整数溢出的SMT求解器

2013 Third International Conference on Instrumentation, Measurement, Computer, Communication and Control Pub Date : 2013-09-21 DOI:10.1109/IMCCC.2013.30

Qixue Xiao, Yu Chen, Hui Huang, Lan-lan Qi

{"title":"整数溢出的SMT求解器","authors":"Qixue Xiao, Yu Chen, Hui Huang, Lan-lan Qi","doi":"10.1109/IMCCC.2013.30","DOIUrl":null,"url":null,"abstract":"SMT solver which is an automated program analysis technique is increasingly used by Vulnerability discovering platforms, especially in the integer security problems checking. An integer vulnerability discovering platform is mostly decided by the SMT solver. We have analyzed integer security problems and several SMT solvers, such as Boolector, Z3, STP and so on. We evaluated the ability of the SMT solvers in integer overflows checking from the view of vulnerability discovering. We also developed a set of APIs to check the integer overflows based on STP.","PeriodicalId":360796,"journal":{"name":"2013 Third International Conference on Instrumentation, Measurement, Computer, Communication and Control","volume":"14 1","pages":"0"},"PeriodicalIF":0.0000,"publicationDate":"2013-09-21","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":"0","resultStr":"{\"title\":\"SMT Solvers for Integer Overflows\",\"authors\":\"Qixue Xiao, Yu Chen, Hui Huang, Lan-lan Qi\",\"doi\":\"10.1109/IMCCC.2013.30\",\"DOIUrl\":null,\"url\":null,\"abstract\":\"SMT solver which is an automated program analysis technique is increasingly used by Vulnerability discovering platforms, especially in the integer security problems checking. An integer vulnerability discovering platform is mostly decided by the SMT solver. We have analyzed integer security problems and several SMT solvers, such as Boolector, Z3, STP and so on. We evaluated the ability of the SMT solvers in integer overflows checking from the view of vulnerability discovering. We also developed a set of APIs to check the integer overflows based on STP.\",\"PeriodicalId\":360796,\"journal\":{\"name\":\"2013 Third International Conference on Instrumentation, Measurement, Computer, Communication and Control\",\"volume\":\"14 1\",\"pages\":\"0\"},\"PeriodicalIF\":0.0000,\"publicationDate\":\"2013-09-21\",\"publicationTypes\":\"Journal Article\",\"fieldsOfStudy\":null,\"isOpenAccess\":false,\"openAccessPdf\":\"\",\"citationCount\":\"0\",\"resultStr\":null,\"platform\":\"Semanticscholar\",\"paperid\":null,\"PeriodicalName\":\"2013 Third International Conference on Instrumentation, Measurement, Computer, Communication and Control\",\"FirstCategoryId\":\"1085\",\"ListUrlMain\":\"https://doi.org/10.1109/IMCCC.2013.30\",\"RegionNum\":0,\"RegionCategory\":null,\"ArticlePicture\":[],\"TitleCN\":null,\"AbstractTextCN\":null,\"PMCID\":null,\"EPubDate\":\"\",\"PubModel\":\"\",\"JCR\":\"\",\"JCRName\":\"\",\"Score\":null,\"Total\":0}","platform":"Semanticscholar","paperid":null,"PeriodicalName":"2013 Third International Conference on Instrumentation, Measurement, Computer, Communication and Control","FirstCategoryId":"1085","ListUrlMain":"https://doi.org/10.1109/IMCCC.2013.30","RegionNum":0,"RegionCategory":null,"ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":null,"EPubDate":"","PubModel":"","JCR":"","JCRName":"","Score":null,"Total":0}

引用次数: 0

摘要

SMT求解器作为一种自动化的程序分析技术，越来越多地应用于漏洞发现平台，特别是在整数安全问题的检测中。整数漏洞发现平台主要由SMT求解器决定。分析了整数安全问题和几种SMT求解器，如Boolector、Z3、STP等。从漏洞发现的角度对SMT求解器在整数溢出检测中的能力进行了评价。我们还开发了一套api来检查基于STP的整数溢出。

本文章由计算机程序翻译，如有差异，请以英文原文为准。

查看原文本刊更多论文

SMT Solvers for Integer Overflows

SMT solver which is an automated program analysis technique is increasingly used by Vulnerability discovering platforms, especially in the integer security problems checking. An integer vulnerability discovering platform is mostly decided by the SMT solver. We have analyzed integer security problems and several SMT solvers, such as Boolector, Z3, STP and so on. We evaluated the ability of the SMT solvers in integer overflows checking from the view of vulnerability discovering. We also developed a set of APIs to check the integer overflows based on STP.

求助全文

通过发布文献求助，成功后即可免费获取论文全文。去求助

来源期刊

2013 Third International Conference on Instrumentation, Measurement, Computer, Communication and Control

自引率

0.00%

发文量