Practical Symbolic Execution for Rust

我们合作的目标是为用Rust编程语言编写的程序设计和实现一个实用的符号执行引擎。这一目标源于两个因素-铁锈的重要性正在显现，以及缺乏对它的象征性执行支持。首先，Rust正在成为支持和使用的关键语言，因为它可以在不影响性能的情况下提供内存安全。大型软件公司，如Amazon、Microsoft、Google和Meta(Facebook)都在投资Rust，Linux内核社区现在支持Rust作为开发内核组件的第二语言。这表明，铁锈正在成为一种批判性语言，这是我们实现目标的因素之一。我们目标的第二个因素是符号执行，这是自动发现漏洞和错误时使用的基本技术。例如，2016年DARPA网络大挑战的三个获胜团队都使用了一种不同的符号执行来自动发现漏洞和漏洞。然而，我们注意到Rust用于符号执行的基础设施还处于初级阶段-尽管Project Oak和Mirai等项目取得了快速进展，但要在大型代码库中使用它们，仍有许多工作要做。因此，我们的合作目标是设计并实现一个实用的Rust符号执行引擎。

The goal of our collaboration is to design and implement a practical symbolic execution engine for programs written in the Rust programming language. This goal stems from two factors---the emerging significance of Rust and the lack of symbolic execution support for it. First, Rust is emerging as a critical language to support and use, since it can provide memory safety without compromising on performance. Major software companies, such as Amazon, Microsoft, Google, and Meta (Facebook), all invest in Rust, and the Linux kernel community is now supporting Rust as the second language for developing kernel components. What this shows is that Rust is emerging as a critical language, which is one of the factors of our goal. The second factor of our goal is symbolic execution, which is a fundamental technique used in automated discovery of vulnerabilities and bugs. For example, all three winning teams for 2016 DARPA Cyber Grand Challenge used a variation of symbolic execution to automatically discover bugs and vulnerabilities. However, we have noticed that Rust's infrastructure for symbolic execution is in its infancy---though there has been rapid progress with projects such as Project Oak and MIRAI , there is still much work that needs to be done to use them in large code bases. Thus, our collaboration aims to design and implement a practical symbolic execution engine for Rust.