Testing closed-source binary device drivers with DDT

Proceedings of the 2010 USENIX Annual Technical Conference, USENIX ATC 2010

Volumn , Issue , 2019, Pages 159-172

  Kuznetsov, Volodymyr ^a   Chipounov, Vitaly ^a   Candea, George ^a  

^a EPFL   (Switzerland)

Author keywords

[No Author keywords available]

Indexed keywords

CLOSED SOURCE; DEVICE DRIVER; MEMORY ERROR; MODULAR DYNAMICS; RESOURCE LEAKS; SOURCE CODES; SYMBOLIC EXECUTION; UNDESIRED BEHAVIOR;

PROGRAM DEBUGGING;

EID: 85077123927     PISSN: None     EISSN: None     Source Type: Conference Proceeding    
DOI: None     Document Type: Conference Paper

References (35)

1. T. Ball, E. Bounimova, B. Cook, V. Levin, J. Lichtenberg, C. McGarvey, B. Ondrusek, S. K. Rajamani, and A. Us-tuner. Thorough static analysis of device drivers. In ACM SIGOPS/EuroSys European Conf. on Computer Systems, 2006.
2. F. Bellard. QEMU, a fast and portable dynamic translator. In USENIX Annual Technical Conf., 2005.
3. P. Boonstoppel, C. Cadar, and D. R. Engler. RWset: Attacking path explosion in constraint-based test generation. In Intl. Conf. on Tools and Algorithms for the Construction and Analysis of Systems, 2008.
4. P. P. Bungale and C.-K. Luk. PinOS: a programmable framework for whole-system dynamic instrumentation. In Intl. Conf. on Virtual Execution Environments, 2007.
5. S. Butt, V. Ganapathy, M. M. Swift, and C.-C. Chang. Protecting commodity operating system kernels from vulnerable device drivers. In Annual Computer Security Applications Conf., 2009.
6. C. Cadar, D. Dunbar, and D. R. Engler. KLEE: Unassisted and automatic generation of high-coverage tests for complex systems programs. In Symp. on Operating Systems Design and Implementation, 2008.
7. C. Cadar, V. Ganesh, P. M. Pawlowski, D. L. Dill, and D. R. Engler. EXE: Automatically generating inputs of death. In Conf. on Computer and Communication Security, 2006.
8. M. Castro, M. Costa, J.-P. Martin, M. Peinado, P. Akritidis, A. Donnelly, P. Barham, and R. Black. Fast byte-granularity software fault isolation. In Symp. on Operating Systems Principles, 2009.
9. V. Chipounov and G. Candea. Reverse engineering of binary device drivers with RevNIC. In ACM SIGOPS/EuroSys European Conf. on Computer Systems, 2010.
10. V. Chipounov, V. Georgescu, C. Zamfir, and G. Candea. Selective symbolic execution. In Workshop on Hot Topics in Dependable Systems, 2009.
11. A. Chou, J.-F. Yang, B. Chelf, S. Hallem, and D. Engler. An empirical study of operating systems errors. 2001.
12. L. Ciortea, C. Zamfir, S. Bucur, V. Chipounov, and G. Candea. Cloud9: A software testing service. In Workshop on Large Scale Distributed Systems and Middleware, 2009.
13. G. W. Dunlap, D. Lucchetti, P. M. Chen, and M. Fetterman. Execution replay on multiprocessor virtual machines. In Intl. Conf. on Virtual Execution Environments, 2008.
14. Ú. Erlingsson, M. Abadi, M. Vrable, M. Budiu, and G. C. Necula. XFI: Software guards for system address spaces. In Symp. on Operating Systems Design and Implementation, 2006.
15. A. Ganapathi, V. Ganapathi, and D. Patterson. Windows XP kernel crash analysis. 2006.
16. P. Godefroid, N. Klarlund, and K. Sen. DART: Directed automated random testing. In Conf. on Programming Language Design and Implementation, 2005.
17. J. N. Herder, H. Bos, B. Gras, P. Homburg, and A. S. Tanenbaum. Fault isolation for device drivers. In Intl. Conf. on Dependable Systems and Networks, 2009.
18. G. Hoglund and J. Butler. Rootkits: subverting the Windows Kernel. Campus Press, 2006.
19. A. Kadav, M. J. Renzelmann, and M. M. Swift. Tolerating hardware device failures in software. In Symp. on Operating Systems Principles, 2009.
20. J. C. King. Symbolic execution and program testing. Communications of the ACM, 1976.
21. S. T. King, G. W. Dunlap, and P. M. Chen. Debugging operating systems with time-traveling virtual machines. In USENIX Annual Technical Conf., 2005.
22. C. Lattner and V. Adve. LLVM: A compilation framework for lifelong program analysis and transformation. In Intl. Symp. on Code Generation and Optimization, 2004.
23. F. Mérillon, L. Réveillère, C. Consel, R. Marlet, and G. Muller. Devil: An IDL for hardware programming. In Symp. on Operating Systems Design and Implementation, 2000.
24. Microsoft security advisory #944653: Vulnerability in Macrovision driver. http://www.microsoft.com/technet/security/advisory/944653.mspx.
25. Microsoft. Windows logo program. http://www.microsoft.com/whdc.
26. B. Murphy. Automating software failure reporting. ACM Queue, 2(8), 2004.
27. V. Orgovan and M. Tricker. An introduction to driver quality. Microsoft Windows Hardware Engineering Conf., 2003.
28. M. Seltzer, Y. Endo, C. Small, and K. Smith. Dealing with disaster: Surviving misbehaved kernel extensions. In Symp. on Operating Systems Design and Implementation, 1996.
29. S. M. Srinivasan, S. Kandula, C. R. Andrews, and Y. Zhou. Flashback: a lightweight extension for rollback and deterministic replay for software debugging. In USENIX Annual Technical Conf., 2004.
30. M. M. Swift, M. Annamalai, B. N. Bershad, and H. M. Levy. Recovering device drivers. ACM Transactions on Computer Systems, 24(4), 2006.
31. M. M. Swift, B. N. Bershad, and H. M. Levy. Improving the reliability of commodity operating systems. ACM Transactions on Computer Systems, 23(1), 2005.
32. R. Wahbe, S. Lucco, T. E. Anderson, and S. L. Graham. Efficient software-based fault isolation. In Symp. on Operating Systems Principles, 1993.
33. B. Xin, W. N. Sumner, and X. Zhang. Efficient program execution indexing. In Conf. on Programming Language Design and Implementation, 2008.
34. J. Zhang. A path-based approach to the detection of infinite looping. In Asia-Pacific Conf. on Quality Software, 2001.
35. F. Zhou, J. Condit, Z. Anderson, I. Bagrak, R. Ennals, M. Harren, G. Necula, and E. Brewer. SafeDrive: safe and recoverable extensions using language-based techniques. In Symp. on Operating Systems Design and Implementation, 2006.