterates over PUs mapped to the current LU (line 7-15).…”

Section: Multi-sector Read Operationmentioning

confidence: 99%

Concolic testing of the multi-sector read operation for flash storage platform software

Kim

Choi

2012

Form. Asp. Comput.

Self Cite

View full text Add to dashboard Cite

Abstract. In today's information society, flash memory has become a virtually indispensable component, particularly for mobile devices. In order for mobile devices to operate successfully, it is essential that flash memory be controlled correctly through file system software. However, as is typical for embedded software, conventional testing methods often fail to detect hidden flaws in the software due to the difficulty of creating effective test cases. As a different approach, model checking techniques guarantee a complete analysis, but only on a limited scale. In this paper, we describe an empirical study wherein a concolic testing method is applied to the multi-sector read operation for a flash memory. This method combines a symbolic static analysis and a concrete dynamic analysis to automatically generate test cases and perform exhaustive path testing accordingly. In addition, we analyze the advantages and weaknesses of the concolic testing approach on the domain of the flash file system compared to model checking techniques.

show abstract

Pre-testing Flash Device Driver through Model Checking Techniques

Cited by 10 publications

References 13 publications

The progress, challenges, and perspectives of directed greybox fuzzing

The progress, challenges, and perspectives of directed greybox fuzzing

Linking a state-rich process algebra to a state-free algebra to verify software/hardware implementation

Concolic testing of the multi-sector read operation for flash storage platform software

Contact Info

Product

Resources

About