on November 26, 2015 at 2:00 pm
Mining Sandboxes
Modern test generation techniques allow to generate as many executions as needed; combined with dynamic analysis, they allow for understanding program behavior in situations where static analysis is challenged or impossible. However, all these dynamic techniques would still suffer from the incompleteness of testing: if some behavior has not been observed so far, there is no guarantee that it may not occur in the future. In this talk, I introduce a method called Test Complement Exclusion that combines test generation and sandboxing to provide such a guarantee. Test Complement Exclusion will havesignificant impact in the security domain, as it effectively detects and protects against unexpected changes of program behavior; however, guaranteeswould also stengthen findings in dynamic software comprehension. First experiments on real-world Android programs demonstrate the feasibility of the approach.
More...Ecole Centrale, Amphi Goubet cité scientifique à Villeneuve d’Ascq
français
English