HAMPI: A string solver for testing, analysis and vulnerability detection

Lecture Notes in Computer Science (including subseries Lecture Notes in Artificial Intelligence and Lecture Notes in Bioinformatics)

Volumn 6806 LNCS, Issue , 2011, Pages 1-19

  Ganesh, Vijay ^a   Kiezun, Adam ^b   Artzi, Shay ^c   Guo, Philip J ^d   Hooimeijer, Pieter ^e   Ernst, Michael ^f  

^a MASSACHUSETTS INSTITUTE OF TECHNOLOGY   (United States)

^b HARVARD MEDICAL SCHOOL   (United States)

^c IBM RESEARCH   (United States)

^d STANFORD UNIVERSITY   (United States)

^e UNIVERSITY OF VIRGINIA   (United States)

^f UNIVERSITY OF WASHINGTON   (United States)

Author keywords

[No Author keywords available]

Indexed keywords

AUTOMATED TESTING; BUG FINDING; C PROGRAMS; CONSTRAINT SOLVERS; CONSTRAINT SOLVING; EXPERIMENTAL DATA; INPUT CONSTRAINTS; PROGRAM ANALYSIS; REGULAR EXPRESSIONS; SEPARATION OF CONCERNS; SOURCE CODES; SQL INJECTION; STATIC AND DYNAMIC ANALYSIS; SUBSTRING; SYSTEMATIC TESTING; VERIFICATION TECHNIQUES; VULNERABILITY DETECTION; WEB APPLICATION;

AUTOMATIC TESTING; C (PROGRAMMING LANGUAGE); COMPUTER SOFTWARE SELECTION AND EVALUATION; PHASE SEPARATION; SOFTWARE RELIABILITY; SOFTWARE TESTING; USER INTERFACES;

COMPUTER AIDED ANALYSIS;

EID: 79960350209     PISSN: 03029743     EISSN: 16113349     Source Type: Book Series    
DOI: 10.1007/978-3-642-22110-1_1     Document Type: Conference Paper

References (25)

1. Biere, A., Cimatti, A., Clarke, E., Strichman, O., Zhu, Y.: Bounded model checking. Advances in Computers 58, 117-148 (2003)
2. Bjørner, N., Tillmann, N., Voronkov, A.: Path feasibility analysis for string-manipulating programs. In: Kowalewski, S., Philippou, A. (eds.) TACAS 2009. LNCS, vol. 5505, pp. 307-321. Springer, Heidelberg (2009)
3. Cadar, C., Dunbar, D., Engler, D.R.: Klee: Unassisted and automatic generation of high-coverage tests for complex systems programs. In: Symposium on Operating Systems Design and Implementation. USENIX Association, San Diego (2008)
4. Cadar, C., Ganesh, V., Pawlowski, P.M., Dill, D.L., Engler, D.R.: EXE: automatically generating inputs of death. In: Conference on Computer and Communications Security. ACM Press, Alexandria (2006)
5. de Moura, L., Bjørner, N.S.: Z3: An Efficient SMT Solver. In: Ramakrishnan, C.R., Rehof, J. (eds.) TACAS 2008. LNCS, vol. 4963, pp. 337-340. Springer, Heidelberg (2008)
6. Emmi, M., Majumdar, R., Sen, K.: Dynamic test input generation for database applications. In: International Symposium on Software Testing and Analysis. ACM Press, London (2007)
7. Fu, X., Lu, X., Peltsverger, B., Chen, S., Qian, K., Tao, L.: A static analysis framework for detecting SQL injection vulnerabilities. In: International Computer Software and Applications Conference. IEEE, Beijing (2007)
8. Ganesh, V., Dill, D.L.: A decision procedure for bit-vectors and arrays. In: Damm, W., Hermanns, H. (eds.) CAV 2007. LNCS, vol. 4590, pp. 519-531. Springer, Heidelberg (2007)
9. Godefroid, P., Kiezun, A., Levin, M.Y.: Grammar-based whitebox fuzzing. In: Programming Language Design and Implementation. ACM Press, Tuscon (2008)
10. Godefroid, P., Klarlund, N., Sen, K.: DART: Directed automated random testing. In: Programming Language Design and Implementation, Chicago, Illinois. ACM Press, New York (2005)
11. Godefroid, P., Levin, M.Y., Molnar, D.: Automated whitebox fuzz testing. In: Network and Distributed System Security Symposium, San Diego, California. The Internet Society (2008)
12. Gulwani, S., Srivastava, S., Venkatesan, R.: Program analysis as constraint solving. In: Programming Language Design and Implementation, Tuscon, Arizona. ACM Press, New York (2008)
13. Halfond, W., Orso, A., Manolios, P.: WASP: Protecting Web applications using positive tainting and syntax-aware evaluation. Transactions on Software Engineering 34(1), 65-81 (2008)
14. Jackson, D., Vaziri, M.: Finding bugs with a constraint solver. In: International Symposium on Software Testing and Analysis, Portland, Oregon. ACM Press, New York (2000)
15. Jayaraman, K., Harvison, D., Ganesh, V., Kiezun, A.: jFuzz: A concolic whitebox fuzzer for Java. In: NASA Formal Methods Symposium. NASA, Moffett Field (2009)
16. Kiezun, A., Ganesh, V., Guo, P.J., Hooimeijer, P., Ernst, M.D.: HAMPI: a solver for string constraints. In: International Symposium on Software Testing and Analysis, pp. 105-116. ACM Press, New York (2009)
17. Kiezun, A., Guo, P.J., Jayaraman, K., Ernst, M.D.: Automatic creation of SQL injection and cross-site scripting attacks. In: International Conference on Software Engineering. IEEE, Vancouver (2009)
18. Majumdar, R., Xu, R.-G.: Directed test generation using symbolic grammars. In: Automated Software Engineering. ACM/IEEE (2007)
19. Minamide, Y.: Static approximation of dynamically generated Web pages. In: International World Wide Web Conference, Chiba, Japan. ACM Press, New York (2005)
20. Moskewicz, M., Madigan, C., Zhao, Y., Zhang, L., Malik, S.: Chaff: engineering an efficient SAT solver. In: Design Automation Conference, Las Vegas, Nevada. ACM Press, New York (2001)
21. Shannon, D., Hajra, S., Lee, A., Zhan, D., Khurshid, S.: Abstracting symbolic execution with string analysis. In: Testing: Academic and Industrial Conference Practice and Research Techniques, Windsor, UK. IEEE Computer Society Press, Los Alamitos (2007)
22. Sipser, M.: Introduction to the Theory of Computation. In: Course Technology, Florence, KY (2005)
23. Wassermann, G., Su, Z.: Sound and precise analysis of Web applications for injection vulnerabilities. In: Programming Language Design and Implementation. ACM, San Diego (2007)
24. Wassermann, G., Su, Z.: Static detection of cross-site scripting vulnerabilities. In: International Conference on Software Engineering. IEEE, Leipzig (2008)
25. Wassermann, G., Yu, D., Chander, A., Dhurjati, D., Inamura, H., Su, Z.: Dynamic test input generation for Web applications. In: International Symposium on Software Testing and Analysis. ACM, Seattle (2008)