S2E: A platform for in-vivo multi-path analysis of software systems

ACM SIGPLAN Notices

Volumn 47, Issue 4, 2012, Pages 265-278

  Chipounov, Vitaly ^a   Kuznetsov, Volodymyr ^a   Candea, George ^a  

^a EPFL   (Switzerland)

Author keywords

Performance; Reliability; Security; Verification

Indexed keywords

ABSTRACT MODELS; ANALYSIS TOOLS; AUTOMATED PATH; BUG FINDING; COMPLEX ANALYSIS; COMPREHENSIVE PERFORMANCE; CONSISTENCY MODEL; EXECUTION PATHS; IN-VIVO; PERFORMANCE; PROPRIETARY SOFTWARE; REAL SOFTWARES; REAL SYSTEMS; SECURITY; SOFTWARE SYSTEMS; SYMBOLIC EXECUTION; TARGET ANALYSIS; TARGET SYSTEMS; USER PROGRAMS;

COMPUTER SOFTWARE; REGRESSION ANALYSIS; RELIABILITY; REVERSE ENGINEERING; VERIFICATION;

PROGRAM DEBUGGING;

EID: 84863813576     PISSN: 15232867     EISSN: None     Source Type: Journal    
DOI: 10.1145/2248487.1950396     Document Type: Conference Paper

References (41)

