SymFusion: Hybrid Instrumentation for Concolic Execution
SymFusion: Hybrid Instrumentation for Concolic Execution
复制标题
DOI：
10.1145/3551349.3556928
复制
发表时间：
2022-10
期刊：
影响因子：
--
通讯作者：
Emilio Coppa;Heng Yin;C. Demetrescu
中科院分区：
文献类型：
--
作者：
Emilio Coppa;Heng Yin;C. Demetrescu
Concolic执行是一种动态的符号执行，在设计时考虑了可伸缩性。最近的concolic执行器严重依赖于程序插装来实现这种可伸缩性。检测代码可以在编译时添加（例如，使用LLVM传递），也可以在执行时借助动态二进制转换器直接添加。前一种方法可以产生更高效的代码，但需要重新编译。不幸的是，重新编译程序的整个代码并不总是可行或实际的（例如，在存在第三方组件的情况下）。相反，后一种方法不需要重新编译，但会导致更高的执行时间开销。在本文中，我们研究了一种用于聚合执行的混合插装方法，称为SymFusion。特别是，这种混合检测方法允许用户重新编译应用程序的核心组件，从而最大限度地减少对它们的分析开销，同时仍然能够在执行时动态检测应用程序组件的其余部分。我们的实验评估表明，我们的设计可以在几个实际应用中实现效率和功效之间的良好平衡。
Concolic execution is a dynamic twist of symbolic execution designed with scalability in mind. Recent concolic executors heavily rely on program instrumentation to achieve such scalability. The instrumentation code can be added at compilation time (e.g., using an LLVM pass), or directly at execution time with the help of a dynamic binary translator. The former approach results in more efficient code but requires recompilation. Unfortunately, recompiling the entire code of a program is not always feasible or practical (e.g., in presence of third-party components). On the contrary, the latter approach does not require recompilation but incurs significantly higher execution time overhead. In this paper, we investigate a hybrid instrumentation approach for concolic execution, called SymFusion. In particular, this hybrid instrumentation approach allows the user to recompile the core components of an application, thus minimizing the analysis overhead on them, while still being able to dynamically instrument the rest of the application components at execution time. Our experimental evaluation shows that our design can achieve a nice balance between efficiency and efficacy on several real-world applications.