Automatic detection method of buffer overflow vulnerabilities based on symbolic execution path pruning

Abstract

The invention relates to an automatic detection method for buffer overflow vulnerabilities based on symbolic execution path pruning. First, a large number of suspected loophole paths containing false positives are obtained by using a vulnerability feature matching method, and secondly, a symbolic execution technology based on state space reduction and path pruning is used. Verify that the set vulnerability is suspected to be a static analysis path, and judge whether the vulnerability can be triggered by a test case by building an overflow model and constraint solving at the detection point. The present invention uses a dynamic and static combination method to automatically measure buffer overflow vulnerabilities, which can be used in vulnerability detection and security auditing, instead of manually and automatically verifying the results of static analysis of buffer overflow vulnerabilities, etc., and can quickly perform automatic detection and generate overflow vulnerability triggers Test cases, effectively saving time and labor costs.

Description

technical field [0001] The invention relates to an automatic buffer overflow vulnerability detection method based on symbolic execution path pruning. The method can be used in vulnerability detection and security audit, instead of manually and automatically verifying the results of static analysis of buffer overflow vulnerabilities, etc., and belongs to software testing technology application field. Background technique [0002] Software security is to enable the software to continue to ensure the correct functionality and to ensure that the software is used legally within the scope of authorization even when it is subject to malicious attacks. However, due to the negligence of software developers or the limitations of programming languages ​​when developing software, potential loopholes often exist in software. These vulnerabilities can greatly weaken software security. Once exploited by an attacker, it will cause very serious consequences. Buffer overflow vulnerabilities ...

AI Technical Summary

Problems solved by technology

In the process of actually using these tools, security auditors need to manually check the above-mentioned buffer overflow alarms and write test cases to cover the path generated by static analysis to analyze whether there is a possibility of buffer overflow in the path, which consumes a lot of time and effort

Images