检索结果-内蒙古大学图书馆

IntRepair: Informed Repairing of integer overflows

IEEE TRANSACTIONS ON SOFTWARE ENGINEERING 2021年第10期47卷 2225-2241页

作者： Muntean, Paul Monperrus, Martin Sun, Hao Grossklags, Jens Eckert, Claudia Tech Univ Munich Dept Comp Sci D-80333 Munich Germany KTH Royal Inst Technol Dept Comp Sci S-11428 Stockholm Sweden Nanjing Univ Dept Comp Sci & Technol State Key Lab Novel Software Technol Nanjing 210008 Peoples R China

integer overflows have threatened software applications for decades. Thus, in this paper, we propose a novel technique to provide automatic repairs of integer overflows in C source code. Our technique, based on static symbolic execution, fuses detection, repair generation and validation. This technique is implemented in a prototype named IntRepair. We applied IntRepair to 2,052 C programs (approx. 1 million lines of code) contained in SAMATE's Juliet test suite and 50 synthesized programs that range up to 20 KLOC. Our experimental results show that IntRepair is able to effectively detect integer overflows and successfully repair them, while only increasing the source code (LOC) and binary (Kb) size by around 1 percent, respectively. Further, we present the results of a user study with 30 participants which shows that IntRepair repairs are more than 10x efficient as compared to manually generated code repairs.

关键词： Maintenance engineering Software Tools Fault detection Runtime Engines Fuses Program repair source code refactoring integer overflow software fault symbolic execution static program analysis

来源：评论

学校读者我要写书评

暂无评论

Understanding integer overflow in C/C plus

引用

ACM TRANSACTIONS ON SOFTWARE ENGINEERING AND METHODOLOGY 2015年第1期25卷 2-2页

作者： Dietz, Will Li, Peng Regehr, John Adve, Vikram Univ Illinois Urbana IL 61801 USA Univ Utah Salt Lake City UT 84112 USA

integer overflow bugs in C and C++ programs are difficult to track down and may lead to fatal errors or exploitable vulnerabilities. Although a number of tools for finding these bugs exist, the situation is complicated because not all overflows are bugs. Better tools need to be constructed, but a thorough understanding of the issues behind these errors does not yet exist. We developed IOC, a dynamic checking tool for integer overflows, and used it to conduct the first detailed empirical study of the prevalence and patterns of occurrence of integer overflows in C and C++ code. Our results show that intentional uses of wraparound behaviors are more common than is widely believed;for example, there are over 200 distinct locations in the SPEC CINT2000 benchmarks where overflow occurs. Although many overflows are intentional, a large number of accidental overflows also occur. Orthogonal to programmers' intent, overflows are found in both well-defined and undefined flavors. Applications executing undefined operations can be, and have been, broken by improvements in compiler optimizations. Looking beyond SPEC, we found and reported undefined integer overflows in SQLite, PostgreSQL, SafeInt, GNU MPC and GMP, Firefox, LLVM, Python, BIND, and OpenSSL;many of these have since been fixed.

关键词： Experimentation Languages Measurement Performance integer overflow integer wraparound undefined behavior

来源：评论

学校读者我要写书评

暂无评论

Sound Input Filter Generation for integer overflow Errors 14

Sound Input Filter Generation for Integer Overflow Errors

引用

41st Annual ACM SIGPLAN-SIGACT Symposium on Principles of Programming Languages (POPL)

作者： Long, Fan Sidiroglou-Douskos, Stelios Kim, Deokhwan Rinard, Martin Massachusetts Institute of Technology Cambridge MA USA

ISBN: (纸本)9781450325448

We present a system, SIFT, for generating input filters that nullify integer overflow errors associated with critical program sites such as memory allocation or block copy sites. SIFT uses a static program analysis to generate filters that discard inputs that may trigger integer overflow errors in the computations of the sizes of allocated memory blocks or the number of copied bytes in block copy operations. Unlike all previous techniques of which we are aware, SIFT is sound-if an input passes the filter, it will not trigger an integer overflow error at any analyzed site. Our results show that SIFT successfully analyzes (and therefore generates sound input filters for) 56 out of 58 memory allocation and block memory copy sites in analyzed input processing modules from five applications (VLC, Dillo, Swfdec, Swftools, and GIMP). These nullified errors include six known integer overflow vulnerabilities. Our results also show that applying these filters to 62895 real-world inputs produces no false positives. The analysis and filter generation times are all less than a second.

