Input Generation via Taintdata Identification: Finding Hidden Path in the Environment‐Intensive Program
Xue Lei, Wei Huang, Wenqing Fan, Yixian Yang · Chinese Journal of Electronics · 2015
Concolic testing is an integrated approachof symbolic execution and dynamic analysis, which iswidely adopted by security researchers for program behavioranalysis. This approach fails on hidden path discoveryof environment-intensive program. We investigated onexisting concolic testing tools and found out that severalof them does not take this issue into account while otherssolved this issue with overloaded working model. Weproposed a systematic and unified approach of automaticallyidentifying and modifying the output of the Datainput interacting functions (DIIF) based on fine-grainedtaint analysis, which detects and updates the data interactingwith the runtime environment and generating a newcustomized set of inputs to execute hidden paths, to revealthe hidden paths on only particular runtime configurationor context. A prototype was developed and evaluated witha set of complex and environment-intensive programs. Theexperimental result demonstrated that our approach coulddetect the DIIF precisely and improve the code coverage.