Visualizing Path Exploration to Assist Problem Diagnosis for Structural Test Generation

Jun, Cao; Astorga, Angello; Srisakaokul, Siwakorn; Wu, Zhengkai; Liu, Xueqing; Xiao, Xusheng; Xie, Tao

doi:10.1109/vlhcc.2018.8506484

Cited by 1 publication

(2 citation statements)

References 14 publications

Supporting

Mentioning

Contrasting

Order By: Relevance

“…analysis of malware [33], static analysis of vulnerabilities [4], writing ROP exploits [3]). However only a few works [13,[22][23][24] have investigated visual solutions when performing symbolic explorations.…”

Section: Related Workmentioning

confidence: 99%

“…To overcome this limitation [13] proposes the PexViz viewer, which takes the extreme approach of visualizing path explorations through a Variant Control Flow Graph (VCFG) that displays only every branching condition and the entry point as nodes. Although more compact, a VCFG hides most program instructions as it hinges on the implicit assumption that the user has a good knowledge of the program semantics at each step.…”

Section: Related Workmentioning

confidence: 99%

See 1 more Smart Citation

SymNav: Visually Assisting Symbolic Execution

Angelini

Blasilli

Borzacchiello

et al. 2019

2019 IEEE Symposium on Visualization for Cyber Security (VizSec)

View full text Add to dashboard Cite

Modern software systems require the support of automatic program analyses to answer questions about their correctness, reliability, and safety. In recent years, symbolic execution techniques have played a pivotal role in this field, backing research in different domains such as software testing and software security. Like other powerful machine analyses, symbolic execution is often affected by efficiency and scalability issues that can be mitigated when a domain expert interacts with its working, steering the computation to achieve the desired goals faster. In this paper we explore how visual analytics techniques can help the user to grasp properties of the ongoing analysis and use such insights to refine the symbolic exploration process. To this end, we discuss two real-world usage scenarios from the malware analysis and the vulnerability detection domains, showing how our prototype system can help users make a wiser use of symbolic exploration techniques in the analysis of binary code.

show abstract