Research on Fuzz Testing Framework based on Concolic Execution

Abstract

Vulnerability discovery technology is a significant aspect of the current. The work of this paper is to design and realize a fuzz framework based on concolic execution using C++. This framework is composed of instrumentation module, path constraint generation module and solver module. To improve the efficiency, the traditional technology method was optimized. It avoids the problem of path explosion that when an external call occurs. The experimental results show that our framework can trigger vulnerabilities successfully and expand code coverage.