Abstract:Buffer overflow vulnerability is a kind of serious security defect. Currently there are dynamic and static ap-proaches to detect buffer overflow. The effectiveness of Dynamic tools depends on design of test case, and they often in-troduce execution overhead. Static program analysis techniques have been widely used in buffer overflow detection, which often report a large number of false warnings. Manual validating the results of static analysis is time consuming and er-ror-prone, which severely limits the usefulness of static analysis tools. Symbolic execution is a promising software testing and analysis technology, which systematically explore execution space of test program and generates test cases with high coverage. In this paper we propose a novel approach for automatic buffer overflow warnings validating based on symbolic execution.Our approach is consist of three steps:firstly detect the reachability of statements in static analysis path segment in inter procedural control flow graph and map the static path segment sets to complete path sets which are used to be val-idated;secondly guide the symbolic execution so that we only focus on the execution paths that cover the buffer overflow warnings generated by static program analysis through pruning useless path; finally construct warning path constraints according to buffer overflow vulnerability models at suspicios statements and classify results depend on the output of con-straint solver. Based on the proposed technique we implemented a prototype tool BOVTool and our experimental results on real open source programs show that the percentage of false warnings which do not need to be manually validated is 59.9%on average.

A source code oriented static detection method for integer overflow defects

Buffer overflow detection method based on source code analysis

Method of integer overflow detection to avoid buffer overflow

Dynamic and static analyses of integer overflow vulnerabilities

Detecting Integer Overflow Vulnerabilities in Binary Executables Based on Target Filtering and Dynamic Taint Tracing

Staticly Detect Stack Overflow Vulnerabilities with Taint Analysis

An Integer Overflow Detection Method Based on Integer Variable Unification

Integer overflow vulnerability detection based on an integer-valued genetic algorithm

Source Code Vulnerability Detection Technology Based on Taint Analysis

Static Buffer Overflow Detection for C/C++ Source Code Based on Abstract Syntax Tree

Detecting Integer Bugs Based on Static and Dynamic Program Analysis

High-Trusted-Software-Oriented Automatic Testing for Integer Overflow Bugs

The Study on Integer Overflow Vulnerability Detection in Binary Executables Based Upon Genetic Algorithm

SAT-based Technique to Detect Buffer Overflows in C Source Codes

Mutation-based testing of integer overflow vulnerabilities

Pointer Analysis Algorithm in Static Buffer Overflow Analysis

A Flow Sensitive Algorithm for Buffer Overrun Detection

Software Vulnerability Detection Method Based on the Lexical and Syntax Analysis

Automatically Validating Static Buffer Overflow Warnings based on Guided Symbolic Execution

A Method of Tainted Data Detection Based on Static Code Analysis

Buffer Overflow Detection in C Code Using Dynamic Symbolic Execution