Cross-Language Symbolic Runtime Annotation Checking - Inria - Institut national de recherche en sciences et technologies du numérique
Pré-Publication, Document De Travail Année : 2024

Cross-Language Symbolic Runtime Annotation Checking

Résumé

Software security has become a highly focused area nowadays. One key problem in this field is to expose software vulnerabilities effectively. Traditional testing methods have shown inadequacy in terms of path coverage and bug detection, due to their reliance on concrete input values. In this paper, we present the idea of combining symbolic execution with runtime annotation checking. By using symbolic input values instead of concrete ones, the specified program properties can be checked on all the corner cases. We introduce two implementations of symbolic runtime annotation checkers: one for C, using the ANSI/ISO C Specification Language, and one for WebAssembly, using the Weasel specification language designed by us. Our approach combines the ease of use and the expressiveness of runtime annotation checking, as well as the power of program analysis.
Fichier principal
Vignette du fichier
cross_language_symbolic_runtime_annotation_checking.pdf (311.63 Ko) Télécharger le fichier
Origine Fichiers produits par l'(les) auteur(s)

Dates et versions

hal-04798756 , version 1 (22-11-2024)

Licence

Identifiants

  • HAL Id : hal-04798756 , version 1

Citer

Zhicheng Hui, Léo Andrès. Cross-Language Symbolic Runtime Annotation Checking. 2024. ⟨hal-04798756⟩
9 Consultations
2 Téléchargements

Partager

More