一句话：提出 RAProducer，通过 trace 分析在二进制层面高效诊断并复现线程交错导致的数据竞争缺陷。
漏洞发现工具报告了大量缺陷，其中由线程交错引起的数据竞争缺陷难以诊断和复现，主要挑战在于线程交错空间巨大。安全分析场景中，分析人员往往无法获取目标程序源码，也难以理解二进制程序。为此，作者提出 RAProducer，面向二进制程序，通过 trace 分析来高效诊断并复现数据竞争缺陷。该方法旨在在缺少源码的条件下处理线程交错导致的数据竞争，辅助安全分析与缺陷复现。摘要未给出具体实验设置、基准和结果。
A growing number of bugs have been reported by vulnerability discovery solutions. Among them, some bugs are hard to diagnose or reproduce, including data race bugs caused by thread interleavings. Few solutions are able to well address this issue, due to the huge space of interleavings to explore. What’s worse, in security analysis scenarios, analysts usually have no access to the source code of target programs and have troubles in comprehending them.
DOI 原文 ·
@inproceedings{paperbot6677,
title = {RAProducer: efficiently diagnose and reproduce data race bugs for binaries via trace analysis},
author = {Ming Yuan and Yeseop Lee and Chao Zhang and Yun Li and Yan Cai and Bodong Zhao},
booktitle = {ISSTA},
year = {2021},
doi = {10.1145/3460319.3464831}
}