A tight integration of symbolic execution and fuzzing - Laboratoire Méthodes Formelles
Article Dans Une Revue Lecture Notes in Computer Science Année : 2021

A tight integration of symbolic execution and fuzzing

Résumé

Most bug finding tools rely on either fuzzing or symbolic execution. While they both work well in some situations, fuzzing struggles with complex conditions and symbolic execution suffers from path explosion and high constraint solving costs. In order to enjoy the advantages from both techniques, we propose a new approach called Lightweight Symbolic Execution (LSE) that integrates well with fuzzing. Especially, LSE does not require any call to a constraint solver and allows for quickly enumerating inputs. In this short paper, we present the basic concepts of LSE together with promising preliminary experiments.
Fichier principal
Vignette du fichier
2021-fps.pdf (310.6 Ko) Télécharger le fichier
Origine Fichiers produits par l'(les) auteur(s)

Dates et versions

cea-04232795 , version 1 (09-10-2023)

Identifiants

Citer

Yaëlle Vinçont, Sébastien Bardin, Michaël Marcozzi. A tight integration of symbolic execution and fuzzing. Lecture Notes in Computer Science, 2021, FPS 2021 - The 14th International Symposium on Foundations & Practice of Security, 13291, ⟨10.1007/978-3-031-08147-7_20⟩. ⟨cea-04232795⟩
77 Consultations
66 Téléchargements

Altmetric

Partager

More