Abstract:Different software vulnerabilities have different characteristics.220 integer overflow vulnerabilities are analyzed to develop three kinds of detection strategies to reduce the false positives from static analyses.Static analyses identify the type of integer overflow while dynamic analyses accurately identify the integer overflow vulnerability.This method combines the advantages of the two analyses to detect vulnerabilities.The static analysis is used to detect the integer overflow and obtain the integer overflow type and related information.This information is then used by the dynamic analysis to insert hooks into the code using the automatic pile technique.Then,the algorithm calls the integer overflow marker interface and performs symbolic execution with the reconstruction expressions.This method is used to analyze the Lighttpd-1.4.29 and Linux kernel 3.4 systems.This method can greatly reduce the number of false positives.The number of false positives for Lighttpd-1.4.29 is reduced by 374,accounting for 67.3％ of the total.The number of false positives for Linux kernel 3.4 is reduced by 159 761,accounting for 98.2％ of the total.This system also successfully finds the CVE-2011-4362 and CVE-2013-1763 integer overflow vulnerabilities.

The Study on Integer Overflow Vulnerability Detection in Binary Executables Based Upon Genetic Algorithm

Integer overflow vulnerability detection based on an integer-valued genetic algorithm

Detecting Integer Overflow Vulnerabilities in Binary Executables Based on Target Filtering and Dynamic Taint Tracing

Mutation-based testing of integer overflow vulnerabilities

Dynamic and static analyses of integer overflow vulnerabilities

High-Trusted-Software-Oriented Automatic Testing for Integer Overflow Bugs

Vulnerability Analysis for X86 Executables Using Genetic Algorithm and Fuzzing

Software Vulnerability Detection Using Genetic Algorithm And Dynamic Taint Analysis

VulMiningBGS: Detection of Overflow Vulnerabilities Based on Graph Similarity

Software Vulnerability Detection Method Based on the Lexical and Syntax Analysis

Identifying Buffer Overflow Vulnerabilities Based on Binary Code

Dynamic Detection of Buffer-overflow Vulnerabilities in Binary Environment

IntScope: Automatically Detecting Integer Overflow Vulnerability in X86 Binary Using Symbolic Execution.

Automatic Exploit Generation for Buffer Overflow Vulnerabilities

A source code oriented static detection method for integer overflow defects

Research on Integer-Based Vulnerabilities：Security Model, Detecting Methods and Real- World Cases

Detecting Integer Bugs Based on Static and Dynamic Program Analysis

A Novel Method of Software Vulnerability Detection based on Fuzzing Technique

A Vulnerability Exploits Detection Method Based on Binary Program Behavior Analysis

A Method for Detecting Buffer Overflow Vulnerabilities

Active Checking Buffer Overflow Vulnerability In Binaries With Symbolic Execution