一句话:提出 SymFusion 混合插桩,结合编译期插桩的高效与动态二进制翻译的免重编译,用于 concolic execution。
Concolic execution 是可扩展的动态符号执行,近年高度依赖程序插桩来提升可扩展性。插桩可在编译期通过 LLVM pass 插入,代码效率更高,但要求重新编译整个程序,面对第三方组件时往往不可行;也可在执行期借助动态二进制翻译插入,无需重编译,却带来显著更高的运行时间开销。SymFusion 针对这一矛盾提出混合插桩方案,试图融合两类插桩的优势,在避免全量重编译的同时降低动态插桩开销。摘要未报告具体机制、实验设置或定量结果。
Concolic execution is a dynamic twist of symbolic execution designed with scalability in mind. Recent concolic executors heavily rely on program instrumentation to achieve such scalability. The instrumentation code can be added at compilation time (e.g., using an LLVM pass), or directly at execution time with the help of a dynamic binary translator. The former approach results in more efficient code but requires recompilation. Unfortunately, recompiling the entire code of a program is not always feasible or practical (e.g., in presence of third-party components). On the contrary, the latter approach does not require recompilation but incurs significantly higher execution time overhead.