Model checking x86 executables with codesurfer/x86 and WPDS++

Authors:
G. Balakrishnan;T. Reps;N. Kidd;A. Lal;J. Lim;D. Melski;R. Gruian;S. Yong;C.-H. Chen;T. Teitelbaum
Affiliations:
Comp. Sci. Dept., University of Wisconsin;Comp. Sci. Dept., University of Wisconsin;Comp. Sci. Dept., University of Wisconsin;Comp. Sci. Dept., University of Wisconsin;Comp. Sci. Dept., University of Wisconsin;GrammaTech, Inc;GrammaTech, Inc;GrammaTech, Inc;GrammaTech, Inc;GrammaTech, Inc
Venue:
CAV'05 Proceedings of the 17th international conference on Computer Aided Verification
Year:
2005

Citing 7
Cited 14

Precise interprocedural dataflow analysis with applications to constant propagation

TAPSOFT '95 Selected papers from the 6th international joint conference on Theory and practice of software development
Model checking for programming languages using VeriSoft

Proceedings of the 24th ACM SIGPLAN-SIGACT symposium on Principles of programming languages
Patterns in property specifications for finite-state verification

Proceedings of the 21st international conference on Software engineering
CMC: a pragmatic approach to model checking real code

OSDI '02 Proceedings of the 5th symposium on Operating systems design and implementationCopyright restrictions prevent ACM from being able to make the PDFs for this conference available for downloading
Weighted pushdown systems and their application to interprocedural dataflow analysis

Science of Computer Programming - Special issue: Static analysis symposium (SAS 2003)
Static analysis of executables to detect malicious patterns

SSYM'03 Proceedings of the 12th conference on USENIX Security Symposium - Volume 12
Extended weighted pushdown systems

CAV'05 Proceedings of the 17th international conference on Computer Aided Verification

Thorough static analysis of device drivers

Proceedings of the 1st ACM SIGOPS/EuroSys European Conference on Computer Systems 2006
Stack bounds analysis for microcontroller assembly code

WESS '09 Proceedings of the 4th Workshop on Embedded Systems Security
Model checking of software for microcontrollers

ACM Transactions on Embedded Computing Systems (TECS)
WYSINWYX: What you see is not what you eXecute

ACM Transactions on Programming Languages and Systems (TOPLAS)
Program analysis using weighted pushdown systems

FSTTCS'07 Proceedings of the 27th international conference on Foundations of software technology and theoretical computer science
Analyzing stripped device-driver executables

TACAS'08/ETAPS'08 Proceedings of the Theory and practice of software, 14th international conference on Tools and algorithms for the construction and analysis of systems
Analysis of low-level code using cooperating decompilers

SAS'06 Proceedings of the 13th international conference on Static Analysis
Model-checking in-lined reference monitors

VMCAI'10 Proceedings of the 11th international conference on Verification, Model Checking, and Abstract Interpretation
There's plenty of room at the bottom: analyzing and verifying machine code

CAV'10 Proceedings of the 22nd international conference on Computer Aided Verification
Directed proof generation for machine code

CAV'10 Proceedings of the 22nd international conference on Computer Aided Verification
Path optimization in programs and its application to debugging

ESOP'06 Proceedings of the 15th European conference on Programming Languages and Systems
Pushdown model checking for malware detection

TACAS'12 Proceedings of the 18th international conference on Tools and Algorithms for the Construction and Analysis of Systems
Abstract interpretation of microcontroller code: Intervals meet congruences

Science of Computer Programming
PoMMaDe: pushdown model-checking for malware detection

Proceedings of the 2013 9th Joint Meeting on Foundations of Software Engineering

Quantified Score

Hi-index	0.00

Visualization

Abstract

This paper presents a toolset for model checking x86 executables. The members of the toolset are CodeSurfer/x86, WPDS++, and the Path Inspector. CodeSurfer/x86 is used to extract a model from an executable in the form of a weighted pushdown system. WPDS++ is a library for answering generalized reachability queries on weighted pushdown systems. The Path Inspector is a software model checker built on top of CodeSurfer and WPDS++ that supports safety queries about the program's possible control configurations.