Dynamic symbolic execution method and device thereof based on overall situation super block dominator graph

Abstract

The invention provides a dynamic symbolic execution method and a device of the dynamic symbolic execution method based on an overall situation super block dominator graph and belongs to the field of computer software testing and software security. The method is as follows: a control flow diagram of a tested executable program is obtained, and the control flow diagram is transformed to a super block dominator graph according to relevant theories of a dominance relation. Each nodal point in the super block dominator graph is marked with 'weight' which is updated before symbolic execution at each time, and the 'weight' indicates the least number of basic blocks which can be covered when the nodal point is executed. When one dynamic symbolic execution is over, the nodal point with the largest 'weight' value is selected from the super block dominator graph, and corresponding forecasting path constraint conditions are generated, and then a new testing use case is generated by solving of a solver, so that the next execution is driven. Compared with the prior art, the dynamic symbolic execution method and the device of the dynamic symbolic execution method based on the overall situation super block dominator graph are capable of covering code blocks as many as possible with least testing use cases, so that the growth rate of the code coverage rate is effectively accelerated, and the problem of path explosion is relieved. The dynamic symbolic execution method and the device of the dynamic symbolic execution method based on the overall situation super block dominator graph is of great importance for the performance of testing large-scale utility software of the dynamic symbolic execution.

Description

technical field [0001] The dynamic symbol execution scheme based on the global superblock dominance graph proposed by the present invention belongs to the field of computer dynamic software testing and software security, and can be used in dynamic program analysis, automatic test case generation, software loophole mining and the like. Background technique [0002] Dynamic symbolic execution technology is a new technology proposed in recent years. It is currently used in software behavior analysis, software defect analysis, vulnerability testing, and automatic generation of test cases. Dynamic symbolic execution can generate test input corresponding to each path, and can dynamically detect bugs existing on each path and dead ends, and does not depend on source code, avoiding static testing methods with high manual overhead, low efficiency, high false alarm rate, and Fuzzing Defects such as testing randomness can more comprehensively and accurately detect software vulnerabi...

AI Technical Summary

Problems solved by technology

However, the commonly used depth-first and breadth-first path exploration algorithms cannot achieve this goal.

At present, the seemingly optimal generation algorithm has a very large overhead and error in the actual execution process.

Images