Title:
APPARATUS FOR FUZZING BINDING CODE BY USING TEST CASE AND METHOD THEREFOR
Document Type and Number:
WIPO Patent Application WO/2023/120933
Kind Code:
A1
Abstract:
The present invention relates to an apparatus for fuzzing a binding code by using a test case, and a method therefor. The apparatus for fuzzing a binding code by using a test case, according to the present invention, comprises: an information extraction unit that extracts semantic information by parsing an IDL file and a JavaScript API reference; a first generation unit that generates a test case generator for dynamically generating a binding code in JavaScript by using the extracted semantic information; a second generation unit that generates a binding code by executing the generated test case generator; and an execution unit that detects bugs and vulnerabilities within the binding code by fuzzing the generated binding code.
Inventors:
YI JEONG HYUN (KR)
CHO HAEHYUN (KR)
JEON GEOCHANG (KR)
CHO HAEHYUN (KR)
JEON GEOCHANG (KR)
Application Number:
PCT/KR2022/016414
Publication Date:
June 29, 2023
Filing Date:
October 26, 2022
Export Citation:
Assignee:
FOUNDATION SOONGSIL UNIV INDUSTRY COOPERATION (KR)
International Classes:
G06F11/36; G06F8/30
Foreign References:
| KR20200048033A | 2020-05-08 | |||
| KR20100080044A | 2010-07-08 | |||
| KR20120082295A | 2012-07-23 | |||
| KR20150089536A | 2015-08-05 |
Other References:
DINH SUNG TA, CHO HAEHYUN, MARTIN KYLE, OEST ADAM, ZENG KYLE, KAPRAVELOS ALEXANDROS, AHN GAIL-JOON, BAO TIFFANY, WANG RUOYU, DOUPE: "Favocado: Fuzzing the Binding Code of JavaScript Engines Using Semantically Correct Test Cases", PROCEEDINGS 2021 NETWORK AND DISTRIBUTED SYSTEM SECURITY SYMPOSIUM, INTERNET SOCIETY, RESTON, VA, 25 February 2021 (2021-02-25), Reston, VA, XP093073355, ISBN: 978-1-891562-66-2, DOI: 10.14722/ndss.2021.24224
Attorney, Agent or Firm:
YUN, Kuisang (KR)
Download PDF: