Full metadata record
DC Field | Value | Language |
---|---|---|
dc.contributor.author | 黃世昆 | en_US |
dc.contributor.author | HUANG SHIH-KUN | en_US |
dc.date.accessioned | 2014-12-13T10:44:08Z | - |
dc.date.available | 2014-12-13T10:44:08Z | - |
dc.date.issued | 2010 | en_US |
dc.identifier.govdoc | NSC99-2221-E009-120 | zh_TW |
dc.identifier.uri | http://hdl.handle.net/11536/99894 | - |
dc.identifier.uri | https://www.grb.gov.tw/search/planDetail?id=2109535&docId=336838 | en_US |
dc.description.abstract | 非經授權之用戶必須有正當授權方能執行之程式區域,我們稱為「程式禁區」。此計畫 將運用完全覆蓋測試方法,產生合適之輸入資料、不須授權資料而能進入程式禁區, 以驗證此系統程式是否存在可能之安全缺陷。若要進入程式禁區,我們必須設計一個 完整框架,整合程式錯誤偵測、輸入資料污染追蹤、與擬真執行、及高階性質驗證。 若程式遭致錯誤,特別是遇到控制資料被破壞,則執行狀態將進入一個被污染而不穩 定的情況。根據此,我們將測試此控制資料能否被操控,成為污染可操控性。此計畫 將產生測試資料,以驗證能否進動進入程式禁區。 | zh_TW |
dc.description.abstract | If unauthorized users cannot execute code needing normal authorization, we mean this code section to be a forbidden area. We want to explore if the full path coverage tester can generate suitable input without authorization to enter a forbidden area of a software system, especially for mobile platforms. To enter the forbidden area (FA), we will design a framework, with components to integrate failure detector, taint tracker, Concolic tester, and a high level property checker. If we encounter a software failure, especially, with a corrupted control and data state, the execution will be brought into a fuzz state by some kind of tainted input. Based on the uncontrolled input, we want to test if they are controllable tainted input, called their taintedness. The project will generate input to enter FA automatically, and evaluated with several benchmark programs, not currently with plausible input by fuzzers like zzuf and catchconv. | en_US |
dc.description.sponsorship | 行政院國家科學委員會 | zh_TW |
dc.language.iso | zh_TW | en_US |
dc.subject | 軟體測試 | zh_TW |
dc.subject | 程式安全 | zh_TW |
dc.subject | 攻擊產生器 | zh_TW |
dc.subject | 符號運算 | zh_TW |
dc.subject | 零日攻擊 | zh_TW |
dc.subject | Software Testing | en_US |
dc.subject | Secure Programming | en_US |
dc.subject | Exploit Generator | en_US |
dc.subject | Symbolic Execution | en_US |
dc.subject | Zero-Day Attacks | en_US |
dc.title | 操控程式輸入測試以自動產生系統攻擊資料 | zh_TW |
dc.title | Controllable Taintedness for Automated Exploit Generations | en_US |
dc.type | Plan | en_US |
dc.contributor.department | 國立交通大學資訊工程學系(所) | zh_TW |
Appears in Collections: | Research Plans |