PPT-Symbolic Execution and Software Testing

Corina Pasareanu Carnegie MellonNASA Ames c orinaspasareanunasagov Overview Classical symbolic execution and its variants Generalized symbolic execution D ynamic and concolic. De-Cloaking Internet Malware. Presenter: Yinzhi Cao. Slides by Ben . Livshits . with . Clemens . Kolbitsch, Ben Zorn,. Christian Seifert, Paul . Rebriy. Microsoft Research. Static – Dynamic Analysis Spectrum. Kevin Wallace, CSE504. 2010-04-28. 2. Problem. Attacker-facing code must be written to guard against all possible inputs. There are many execution paths; not a single one should lead to a vulnerability. Todd Frederick. Vulnerabilities are everywhere…. 2. Binary Concolic Execution. rtm. Robert Morris. An exploit. 3. Binary Concolic Execution. DD8F2F736800DD8F2F62696ED05E5ADD00DD00DD5ADD03D05E5CBC3B. Subodh Sharma. Indian Institute of Technology Delhi. State merging, . Concolic. Execution. Concolic. Execution. Works well on . interprocedural. bugs, use of library calls. Concolic. Execution. Falls back on concrete values when . Towards Automatic Signature Generation. of Vulnerability-based Signature. Dynamic Analysis. Unleashing Mayhem on Binary Code. Automatic exploit detection: attack and defense. Static and Dynamic Analysis. Edward J. Schwartz, . Thanassis. Avgerinos, David . Brumley. Presented by: . Haitao Xu. 1. The Root of All Evil. Humans write programs. This Talk:. Computers Analyzing Programs Dynamically at Runtime. Cristian. . Cadar. , Patrice . Godefroid. , . Sarfraz. . Khurshid. , . Corina. . Pasareanu. , . Koushik. . Sen. , Nikolai . Tillmann. , Willem . Visser. Overview. S. ymbolic execution and its variants. Friday June 12, 2015. Introduction to Software Testing. What is software testing?. Software testing is the process of operating software under specified conditions, observing or recording the results and making an evaluation of some aspect of the software.. Damian Gordon. Why do pilots bother doing pre-flight checks when the chances are that the plane is working fine?. Question. Module Description. This module is designed to provide the student with both a practical and theoretical understanding of how software is tested, with emphasis on test strategies, test design and test execution. Students will focus on the practical issues associated with testing software which will include a review of the techniques and technologies upon which software testing is based. . Integration: an Experience in the Automotive Domain. Domenico Amalfitano. Vincenzo De Simone. Anna Rita . Fasolino. . Stefano Scala. Context. Embedded software development process management . Model-in-the-loop . Analysis of . Closed-Loop Control Software. Aditya Zutshi. Sriram Sankaranarayanan . 1. Xiaoqing . Jin. Jyotirmoy Deshmukh. Sampled Data Control Systems. Controller.  . Plant.  . D/A. A/D.  .  . Elided to examples only. Example. typedef struct cell { . int v; . struct cell *next;. } cell;. int f(int v) { . return 2*v + 1;. }. int . testme. (cell *p, int x) {. if (x > 0). if (p != NULL). Silent Killer . of DevOps. Ingo . Philipp. Businesses . must continuously . exploit. digital . technologies . to both. create . new . sources. of . customer value . and . increase . operational . agility . c // symbolic3int x 0 y 0 z 04if a 5 x -267if b 5 8 if a c y 1 9 z 21011assertxyz3x0 y0 z0x-2z2y1z2z2tftftftfpath condition55Why Is This PossibleThere are very powerful