Research on the Exploitability of Binary Software Vulnerabilities
Xiang Tang, Houlin Zhou, Man Zhang, Yuheng Zhang, Guo–Cheng Wu, Hui Dong Lu, Xiang Yu, Zhihong Tian · 2023
Fuzzing technology is the mainstream technology used for vulnerability mining at this stage, and most of the software vulnerabilities are discovered by using this technology. However, one of the main problems of fuzzing technology is that it will generate a large number of crash samples, but not all crashes are vulnerabilities, so how to quickly analyze and judge these crash samples usable is the current vulnerability mining work based on fuzzing technology. The main problem faced aiming at the research on crash exploitability analysis, this article firstly explains the difficulties of vulnerability exploitability analysis, then explains several difficulties in turn, lists some tools and methods for researching these difficulties, and discusses the analysis of vulnerabilities Future development directions and trends in terms of usability.