Patent application EP20166809A (EP), filed 2020-03-30
Publication number: EP3754527A1
Title: A VULNERABILITY DRIVEN HYBRID TEST SYSTEM FOR APPLICATION PROGRAMS
Abstract: According to one embodiment, a system receives an intermediate result generated by a compiler based on source code, where the intermediate result includes one or more vulnerability indicators indicating one or more lines of the source code being potentially vulnerable. The system performs a grey box fuzzing on a first executable code generated from the intermediate result to generate a first set of seed inputs. The system calculates a vulnerability score for each of the seed inputs of the first set based on the vulnerability indicators for the lines of the source code reachable but has not been explored by the grey box fuzzing. The system selects one of the seed inputs in the first set having a highest vulnerability score. The system performs a concolic execution using the selected seed input as priority, the concolic execution being performed on a second executable code generated from the intermediate result.
IPC codes: G06F  21/    56            A I
G06F  21/    57            A I
Claims: number: 1
text: A computer-implemented method for evaluating vulnerability of program code, the method comprising:
number: 2
text: The method of claim 1, wherein the concolic executions generate a second set of seed inputs that caused a program flow control of the concolic execution to explore one or more branches of the source code not explored by the grey box fuzzing process.
number: 3
text: The method of claim 2, further comprising adding the second set of seed inputs to the first set of seed inputs, such that the one or more seed inputs of the second set are utilized by the grey box fuzzing process during a next iteration.
number: 4
text: The method of claim 1, wherein calculating a vulnerability score for each of the seed inputs of the first set comprises:
number: 5
text: The method of claim 1, wherein selecting one of the seed inputs in the first set having a highest vulnerability score comprises ordering the seed inputs of the first set based on their respective vulnerability scores to prioritize concolic executions for the first set of seed inputs.
number: 6
text: The method of claim 1, further comprising:
number: 7
text: The method of claim 6, wherein calculating a vulnerability score for each of the seed inputs of the first set comprises:
number: 8
text: The method of claim 1, wherein the at least one of the vulnerability indicator comprises an exception throw and catch (throw/catch) block inserted by the compiler, which when an associated line of source code violates a safety rule during execution, an exception is thrown and caught by an operating system.
number: 9
text: A non-transitory machine-readable medium having instructions stored therein, which when executed by a processor, cause the processor to perform operations of the method according to any of claims 1-8.
number: 10
text: A data processing system, comprising:
Office action: search_report, dated 2020-12-23
Prior art cited: ref_id: US9135405B2
ref_type: patent
severity: background
ref_id: US2019114436A1
ref_type: patent
severity: background
ref_id: - SAAHIL OGNAWALA ET AL: "Compositional Fuzzing Aided by Targeted Symbolic Execution", ARXIV.ORG, CORNELL UNIVERSITY LIBRARY, 201 OLIN LIBRARY CORNELL UNIVERSITY ITHACA, NY 14853, 7 March 2019 (2019-03-07), XP081130655
ref_type: npl
severity: background
ref_id: - OUYANG YONGJI ET AL: "Improving guide-based vulnerability detection with hybrid symbolic execution", THE 2014 2ND INTERNATIONAL CONFERENCE ON SYSTEMS AND INFORMATICS (ICSAI 2014), IEEE, 15 November 2014 (2014-11-15), pages 1038 - 1043, XP032722256, DOI: 10.1109/ICSAI.2014.7009438
ref_type: npl
severity: background
ref_id: - YUWEI LI ET AL: "V-Fuzz: Vulnerability-Oriented Evolutionary Fuzzing", ARXIV.ORG, CORNELL UNIVERSITY LIBRARY, 201 OLIN LIBRARY CORNELL UNIVERSITY ITHACA, NY 14853, 4 January 2019 (2019-01-04), XP081011392
ref_type: npl
severity: background
ref_id: US9135405
ref_type: patent
severity: background
ref_id: US2019114436
ref_type: patent
severity: background
ref_id: - SAAHIL OGNAWALA ET AL, "Compositional Fuzzing Aided by Targeted Symbolic Execution", ARXIV.ORG, CORNELL UNIVERSITY LIBRARY, 201 OLIN LIBRARY CORNELL UNIVERSITY ITHACA, NY 14853, (20190307), XP081130655 [I] 1-10 * abstract * * page  1  - page  14 *
ref_type: npl
severity: background
ref_id: - OUYANG YONGJI ET AL, "Improving guide-based vulnerability detection with hybrid symbolic execution", THE 2014 2ND INTERNATIONAL CONFERENCE ON SYSTEMS AND INFORMATICS (ICSAI 2014), IEEE, (20141115), doi:10.1109/ICSAI.2014.7009438, pages 1038 - 1043, XP032722256 [A] 1-10 * abstract * * page  1  - page  3 *
ref_type: npl
severity: background
ref_id: - YUWEI LI ET AL, "V-Fuzz: Vulnerability-Oriented Evolutionary Fuzzing", ARXIV.ORG, CORNELL UNIVERSITY LIBRARY, 201 OLIN LIBRARY CORNELL UNIVERSITY ITHACA, NY 14853, (20190104), XP081011392 [A] 1-10 * page  1  - pages  9,13 *
ref_type: npl
severity: background
Final disposition: pending (2020-12-23)