关键词： Security Program Analysis integer overflow Abstraction Soundness

来源：评论

学校读者我要写书评

暂无评论

Precise Dynamic Symbolic Execution for Nonuniform Data Access in Smart Contracts

引用

IEEE TRANSACTIONS ON COMPUTERS 2022年第7期71卷 1551-1563页

作者： Huang, Jianjun Jiang, Jiasheng You, Wei Liang, Bin Renmin Univ China Sch Informat Beijing 100872 Peoples R China Renmin Univ China Key Lab DEKE MOE Beijing 100872 Peoples R China

Dynamic symbolic execution (DSE) has been successfully adopted for vulnerability detection in desktop and mobile platforms. Unfortunately, we cannot simply extrapolate those techniques to smart contracts. The major challenge is that smart contracts exhibit a nonuniform data access mode. Other than accessing the data via uniform addresses, smart contracts compromise multiple addressing modes, including flat address mode and key-value mode. More seriously, accessing a key-value table usually involves additional hash operations to obtain the keys. In this paper, we propose a DSE framework to resolve the nonuniform data access in smart contracts. More specifically, we exactly track the symbolic variables with concrete addresses and compute the actual/hash keys for table-like accesses. We also take the symbolic keys into account to distinguish data accesses incidentally with the same concrete keys resulting from artificially generated values. We describe the DSE framework in operational semantics. On top of the framework, we implement an integer overflow detector Nova and a multi-transactional vulnerability detector Mtvd. The experiments show that Nova outperforms state-of-the-art analysis tools in detecting the integer overflows with much higher precision and recall, 94.2 and 93.0 percent, respectively. Mtvd successfully reports three ether leaking vulnerabilities and one suicidal issue from real-world smart contracts.

关键词： Smart contracts Arrays Tools Semantics Detectors Libraries Memory management Smart contracts nonuniform data access dynamic symbolic execution operational semantics integer overflow

来源：评论

学校读者我要写书评

暂无评论

SolType: Refinement Types for Arithmetic overflow in Solidity

引用

PROCEEDINGS OF THE ACM ON PROGRAMMING LANGUAGES-PACMPL 2022年第POPL期6卷 1–29页

作者： Tan, Bryan Mariano, Benjamin Lahiri, Shuvendu K. Dillig, Isil Feng, Yu Univ Calif Santa Barbara Santa Barbara CA 93106 USA Univ Texas Austin Austin TX 78712 USA Microsoft Res Redmond WA USA

As smart contracts gain adoption in financial transactions, it becomes increasingly important to ensure that they are free of bugs and security vulnerabilities. Of particular relevance in this context are arithmetic overflow bugs, as integers are often used to represent financial assets like account balances. Motivated by this observation, this paper presents SolType, a refinement type system for Solidity that can be used to prevent arithmetic over- and under-flows in smart contracts. SolType allows developers to add refinement type annotations and uses them to prove that arithmetic operations do not lead to over- and under-flows. SolType incorporates a rich vocabulary of refinement terms that allow expressing relationships between integer values and aggregate properties of complex data structures. Furthermore, our implementation, called Solid, incorporates a type inference engine and can automatically infer useful type annotations, including non-trivial contract invariants. To evaluate the usefulness of our type system, we use Solid to prove arithmetic safety of a total of 120 smart contracts. When used in its fully automated mode (i.e., using Solid's type inference capabilities), Solid is able to eliminate 86.3% of redundant runtime checks used to guard against overflows. We also compare Solid against a state-of-the-art arithmetic safety verifier called VeriSmart and show that Solid has a significantly lower false positive rate, while being significantly faster in terms of verification time.

关键词： refinement type inference smart contracts integer overflow

来源：评论

学校读者我要写书评

暂无评论

Detection of Security Vulnerabilities Induced by integer Errors 16

Detection of Security Vulnerabilities Induced by Integer Err...

引用

16th International Conference on Software Technologies (ICSOFT)

作者： Kissi, Salim Yahia Seladji, Yassamine Ameur-Boulifa, Rabea Univ Abou Bekr Belkaid Tlemcen LRIT Tilimsen Algeria Telecom Paris LTCI Inst Polytech Paris Paris France

ISBN: (纸本)9789897585234

Sometimes computing platforms, e.g. storage device, compilers, operating systems used to execute software programs make them misbehave, this type of issues could be exploited by attackers to access sensitive data and compromise the system. This paper presents an automatable approach for detecting such security vulnerabilities due to improper execution environment. Specifically, the advocated approach targets the detection of security vulnerabilities in the software caused by memory overflows such as integer overflow. Based on analysis of the source code and by using a knowledge base gathering common execution platform issues and known restrictions, the paper proposes a framework able to infer the required assertions, without manual code annotations and rewriting, for generating logical formulas that can be used to reveal potential code weaknesses.

关键词： Security Vulnerability Memory Errors Software Analysis Satisfiability Analysis integer overflow

来源：评论

学校读者我要写书评

暂无评论

Is a False Positive really False Positive? 24

Is a False Positive really False Positive?

