Publications by Vitaly Chipounov

Discover deeper bugs with dynamic symbolic execution and coverage-based fuzz testing

Vitaly Chipounov, George Candea, Bin Zhang, Chao Feng

Coverage-based fuzz testing and dynamic symbolic execution are both popular program testing techniques. However, on their own, both techniques suffer from scalability problems when considering the complexity of modern software. Hybrid testing methods attem ...

INST ENGINEERING TECHNOLOGY-IET2018

S²E: A Platform for In-Vivo Multi-Path Analysis of Software Systems

Vitaly Chipounov

EPFL2014

Lightweight Snapshots and System-level Backtracking

Vitaly Chipounov, George Candea, Edouard Bugnion

We propose a new system-level abstraction, the lightweight immutable execution snapshot, which combines the immutable characteristics of checkpoints with the direct integration into the virtual memory subsystem of standard mutable address spaces. The abstr ...

USENIX2013

System and method for in-vivo multi-path analysis of binary software

Vitaly Chipounov, George Candea, Volodymyr Kuznetsov

A system and method for in-vivo multi-path analysis and testing of binary software including binary device drivers is disclosed. The system and method may be used to test a binary software system and may comprise a virtual machine, a symbolic execution eng ...

2012

The S2E Platform: Design, Implementation, and Applications

Vitaly Chipounov, George Candea, Volodymyr Kuznetsov

This article presents S2E, a platform for analyzing the properties and behavior of software systems, along with its use in developing tools for comprehensive performance profiling, reverse engineering of proprietary software, and automated testing of kerne ...

2012

S2E: A Platform for In-Vivo Multi-Path Analysis of Software Systems

Vitaly Chipounov, George Candea, Volodymyr Kuznetsov

This paper presents S2E, a platform for analyzing the properties and behavior of software systems. We demonstrate S2E's use in developing practical tools for comprehensive performance profiling, reverse engineering of proprietary software, and bug finding ...

2011

Enabling Sophisticated Analysis of x86 Binaries with RevGen

Vitaly Chipounov, George Candea

Current state-of-the-art static analysis tools for binary software operate on ad-hoc intermediate representations (IR) of the machine code. Therefore, even though IRs facilitate program analysis by abstracting away the source language, it is hard to reuse ...

2011

Reverse Engineering of Binary Device Drivers with RevNIC

Vitaly Chipounov, George Candea

This paper presents a technique that helps automate the reverse engineering of device drivers. It takes a closed-source binary driver, automatically reverse engineers the driver’s logic, and synthesizes new device driver code that implements the exact same ...

2010

Selective Symbolic Execution

Vitaly Chipounov, George Candea, Cristian Zamfir

Symbolic execution is a powerful technique for analyzing program behavior, finding bugs, and generating tests, but suffers from severely limited scalability: the largest programs that can be symbolically executed today are on the order of thousands of line ...

2009

Reverse-Engineering Drivers for Safety and Portability

Vitaly Chipounov, George Candea

Device drivers today lack two important properties: guaranteed safety and cross-platform portability. We present an approach to incrementally achieving these properties in drivers, without requiring any changes in the drivers or operating system kernels. W ...

2008