一句话：提出基于可交换事件的并发漏洞检测工具 CONVUL，能有效发现三类并发漏洞。
并发漏洞危害严重且可被利用发起攻击，但多线程执行的不确定性使其难以检测。已有数据竞争检测器效果不佳，基于最大因果模型的技术又存在较多漏报。本文提出并发漏洞检测工具 CONVUL，其核心是基于可交换事件（exchangeable events）并采用新算法检测三类主要并发漏洞。作者在 10 个已知漏洞上评估 CONVUL，并与现有工具比较：CONVUL 检测出其中 9 个，而其他工具最多仅检测出 2 个，表明其能显著提升并发漏洞检测的有效性。
Concurrency vulnerabilities are extremely harmful and can be frequently exploited to launch severe attacks. Due to the non-determinism of multithreaded executions, it is very difficult to detect them. Recently, data race detectors and techniques based on maximal casual model have been applied to detect concurrency vulnerabilities. However, the former are ineffective and the latter report many false negatives. In this paper, we present CONVUL, an effective tool for concurrency vulnerability detection. CONVUL is based on exchangeable events, and adopts novel algorithms to detect three major kinds of concurrency vulnerabilities. In our experiments, CONVUL detected 9 of 10 known vulnerabilities, while other tools only detected at most 2 out of these 10 vulnerabilities. The 10 vulnerabilities are available at https://github.com/mryancai/ConVul.
DOI 原文 ·
@inproceedings{paperbot5191,
title = {CONVUL: An Effective Tool for Detecting Concurrency Vulnerabilities},
author = {Ruijie Meng and Biyun Zhu and Hao Yun and Haicheng Li and Yan Cai and Zijiang Yang},
booktitle = {ASE},
year = {2019},
doi = {10.1109/ase.2019.00125}
}