Deriving input syntactic structure from execution

Proceedings of the ACM SIGSOFT Symposium on the Foundations of Software Engineering

Volumn , Issue , 2008, Pages 83-93

  Lin, Zhiqiang ^a   Zhang, Xiangyu ^a  

^a Purdue University   (United States)

Author keywords

Bottom up grammar; Control dependence; Input lineage; Reverse engineering; Syntax tree; Top down grammar

Indexed keywords

BOTTOM-UP GRAMMAR; MALWARES; PLAIN TEXT; REAL-WORLD; REVERSE ENGINEERS; SOFTWARE DEBUGGING; SYNTACTIC STRUCTURE; SYNTAX TREE; TEST CASE GENERATION; TOPDOWN;

COMPUTER CRIME; COMPUTER SOFTWARE; NETWORK SECURITY; REENGINEERING; REVERSE ENGINEERING; SYNTACTICS; TREES (MATHEMATICS);

PROGRAM DEBUGGING;

EID: 77950472916     PISSN: None     EISSN: None     Source Type: Conference Proceeding    
DOI: 10.1145/1453101.1453114     Document Type: Conference Paper

References (35)

1. Libyahoo2: A c library for yahoo! messenger. http://libyahoo2. sourceforge.net/.
2. The Protocol Informatics Project. http://www.baselineresearch.net/PI/.
3. The SNORT network intrusion detection system. http://www.snort.org.
4. Wireshark: The World's Most Popular Network Protocol Analyzer. http://www.wireshark.org/.
5. Grammar of HTML Document. http://www.unix.org.ua/orelly/web/html/appa 02.html.
6. A. V. Aho, R. Sethi, and J. D. Ullman. Compilers: Principles, Techniques, and Tools. Addison-Wesley, 1986.
7. Philip Bille, A survey on tree edit distance and related problems. In Theoretical Computer Science. 337(1-3), 2005.
8. D. Coppit and J. Lian. Yagg: an easy-to-use generator for structured test inputs. In Proceedings of the 20th IEEE International Conference on Automated Software Engineering (ASE), 2005.
9. W. Cui, J. Kannan, and H. J. Wang. Discoverer: Automatic protocol reverse engineering from network traces. In Proceedings of the 16th USENIX Security Symposium, Boston, MA, 2007.
10. W. Cui, M. Peinado, H. J. Wang, and M. Locasto. Shieldgen: Automatic data patch generation for unknown vulnerabilities with informed probing. In In Proceedings of 2007 IEEE Symposium on Security and Privacy, Oakland, CA, 2007.
11. J. Caballero and D. Song. Polyglot: Automatic extraction of protocol format using dynamic binary analysis. In Proceedings of the 14th ACM Conference on Computer and and Communications Security (CCS'07), 2007.
12. P. Godefroid, A. Kiezun, and M. Y. Levin Grammar-based whitebox fuzzing. In Proceedings of the 2008 ACM SIGPLAN Conference on Programming Language Design and Implementation (PLDI), Tucson, AZ, 2008.
13. K. Hanford. Automatic Generation of Test Cases. In IBM Systems Journal, 9(4), 1970.
14. Z. Lin, X. Jiang, D. Xu and X. Zhang. Automatic Protocol Format Reverse Engineering through Context-Aware Monitored Execution. In Proceedings of the 15th Annual Network and Distributed System Security Symposium (NDSS), 2008.
15. Z. Lin and X. Zhang. Deriving Input Syntactic Structure from Execution and Its Applications. Purdue Technical Report CSD TR #08-006, 2008.
16. J. Lim, T. Reps, and B. Liblit. Extracting file formats from executables. In Proceedings of the 13th Working Conference on Reverse Engineering, 2006.
17. R. Majumdar and R. Xu. Directed test generation using symbolic grammars. In Proceedings of the 22th IEEE International Conference on Automated Software Engineering (ASE), 2007
18. W. Masri, A. Podgurski, and D. Leon. Detecting and debugging insecure information flows. In Proceedings of the 15th International Symposium on Software Reliability Engineering (ISSRE), 2004.
19. P. Maurer. Generating test data with enhanced context-free grammars. In IEEE Software, 7(4), 1990.
20. G. Misherghi and Z. Su. HDD: Hierarchical delta debugging. In Proceedings of the 28th International Conference on Software Engineering (ICSE), Shanghai, China, 2006.
21. V. Nagarajan, R. Gupta, X. Zhang, M. Madou, B. De Sutter, and K. De Bosschere. Matching control flow of program versions. In Proceedings of the 2007 International Conference on Software Maintenance (ICSM), Paris, 2007.
22. N. Nethercote and J. Seward. Valgrind: A framework for heavyweight dynamic binary instrumentation. In Proceedings of the ACM SIGPLAN 2007 Conference on Programming Language Design and Implementation (PLDI), San Diego, CA, 2007.
23. R. Parekh and V. Honavar. Grammar Inference, Automata Induction, and Language Acquisition. 2000.
24. P. Purdom. A sentence generator for testing parsers. In BIT Numerical Mathematics, 12(3), 1972.
25. L. V. Put, D. Chanet, B. De Bus, B. De Sutter, and K. D. Bosschere. Diablo: a reliable, retargetable and extensible link-time rewriting framework. In Proceedings of IEEE International Symposium On Signal Processing And Information Technology, 2005.
26. E. Sirer and B. Bershad. Using production grammars in software testing. In Proceedings of the 2nd conference on Domain-specific languages, 1999.
27. H. Wang, C. Guo, D. Simon, and A. Zugenmaier. Shield: vulnerability-driven network filters for preventing known vulnerability exploits. In Proceedings of the 2004 ACM Conference on Applications, Technologies, Architectures, and Protocols for Computer Communication (SIGCOMM), 2004.
28. X. Wang, Z. Li, J. Xu, M. K. Reiter, C. Kil, and J. Y. Choi. Packet vaccine: Black-box exploit detection and signature generation. In Proceedings of the 13th ACM conference on Computer and communications security (CCS), 2006.
29. G. Wondracek, P. M. Comparetti, C. Kruegel, and E. Kirda. Automatic Network Protocol Analysis. In Proceedings of the 15th Annual Network and Distributed System Security Symposium (NDSS), 2008.
30. W. Cui, M. Peinado, K. Chen, H. Wang, L. Irun-Briz. Tupni: Automatic Reverse Engineering of Input Formats. In Proceedings of the 15th ACM Conference on Computer and Communications Security (CCS), 2008.
31. B. Xin and X. Zhang. Efficient online detection of dynamic control dependence. In Proceedings of the International Symposium on Software Testing and Analysis (ISSTA), 2007.
32. A. Zeller and R. Hildebrandt. Simplifying and isolating failure-inducing input. IEEE Transaction on Software Engineering (TSE), 28(2):183-200, 2002. (Pubitemid 34198322)
33. M. Zhang, X. Zhang, X. Zhang, and S. Prabhakar. Tracing lineage beyond relational operators. In Proceedings of the International Conference on Very Large Data Bases (VLDB), Austria, 2007.
34. X. Zhang and R. Gupta. Cost effective dynamic slicing. In Proceedings of the 2004 ACM SIGPLAN Conference on Programming Language Design and Implementation (PLDI), 2004.
35. X. Zhang, S. Tallam, and R. Gupta. Dynamic slicing long running programs through execution fast forwarding. In Proceedings of the 14th ACM SIGSOFT International Symposium on Foundations of Software Engineering (FSE), 2006.