Input Generation via Taintdata Identification: Finding Hidden Path in the Environment‐Intensive Program. Issue 3 (1st July 2015)

• Record Type: Journal Article
• Authors: Lei, Xue; Huang, Wei; Fan, Wenqing; Yang, Yixian
• Is Part Of: Chinese journal of electronics. Volume 24:Issue 3(2015)
• Page Start: 480
• Page End: 486
• Publication Date: 2015-07-01
• Subjects: program diagnostics -- program testing; input generation -- Taintdata identification -- symbolic execution -- analysis -- program behavior analysis -- concolic testing tools -- data input interacting functions -- fine‐grained taint analysis; Electronics -- Periodicals; Electronics -- China -- Periodicals; Electronics; China; Periodicals; 621.38105
• DOI: 10.1049/cje.2015.07.007
• Languages: English
• ISSNs: 1022-4653

Abstract

Abstract : Concolic testing is an integrated approachof symbolic execution and dynamic analysis, which iswidely adopted by security researchers for program behavioranalysis. This approach fails on hidden path discoveryof environment‐intensive program. We investigated onexisting concolic testing tools and found out that severalof them does not take this issue into account while otherssolved this issue with overloaded working model. Weproposed a systematic and unified approach of automaticallyidentifying and modifying the output of the Datainput interacting functions (DIIF) based on fine‐grainedtaint analysis, which detects and updates the data interactingwith the runtime environment and generating a newcustomized set of inputs to execute hidden paths, to revealthe hidden paths on only particular runtime configurationor context. A prototype was developed and evaluated witha set of complex and environment‐intensive programs. Theexperimental result demonstrated that our approach coulddetect the DIIF precisely and improve the code coverage.