Sound Symbolic Execution via Abstract Interpretation and its Application to Security - Archive ouverte HAL Accéder directement au contenu
Communication Dans Un Congrès Année : 2023

Sound Symbolic Execution via Abstract Interpretation and its Application to Security

Résumé

Symbolic execution is a program analysis technique commonly utilized to determine whether programs violate properties and, in case violations are found, to generate inputs that can trigger them. Used in the context of security properties such as noninterference, symbolic execution is precise when looking for counterexample pairs of traces when insecure information flows are found, however it is sound only up to a bound thus it does not allow to prove the correctness of programs with executions beyond the given bound. By contrast, abstract interpretation-based static analysis guarantees soundness but generally lacks the ability to provide counterexample pairs of traces. In this paper, we propose to weave both to obtain the best of two worlds. We demonstrate this with a series of static analyses, including a static analysis called RedSoundRSE aimed at verifying noninterference. RedSoundRSE provides both semantically sound results and the ability to derive counterexample pairs of traces up to a bound. It relies on a combination of symbolic execution and abstract domains inspired by the well known notion of reduced product. We formalize RedSoundRSE and prove its soundness as well as its relative precision up to a bound. We also provide a prototype implementation of RedSoundRSE and evaluate it on a sample of challenging examples.
Fichier principal
Vignette du fichier
vmcai.pdf (842.31 Ko) Télécharger le fichier
Origine : Fichiers produits par l'(les) auteur(s)

Dates et versions

hal-03942146 , version 1 (17-01-2023)

Identifiants

Citer

Ignacio Tiraboschi, Tamara Rezk, Xavier Rival. Sound Symbolic Execution via Abstract Interpretation and its Application to Security. VMCAI 2023 - 24th International Conference on Verification, Model Checking, and Abstract Interpretation, Jan 2023, Boston, MA, United States. pp.267-295, ⟨10.1007/978-3-031-24950-1_13⟩. ⟨hal-03942146⟩
44 Consultations
81 Téléchargements

Altmetric

Partager

Gmail Facebook X LinkedIn More