Method for Automatically Detecting Security Vulnerability Based on Hybrid Fuzzing and Apparatus thereof

The present invention provides a method and a system for efficiently searching a security vulnerability of a program. According to an embodiment of the present invention, the system for searching a security vulnerability comprises: a vulnerability searching module obtaining crash information; a bina...

Full description

Saved in:
Bibliographic Details
Main Authors KIM HWAN KUK, KIM TAE EUN, NA GEON BAE, YOON SOO JIN, JURN JEE SOO, OH SANG HWAN
Format Patent
LanguageEnglish
Korean
Published 08.10.2018
Subjects
CALCULATING
COMPUTING
COUNTING
ELECTRIC DIGITAL DATA PROCESSING
PHYSICS
Online AccessGet full text

Cover

More Information
Summary:The present invention provides a method and a system for efficiently searching a security vulnerability of a program. According to an embodiment of the present invention, the system for searching a security vulnerability comprises: a vulnerability searching module obtaining crash information; a binary analyzing module determining a priority of binary information and whether a path searching is performed; and a path searching module performing the path searching, and generating a new test case. 프로그램의 보안 취약점을 효율적으로 탐색할 수 있는 방법 및 시스템이 제공 된다. 본 발명의 일 실시예에 따른 보안 취약점 탐색 시스템은 크래시 정보를 획득하는 취약점 탐색 모듈, 바이너리 정보의 우선 순위 및 경로 탐색의 수행 여부를 판단하는 바이너리 분석 모듈 및 경로 탐색을 수행하여 새로운 테스트 케이스를 생성하는 경로 탐색 모듈을 포함한다.
Bibliography:Application Number: KR20170133153