Manticore: A User-Friendly Symbolic Execution Framework for Binaries and Smart Contracts

An effective way to maximize code coverage in software tests is through dynamic symbolic execution-a technique that uses constraint solving to systematically explore a program's state space. We introduce an open-source dynamic symbolic execution framework called Manticore for analyzing binaries...

Ausführliche Beschreibung

Gespeichert in:
Bibliographische Detailangaben
Veröffentlicht in:IEEE/ACM International Conference on Automated Software Engineering : [proceedings] S. 1186 - 1189
Hauptverfasser: Mossberg, Mark, Manzano, Felipe, Hennenfent, Eric, Groce, Alex, Grieco, Gustavo, Feist, Josselin, Brunson, Trent, Dinaburg, Artem
Format: Tagungsbericht
Sprache:Englisch
Veröffentlicht: IEEE 01.11.2019
Schlagworte:
Benchmark testing
Computer architecture
Engines
ethereum
manticore
mcore
smart contract
Smart contracts
symbolic execution
Weapons
ISSN:2643-1572
Online-Zugang:Volltext
Tags: Tag hinzufügen
Keine Tags, Fügen Sie den ersten Tag hinzu!
Beschreibung
Zusammenfassung:An effective way to maximize code coverage in software tests is through dynamic symbolic execution-a technique that uses constraint solving to systematically explore a program's state space. We introduce an open-source dynamic symbolic execution framework called Manticore for analyzing binaries and Ethereum smart contracts. Manticore's flexible architecture allows it to support both traditional and exotic execution environments, and its API allows users to customize their analysis. Here, we discuss Manticore's architecture and demonstrate the capabilities we have used to find bugs and verify the correctness of code for our commercial clients.
ISSN:2643-1572
DOI:10.1109/ASE.2019.00133