Professor Yao Guo's team at the Operating System Laboratory of School of Computer Science at Peking University has conducted a series of in-depth research in the field of ubiquitous software security analysis in recent years, focusing on static symbolic execution and other directions. The latest researchwere published as a paper titled "Eunomia: Enabling User-Specified Fine-Grained Search in Symbolically Executing WebAssembly Binaries" at the 2023 ACM International Symposium on Software Testing and Analysis, ACM ISSTA 2023 , and won the ACM SIGSOFT Distinguished Paper Award at the conference.
Figure 1 ACM SIGSOFT Outstanding Paper Award Certificate
Static symbolic execution technology is crucial in the field of program analysis, and related analysis and optimization methods have received continuous attention in academia and industry. The WebAssembly language is a new intermediate language paradigm widely used in the field of ubiquitous computing. It can provide a unified ubiquitous application execution environment for C/C++, Go and other languages. The research team designed a scripting language based on the characteristics of the WebAssembly language, which allows users to formally introduce prior knowledge into the program under test. Through the "interval-based path search algorithm" proposed and implemented by the author and the symbolic execution engine for the WebAssembly language, compared with the current cutting-edge work, this work can improve the efficiency of static symbolic execution analysis for the WebAssembly language by one to two orders of magnitude. , successfully discovered multiple 0-Day vulnerabilities in practical applications and systems, which proved the effectiveness of the work and pointed out a new research direction for subsequent work.
Figure 2 The framework and workflow diagram
ISSTA is one of the most important academic conferences in the field of international software testing and analysis, and is also a Class A academic conference recommended by the China Computer Federation. The 32nd ACM International Conference on Software Testing and Analysis (ISSTA 2023) will be held in Seattle, Washington, USA from July 17 to 21, 2023. The ACM SIGSOFT Outstanding Paper Award is a paper award established by ACM SIGSOFT to reward no more than 10% of outstanding papers at its conferences. The first author of the paper is He Ningyu, a 2019 doctoral student in the School of Computer Science (supervisor is Professor Yao Guo). The authors of the paper also include Assistant Professor Ding Li, Professor Xiangqun Chen, and researchers from Peking University, Huazhong University of Science and Technology, Beijing University of Posts and Telecommunications, Baidu and Huawei personnel. The research of this award-winning paper was supported by the National Key R&D Program, the Natural Science Foundation and the Huawei Research Fund.
Figure 3 The first author, Ningyu He, a 2019 PhD student in the School of Computer Science, gave an oral report at the ISSTA conference.
