A Taint Based Approach for Smart Fuzzing - Archive ouverte HAL Accéder directement au contenu
Communication Dans Un Congrès Année : 2012

A Taint Based Approach for Smart Fuzzing

Sofia Bekrar
  • Fonction : Auteur
  • PersonId : 945113
Chaouki Bekrar
  • Fonction : Auteur
  • PersonId : 945114
Laurent Mounier
  • Fonction : Auteur
  • PersonId : 858856

Résumé

Fuzzing is one of the most popular test-based software vulnerability detection techniques. It consists in running the target application with dedicated inputs in order to exhibit potential failures that could be exploited by a malicious user. In this paper we propose a global approach for fuzzing, addressing the main challenges to be faced in an industrial context: large-size applications, without source code access, and with a partial knowledge of the input specifications. This approach integrates several successive steps, and we mostly focus here on an important one which relies on binary-level dynamic taint analysis. We summarize the main problems to be addressed in this step, and we detail the solution we implemented to solve them.
Fichier non déposé

Dates et versions

hal-00857281 , version 1 (03-09-2013)

Identifiants

Citer

Sofia Bekrar, Chaouki Bekrar, Roland Groz, Laurent Mounier. A Taint Based Approach for Smart Fuzzing. ICST2012 - 5th International Conference on Software Testing, Verification and Validation, Apr 2012, Montreal, QC, Canada. pp.818-825, ⟨10.1109/ICST.2012.182⟩. ⟨hal-00857281⟩
147 Consultations
0 Téléchargements

Altmetric

Partager

Gmail Facebook X LinkedIn More