一句话:提出 ISLa,一种基于上下文无关文法的声明式规范语言,用于描述结构化系统输入的上下文相关约束,从而生成语义有效的输入。
基于文法的模糊测试器能高效产生语法有效的系统输入,但程序常会拒绝语义无效的输入。本文提出 ISLa,一种基于上下文无关文法的声明式规范语言,用于描述结构化系统输入的上下文相关性质。ISLa 可表达诸如“变量必须先定义后使用”“file name 块必须长 100 字节”“所有 CSV 行的列数必须一致”等输入约束,从而帮助生成满足语义约束的有效输入。摘要未报告量化实验评估,仅以示例说明其表达能力。
How can we generate valid system inputs? Grammar-based fuzzers are highly efficient in producing syntactically valid system inputs. However, programs will often reject inputs that are semantically invalid. We introduce ISLa, a declarative specification language for context-sensitive properties of structured system inputs based on context-free grammars. With ISLa, it is possible to specify input constraints like "a variable has to be defined before it is used," "the 'file name' block must be 100 bytes long," or "the number of columns in all CSV rows must be identical."