Search-driven string constraint solving for vulnerability detection

• Main Authors: THOME, Julian, SHAR, Lwin Khin, BIANCULLI, Domenico, BRIAND, Lionel
• Format: text
• Language: English
• Published: Institutional Knowledge at Singapore Management University 2017
• Subjects: vulnerability detection; string constraint solving; search-based software engineering; Software Engineering
• Online Access: https://ink.library.smu.edu.sg/sis_research/4777; https://ink.library.smu.edu.sg/context/sis_research/article/5780/viewcontent/AcoSolver_icse2017.pdf
• Institution: Singapore Management University

—Constraint solving is an essential technique for detecting vulnerabilities in programs, since it can reason about input sanitization and validation operations performed on user inputs. However, real-world programs typically contain complex string operations that challenge vulnerability detection. S...