The patent badge is an abbreviated version of the USPTO patent document. The patent badge does contain a link to the full patent document.

The patent badge is an abbreviated version of the USPTO patent document. The patent badge covers the following: Patent number, Date patent was issued, Date patent was filed, Title of the patent, Applicant, Inventor, Assignee, Attorney firm, Primary examiner, Assistant examiner, CPCs, and Abstract. The patent badge does contain a link to the full patent document (in Adobe Acrobat format, aka pdf). To download or print any patent click here.

Date of Patent:
Dec. 21, 2021

Filed:

Jun. 17, 2019
Applicant:

Baidu Usa Llc, Sunnyvale, CA (US);

Inventors:

Peng Li, Sunnyvale, CA (US);

Yulong Zhang, Sunnyvale, CA (US);

Tao Wei, Sunnyvale, CA (US);

Assignee:

BAIDU USA LLC, Sunnyvale, CA (US);

Attorney:
Primary Examiner:
Int. Cl.
CPC ...
G06F 21/57 (2013.01); G06F 11/36 (2006.01); G06F 8/41 (2018.01);
U.S. Cl.
CPC ...
G06F 21/577 (2013.01); G06F 8/433 (2013.01); G06F 11/3676 (2013.01); G06F 2221/034 (2013.01);
Abstract

According to one embodiment, a system receives an intermediate result generated by a compiler based on source code, where the intermediate result includes one or more vulnerability indicators indicating one or more lines of the source code being potentially vulnerable. The system performs a grey box fuzzing on a first executable code generated from the intermediate result to generate a first set of seed inputs. The system calculates a vulnerability score for each of the seed inputs of the first set based on the vulnerability indicators for the lines of the source code reachable but has not been explored by the grey box fuzzing. The system selects one of the seed inputs in the first set having a highest vulnerability score. The system performs a concolic execution using the selected seed input as priority, the concolic execution being performed on a second executable code generated from the intermediate result.


Find Patent Forward Citations

Loading…