Past-sensitive pointer analysis for symbolic execution

Trabish, David; Kapus, Timotej; Rinetzky, Noam; Cadar, Cristian

doi:10.1145/3368089.3409698

Cited by 8 publications

(3 citation statements)

References 54 publications

Supporting

Mentioning

Contrasting

Order By: Relevance

“…Dynamic symbolic execution [21][22][23] can integrate specific program execution behaviors and program symbolic execution behaviors, providing an accurate memory model and significant effect in detecting memory-related errors. However, symbolic execution is prone to path explosion problems and lacks scalability [24,25], making it unsuitable for industrial control scenarios.…”

Section: Analysis Of the Current State Of Researchmentioning

confidence: 99%

“…prone to path explosion problems and lacks scalability [24,25], making it unsuitable for industrial control scenarios.…”

Section: Function Call Sequence Trust Measurement Evaluationmentioning

confidence: 99%

“…This section compares the dynamic credibility measurement mechanism based on function partition in this paper with the C-FLAT scheme [24], which has certain influence in the field of trust measurement in industrial control scenarios, and analyzes its practical value.…”

Section: Comparative Experiments On Attack Detectionmentioning

confidence: 99%

See 2 more Smart Citations

Program Behavior Dynamic Trust Measurement and Evaluation Based on Data Analysis

Wang,

Hu,

et al. 2024

Symmetry

View full text Add to dashboard Cite

Industrial control terminals play an important role in industrial control scenarios. Due to the special nature of industrial control networks, industrial control terminal systems are vulnerable to malicious attacks, which can greatly threaten the stability and security of industrial production environments. Traditional security protection methods for industrial control terminals have coarse detection granularity, and are unable to effectively detect and prevent attacks, lacking real-time responsiveness to attack events. Therefore, this paper proposes a real-time dynamic credibility evaluation mechanism based on program behavior, which integrates the matching and symmetry ideas of credibility evaluation. By conducting a real-time dynamic credibility evaluation of function call sequences and system call sequences during program execution, the credibility of industrial control terminal application program behavior can be judged. To solve the problem that the system calls generated during program execution are unstable and difficult to measure, this paper proposes a partition-based dynamic credibility evaluation method, dividing program behavior during runtime into function call behavior and system call behavior within function intervals. For function call behavior, a sliding window-based function call sequence benchmark library construction method is proposed, which matches and evaluates real-time measurement results based on the benchmark library, thereby achieving symmetry between the benchmark library and the measured data. For system call behavior, a maximum entropy system call model is constructed, which is used to evaluate the credibility of system call sequences. Experiment results demonstrate that our method performs better in both detection success rate and detection speed compared to the existing methods.

show abstract