Modern software systems require the support of automatic program analyses to answer questions about their correctness, reliability, and safety. In recent years, symbolic execution techniques have played a pivotal role in this field, backing research in different domains such as software testing and software security. Like other powerful machine analyses, symbolic execution is often affected by efficiency and scalability issues that can be mitigated when a domain expert interacts with its working, steering the computation to achieve the desired goals faster. In this paper we explore how visual analytics techniques can help the user to grasp properties of the ongoing analysis and use such insights to refine the symbolic exploration process. To this end, we discuss two real-world usage scenarios from the malware analysis and the vulnerability detection domains, showing how our prototype system can help users make a wiser use of symbolic exploration techniques in the analysis of binary code.

SymNav: Visually Assisting Symbolic Execution / Angelini, Marco; Blasilli, Graziano; Borzacchiello, Luca; Coppa, Emilio; D'Elia, DANIELE CONO; Demetrescu, Camil; Lenti, Simone; Nicchi, Simone; Santucci, Giuseppe. - (2019). (Intervento presentato al convegno 16th IEEE Symposium on Visualization for Cyber Security (VizSec 2019) tenutosi a Vancouver, Canada) [10.1109/VizSec48167.2019.9161524].

SymNav: Visually Assisting Symbolic Execution

Marco Angelini
;
Graziano Blasilli
;
Luca Borzacchiello
;
Emilio Coppa
;
Daniele Cono D’Elia
;
Camil Demetrescu
;
Simone Lenti
;
Simone Nicchi
;
Giuseppe Santucci
2019

Abstract

Modern software systems require the support of automatic program analyses to answer questions about their correctness, reliability, and safety. In recent years, symbolic execution techniques have played a pivotal role in this field, backing research in different domains such as software testing and software security. Like other powerful machine analyses, symbolic execution is often affected by efficiency and scalability issues that can be mitigated when a domain expert interacts with its working, steering the computation to achieve the desired goals faster. In this paper we explore how visual analytics techniques can help the user to grasp properties of the ongoing analysis and use such insights to refine the symbolic exploration process. To this end, we discuss two real-world usage scenarios from the malware analysis and the vulnerability detection domains, showing how our prototype system can help users make a wiser use of symbolic exploration techniques in the analysis of binary code.
2019
16th IEEE Symposium on Visualization for Cyber Security (VizSec 2019)
binary analysis; symbolic execution; visual analytics
04 Pubblicazione in atti di convegno::04b Atto di convegno in volume
SymNav: Visually Assisting Symbolic Execution / Angelini, Marco; Blasilli, Graziano; Borzacchiello, Luca; Coppa, Emilio; D'Elia, DANIELE CONO; Demetrescu, Camil; Lenti, Simone; Nicchi, Simone; Santucci, Giuseppe. - (2019). (Intervento presentato al convegno 16th IEEE Symposium on Visualization for Cyber Security (VizSec 2019) tenutosi a Vancouver, Canada) [10.1109/VizSec48167.2019.9161524].
File allegati a questo prodotto
File Dimensione Formato  
Angelini_postprint_SymNav_2019.pdf

accesso aperto

Note: https://ieeexplore.ieee.org/document/9161524
Tipologia: Documento in Post-print (versione successiva alla peer review e accettata per la pubblicazione)
Licenza: Tutti i diritti riservati (All rights reserved)
Dimensione 1.41 MB
Formato Adobe PDF
1.41 MB Adobe PDF
Angelini_SymNav_2019.pdf

solo gestori archivio

Tipologia: Versione editoriale (versione pubblicata con il layout dell'editore)
Licenza: Tutti i diritti riservati (All rights reserved)
Dimensione 1.4 MB
Formato Adobe PDF
1.4 MB Adobe PDF   Contatta l'autore

I documenti in IRIS sono protetti da copyright e tutti i diritti sono riservati, salvo diversa indicazione.

Utilizza questo identificativo per citare o creare un link a questo documento: https://hdl.handle.net/11573/1325767
Citazioni
  • ???jsp.display-item.citation.pmc??? ND
  • Scopus 9
  • ???jsp.display-item.citation.isi??? 6
social impact