读书笔记：Unleashing MAYHEM on Binary Code (未完成)

论文原文或翻译以引用的方式给出。

笔记则为正常文本。

目录

Introduction

Overview of Mayhem

Background

Hybrid Symbolic Execution

Index-based Memory Modeling

Exploit Generation

ImplementationOnline symbolic execution forks at each branch point.

Evaluation

Discussion

Related work

Conclusion

---

Introduction

关于Offline/Online symbolic executors

Offline symbolic executors reason about a single execution path at a time. 

“BitBlaze binary analysis project,” http://bitblaze.cs.berkeley.edu, 2007.

P. Godefroid, M. Levin, and D. Molnar, “Automated whitebox fuzz testing,” in Proc. of the Network and Distributed System
Security Symposium, Feb. 2008.　（SAGE system）

 

Online symbolic execution forks at each branch point.

C. Cadar, D. Dunbar, and D. Engler, “KLEE: Unassisted and automatic generation of high-coverage tests for complex
systems programs,” in Proc. of the USENIX Symposium on Operating System Design and Implementation, Dec. 2008.

G. C. V