• DOI:10.1109/SP.2010.37
Corpus ID: 11898088

TaintScope: A Checksum-Aware Directed Fuzzing Tool for Automatic Software Vulnerability Detection

@article{Wang2010TaintScopeAC,
  title={TaintScope: A Checksum-Aware Directed Fuzzing Tool for Automatic Software Vulnerability Detection},
  author={Tielei Wang and Tao Wei and G. Gu and W. Zou},
  journal={2010 IEEE Symposium on Security and Privacy},
  year={2010},
  pages={497-512}
}

Tielei Wang, Tao Wei, +1 author W. Zou

Published 2010

Computer Science

2010 IEEE Symposium on Security and Privacy

Fuzz testing has proven successful in finding security vulnerabilities in large programs. However, traditional fuzz testing tools have a well-known common drawback: they are ineffective if most generated malformed inputs are rejected in the early stage of program running, especially when target programs employ checksum mechanisms to verify the integrity of inputs. In this paper, we present TaintScope, an automatic fuzzing system using dynamic taint analysis and symbolic execution techniques, to… CONTINUE READING

View on IEEE

faculty.cs.tamu.edu

Save to Library

Create Alert

Cite

Launch Research Feed