1. J. Anderson, L. Berc, J. Dean, S. Ghemawat, M. Henzinger, S.-T. Leung, D. Sites,M. Vandevoorde, C. A.Waldspurger, andW. E.Weihl. Continuous profiling: Where have all the cycles gone? In Symp. on Operating Systems Principles, 1997.
2. T. Ball, E. Bounimova, B. Cook, V. Levin, J. Lichtenberg, C. McGarvey, B. Ondrusek, S. K. Rajamani, and A. Ustuner. Thorough static analysis of device drivers. In ACM SIGOPS/EuroSys European Conf. on Computer Systems, 2006.
3. T. Ball, E. Bounimova, V. Levin, R. Kumar, and J. Lichtenberg. The static driver verifier research platform. In Intl. Conf. on Computer Aided Verification, 2010.
4. F. Bellard. QEMU, a fast and portable dynamic translator. In USENIX Annual Technical Conf., 2005.
5. A. Bessey, K. Block, B. Chelf, A. Chou, B. Fulton, S. Hallem, C. Henri-Gros, A. Kamsky, S. McPeak, and D. Engler. A few billion lines of code later: using static analysis to find bugs in the real world. Communications of the ACM, 53(2), 2010.
6. Bochs IA-32 Emulator. http://bochs.sourceforge.net/.
7. P. Boonstoppel, C. Cadar, and D. R. Engler. RWset: Attacking path explosion in constraint-based test generation. In Intl. Conf. on Tools and Algorithms for the Construction and Analysis of Systems, 2008.
8. D. Brumley, C. Hartwig, M. G. Kang, Z. L. J. Newsome, P. Poosankam, D. Song, and H. Yin. BitScope: Automatically dissecting malicious binaries. Technical Report CMU-CS-07-133, Carnegie Mellon University, 2007.
9. P. P. Bungale and C.-K. Luk. PinOS: a programmable framework for whole-system dynamic instrumentation. In Intl. Conf. on Virtual Execution Environments, 2007.
10. M. Burrows, U. Erlingson, S.-T. Leung, M. T. Vandevoorde, C. A. Waldspurger, K. Walker, and W. E. Weihl. Efficient and flexible value sampling. In Intl. Conf. on Architectural Support for Programming Languages and Operating Systems, 2000.
11. C. Cadar, D. Dunbar, and D. R. Engler. KLEE: Unassisted and automatic generation of high-coverage tests for complex systems programs. In Symp. on Operating Systems Design and Implementation, 2008.
12. C. Cadar, V. Ganesh, P. M. Pawlowski, D. L. Dill, and D. R. Engler. EXE: Automatically generating inputs of death. In Conf. on Computer and Communication Security, 2006.
13. V. Chipounov and G. Candea. Reverse engineering of binary device drivers with RevNIC. In ACM SIGOPS/EuroSys European Conf. on Computer Systems, 2010.
14. I. Dillig, T. Dillig, and A. Aiken. Sound, complete and scalable pathsensitive analysis. In Conf. on Programming Language Design and Implementation, 2008.
15. Dtrace. http://www.sun.com/bigadmin/content/dtrace/index.jsp.
16. P. Godefroid. Model checking for programming languages using Verisoft. In Symp. on Principles of Programming Languages, 1997.
17. P. Godefroid. Compositional dynamic test generation. In Symp. on Principles of Programming Languages, 2007. Extended abstract.
18. P. Godefroid, N. Klarlund, and K. Sen. DART: Directed automated random testing. In Conf. on Programming Language Design and Implementation, 2005.
19. P. Godefroid, M. Y. Levin, and D. Molnar. Automated whitebox fuzz testing. In Network and Distributed System Security Symp., 2008.
20. Java PathFinder. http://javapathfinder.sourceforge.net, 2007.
21. J. C. King. Symbolic execution and program testing. Communications of the ACM, 1976.
22. V. Kuznetsov, V. Chipounov, and G. Candea. Testing closed-source binary device drivers with DDT. In USENIX Annual Technical Conf., 2010.
23. M. S. Lam, J. Whaley, V. B. Livshits, M. C. Martin, D. Avots, M. Carbin, and C. Unkel. Context-sensitive program analysis as database queries. In Symp. on Principles of Database Systems, 2005.
24. C. Lattner and V. Adve. LLVM: A compilation framework for lifelong program analysis and transformation. In Intl. Symp. on Code Generation and Optimization, 2004.
25. Lua: A lightweight embeddable scripting language. http://www. lua.org/, 2010.
26. C.-K. Luk, R. Cohn, R.Muth, H. Patil, A. Klauser, G. Lowney, S.Wallace, V. J. Reddi, and K. Hazelwood. PIN: building customized program analysis tools with dynamic instrumentation. In Conf. on Programming Language Design and Implementation, 2005.
27. C. Murphy, G. Kaiser, I. Vo, and M. Chu. Quality assurance of software applications using the in vivo testing approach. In Intl. Conf. on Software Testing Verification and Validation, 2009.
28. M. Musuvathi, S. Qadeer, T. Ball, G. Basler, P. A. Nainar, and I. Neamtiu. Finding and reproducing Heisenbugs in concurrent programs. In Symp. on Operating Systems Design and Implementation, 2008.
29. Oprofile. http://oprofile.sourceforge.net.
30. A. Pesterev, N. Zeldovich, and R. T. Morris. Locating cache performance bottlenecks using data profiling. In ACM SIGOPS/EuroSys European Conf. on Computer Systems, 2010.
31. C. P?as?areanu, P. Mehlitz, D. Bushnell, K. Gundy-Burlet, M. Lowry, S. Person, and M. Pape. Combining unit-level symbolic execution and system-level concrete execution for testing NASA software. In Intl. Symp. on Software Testing and Analysis, 2008.
32. S. Savage, M. Burrows, G. Nelson, P. Sobalvarro, and T. Anderson. Eraser: a dynamic data race detector for multithreaded programs. ACM Transactions on Computer Systems, 15(4), 1997.
33. B. Schwarz, S. Debray, and G. Andrews. Disassembly of executable code revisited. In Working Conf. on Reverse Engineering, 2002.
34. K. Sen. Concolic testing. In Intl. Conf. on Automated Software Engineering, 2007.
35. K. Sen, D. Marinov, and G. Agha. CUTE: a concolic unit testing engine for C. In Symp. on the Foundations of Software Eng., 2005.
36. D. Song, D. Brumley, H. Yin, J. Caballero, I. Jager, M. G. Kang, Z. Liang, J. Newsome, P. Poosankam, and P. Saxena. Bitblaze: A new approach to computer security via binary analysis. In Intl. Conf. on Information Systems Security, 2008.
37. Valgrind. http://valgrind.org/.
38. D. Wheeler. SLOCCount. http://www.dwheeler.com/sloccount/, 2010.
39. J. Yang, T. Chen, M. Wu, Z. Xu, X. Liu, H. Lin, M. Yang, F. Long, L. Zhang, and L. Zhou. MODIST: Transparent model checking of unmodified distributed systems. In Symp. on Networked Systems Design and Implementation, 2009.
40. J. Yang, C. Sar, and D. Engler. EXPLODE: a lightweight, general system for finding serious storage system errors. In Symp. on Operating Systems Design and Implementation, 2006.
41. M. T. Yourst. PTLsim: A cycle accurate full system x86-64 microarchitectural simulator. In IEEE Intl. Symp. on Performance Analysis of Systems and Software, 2007.