引用

24th International Conference on Advanced Communication Technology (ICACT) - Artificial Intelligence Technologies toward Cybersecurity

作者： Choi, Hong Jun Lee, Hyuk Choi, Jin-Young Korea Univ Sch Cybersecur Seoul 02841 South Korea

ISBN: (纸本)9791188428090

As the number of devices with software increases, software reliability and security has become more critical. To improve reliability and security, developers and test engineers use static analysis tools to find defects early in the development process. However, it takes a lot of time and effort to determine whether alarms from performing static analysis are true or false positive. In this paper, we argue that all integer overflow generated by static analysis tools are weaknesses and should eventually be corrected. To show that our argument is reasonable, we explain static analysis results for binary search program code and CWE:190 example code in terms of reliability and security. It is unnecessary to identify whether the integer overflow generated by static analysis tools is true or false positive.

关键词： Software Reliability Software Security Static Analysis integer overflow True Positive False Positive

来源：评论

学校读者我要写书评

暂无评论

Towards More Reliable Automated Program Repair by Integrating Static Analysis Techniques 21

Towards More Reliable Automated Program Repair by Integratin...

引用

21st IEEE International Conference on Software Quality, Reliability and Security (QRS)

作者： Al-Bataineh, Omar, I Grishina, Anastasiia Moonen, Leon Simula Res Lab Oslo Norway

ISBN: (纸本)9781665458139

A long-standing open challenge for automated program repair is the overfitting problem, which is caused by having insufficient or incomplete specifications to validate whether a generated patch is correct or not. Most available repair systems rely on weak specifications (i.e., specifications that are synthesized from test cases) which limits the quality of generated repairs. To strengthen specifications and improve the quality of repairs, we propose to closer integrate static bug detection techniques with automated program repair. The integration combines automated program repair with static analysis techniques in such a way that bug detection patterns can be synthesized into specifications that the repair system can use. We explore the feasibility of such integration using two types of bugs: arithmetic bugs, such as integer overflow, and logical bugs, such as termination bugs. As part of our analysis, we make several observations that help to improve patch generation for these classes of bugs. Moreover, these observations assist with narrowing down the candidate patch search space, and inferring an effective search order.

关键词： automated program repair bug detection static analysis integer overflow non-termination conditional mutation

来源：评论

学校读者我要写书评

暂无评论

Is a False Positive really False Positive? 23

Is a False Positive really False Positive?

引用

23rd International Conference on Advanced Communications Technology (ICACT) - On-Line security in Pandemic Era

作者： Choi, Hong Jun Lee, Hyuk Choi, Jin-Young Korea Univ Sch Cybersecur Seoul 02841 South Korea

ISBN: (纸本)9791188428069

关键词： Software Reliability Software Security Static Analysis integer overflow True Positive False Positive

来源：评论

学校读者我要写书评

暂无评论

An Approach to Vulnerability Searching of integer overflows in the Executable Program Code

引用

AUTOMATIC CONTROL AND COMPUTER SCIENCES 2018年第8期52卷 1022-1028页

作者： Demidov, R. A. Pechenkin, A. I. Zegzhda, P. D. Peter Great St Petersburg Polytech Univ St Petersburg 195251 Russia

This article proposes an approach to identifying integer overflow vulnerabilities in software represented by the executable code of x86 architecture. The approach is based on symbolic code execution and initially twofold representation of memory cells. A truncated control transfer graph is constructed from the machine code of the program, the paths in which are layer-by-layer checked for the feasibility of the vulnerability conditions. The proposed methods were implemented in practice and experimentally tested on the various code samples.

关键词： vulnerability search symbolic execution symbolic memory vulnerability classification control flow graph integer overflow

来源：评论

学校读者我要写书评

暂无评论

建议与咨询留下您的常用邮箱和电话号码，以便我们向您反馈解决方案和替代方法

时间限定

文献类型

馆藏选择

核心期刊

语言

文献类型

帮助

文字说明：

检索规则说明：

检索范例：

分类表

所选分类

限定检索结果

文献类型

馆藏范围

日期分布

学科分类号

主题

机构

作者

语言

请选择保存的检索档案：

请选择收藏分类：

通借通还

建议与咨询 留下您的常用邮箱和电话号码，以便我们向您反馈解决方案和替代方法

时间限定

文献类型

馆藏选择

核心期刊

语言

文献类型

帮助

文字说明：

检索规则说明：

检索范例：

分类表

所选分类

限定检索结果

文献类型

馆藏范围

日期分布

学科分类号

主题

机构

作者

语言

请选择保存的检索档案： 新增检索档案 确定 取消

请选择收藏分类： 新增自定义分类 确定 取消

通借通还

建议与咨询留下您的常用邮箱和电话号码，以便我们向您反馈解决方案和替代方法

请选择保存的检索档案：

请选择收藏分类：