Write a Blog >>
ISSTA 2018
Sun 15 - Sat 21 July 2018 Amsterdam, Netherlands
co-located with ECOOP and ISSTA 2018
Wed 18 Jul 2018 14:20 - 14:40 at Zurich II - Optimization and Performance Chair(s): Tevfik Bultan

Hybrid testing approaches that involve fuzz testing and symbolic execution have shown promising results in achieving high code coverage, uncovering subtle errors and vulnerabilities in a variety of software applications. In this paper we describe Badger - a new hybrid approach for complexity analysis, with the goal of discovering vulnerabilities which occur when the worst-case time or space complexity of an application is significantly higher than the average case. Badger uses fuzz testing to generate a diverse set of inputs that aim to increase not only coverage but also a resource-related cost associated with each path. Since fuzzing may fail to execute deep program paths due to its limited knowledge about the conditions that influence these paths, we complement the analysis with a symbolic execution, which is also customized to search for paths that increase the resource-related cost. Symbolic execution is particularly good at generating inputs that satisfy various program conditions but by itself suffers from path explosion. Therefore, Badger uses fuzzing and symbolic execution in tandem, to leverage their benefits and overcome their weaknesses. We implemented our approach for the analysis of Java programs, based on Kelinci and Symbolic PathFinder. We evaluated Badger on Java applications, showing that our approach is significantly faster in generating worst-case executions compared to fuzzing or symbolic execution on their own.

Wed 18 Jul
Times are displayed in time zone: Amsterdam, Berlin, Bern, Rome, Stockholm, Vienna change

14:00 - 15:30: Optimization and PerformanceISSTA Technical Papers at Zurich II
Chair(s): Tevfik BultanUniversity of California, Santa Barbara
14:00 - 14:20
Remove RATs from Your Code: Automated Optimization of Resource Inefficient Database Writes for Mobile Applications
ISSTA Technical Papers
Yingjun LyuUniversity of Southern California, Ding LiNEC Labs, William G.J. HalfondUniversity of Southern California
14:20 - 14:40
Badger: Complexity Analysis with Fuzzing and Symbolic Execution
ISSTA Technical Papers
Yannic NollerHumboldt-Universität zu Berlin, Rody KerstenSynopsys, Inc., Corina S PasareanuNASA Ames Research Center
14:40 - 15:00
Exploiting Community Structure for Floating-Point Precision Tuning
ISSTA Technical Papers
Hui GuoUniversity of California, Davis, Cindy Rubio-GonzálezUniversity of California, Davis
15:00 - 15:20
piCoq: Parallel Regression Proving for Large-Scale Verification Projects
ISSTA Technical Papers
Karl PalmskogUniversity of Texas at Austin, Ahmet CelikUniversity of Texas at Austin, USA, Milos GligoricUniversity of Texas at Austin
15:20 - 15:30
Q&A in groups
ISSTA Technical Papers