Research and Development of Methods of Dynamic Analysis for Detecting Input Data Affecting Conditional Branches Execution

Student: Dyachkov Leonid

Educational Programme: System Programming (Master)

Final Grade: 10

Year of Graduation: 2019

Fuzz-testing is an actively developed and used method for software errors search. However there are some disadvantages, for example it may be difficult to reach some code with it. This can be resolved with by giving information about bytes which influenced on branch execution. We made an overview of dynamic analysis frameworks and propose two approaches to get the information. The first approach based on dynamic symbolic execution, we also propose a method based on the Angr framework as its implementation. It was tested on synthetic examples. The second approach is based on dynamic taint analysis. We propose improvements for the moflow gentrace tool to be used as the implementation of the method based on the second approach. This solution was tested on LAVA test set and open source programs.

Full text (added May 30, 2019)

Student Theses at HSE must be completed in accordance with the University Rules and regulations specified by each educational programme.

Summaries of all theses must be published and made freely available on the HSE website.

The full text of a thesis can be published in open access on the HSE website only if the authoring student (copyright holder) agrees, or, if the thesis was written by a team of students, if all the co-authors (copyright holders) agree. After a thesis is published on the HSE website, it obtains the status of an online publication.

Student theses are objects of copyright and their use is subject to limitations in accordance with the Russian Federation’s law on intellectual property.

In the event that a thesis is quoted or otherwise used, reference to the author’s name and the source of quotation is required.

Search all student theses