【Author】
Mossberg, Mark; Manzano, Felipe; Hennenfent, Eric; Groce, Alex; Grieco, Gustavo; Feist, Josselin; Brunson, Trent; Dinaburg, Artem
【Source】34TH IEEE/ACM INTERNATIONAL CONFERENCE ON AUTOMATED SOFTWARE ENGINEERING (ASE 2019)
【Abstract】An effective way to maximize code coverage in software tests is through dynamic symbolic execution a technique that uses constraint solving to systematically explore a program's state space. We introduce an open-source dynamic symbolic execution framework called Manticore for analyzing binaries and Ethereum smart contracts. Manticore's flexible architecture allows it to support both traditional and exotic execution environments, and its API allows users to customize their analysis. Here, we discuss Manticore's architecture and demonstrate the capabilities we have used to find bugs and verify the correctness of code for our commercial clients.
【标题】Manticore:一个用户友好的二进制和智能合约的符号执行框架
【摘要】在软件测试中最大化代码覆盖率的有效方法是通过动态符号执行，这是一种使用约束求解来系统地探索程序状态空间的技术。我们引入了一个名为Manticore的开源动态符号执行框架，用于分析二进制文件和以太坊智能合约。Manticore灵活的架构允许它支持传统和外来的执行环境，它的API允许用户定制他们的分析。在这里，我们将讨论Manticore的架构，并演示我们用于为商业客户查找bug和验证代码正确性的功能。
评论