Modern software systems require the support of automatic program analyses to answer questions about their correctness, reliability, and safety. In recent years, symbolic execution techniques have played a pivotal role in this field, backing research in different domains such as software testing and software security. Like other powerful machine analyses, symbolic execution is often affected by efficiency and scalability issues that can be mitigated when a domain expert interacts with its working, steering the computation to achieve the desired goals faster. In this paper we explore how visual analytics techniques can help the user to grasp properties of the ongoing analysis and use such insights to refine the symbolic exploration process. To this end, we discuss two real-world usage scenarios from the malware analysis and the vulnerability detection domains, showing how our prototype system can help users make a wiser use of symbolic exploration techniques in the analysis of binary code.

SymNav: Visually Assisting Symbolic Execution / Angelini, Marco; Blasilli, Graziano; Borzacchiello, Luca; Coppa, Emilio; Cono D’Elia, Daniele; Demetrescu, Camil; Lenti, Simone; Nicchi, Simone; Santucci, Giuseppe. - 2019 IEEE SYMPOSIUM ON VISUALIZATION FOR CYBER SECURITY (VIZSEC), (2019), pp. - (16th IEEE Symposium on Visualization for Cyber Security (VizSec 2019), Vancouver, Canada, 23 ottobre 2019). [10.1109/VizSec48167.2019.9161524].

SymNav: Visually Assisting Symbolic Execution

Marco Angelini;Emilio Coppa;
2019

Abstract

Modern software systems require the support of automatic program analyses to answer questions about their correctness, reliability, and safety. In recent years, symbolic execution techniques have played a pivotal role in this field, backing research in different domains such as software testing and software security. Like other powerful machine analyses, symbolic execution is often affected by efficiency and scalability issues that can be mitigated when a domain expert interacts with its working, steering the computation to achieve the desired goals faster. In this paper we explore how visual analytics techniques can help the user to grasp properties of the ongoing analysis and use such insights to refine the symbolic exploration process. To this end, we discuss two real-world usage scenarios from the malware analysis and the vulnerability detection domains, showing how our prototype system can help users make a wiser use of symbolic exploration techniques in the analysis of binary code.
2019
binary analysis, symbolic execution, visual analytics
File in questo prodotto:
File Dimensione Formato  
Angelini_SymNav_2019.pdf

Solo gestori archivio

Tipologia: Versione dell'editore
Licenza: Tutti i diritti riservati
Dimensione 1.4 MB
Formato Adobe PDF
1.4 MB Adobe PDF   Visualizza/Apri
Pubblicazioni consigliate

I documenti in IRIS sono protetti da copyright e tutti i diritti sono riservati, salvo diversa indicazione.

Utilizza questo identificativo per citare o creare un link a questo documento: https://hdl.handle.net/11385/236303
Citazioni
  • Scopus 8
  • ???jsp.display-item.citation.isi??? 7
social impact