Faultprog: Testing the Accuracy of Binary-Level Software Fault Injection

作者：Cotroneo, Domenico^*; Lanzaro, Anna; Natella, Roberto

来源：IEEE Transactions on Dependable and Secure Computing, 2018, 15(1): 40-53.

DOI：10.1109/TDSC.2016.2522968

• Off-The-shelf software
• dependability benchmarking
• fault injection
• software mutation
• random testing

Off-The-Shelf (OTS) software components are the cornerstone of modern systems, including safety-critical ones. However, the dependability of OTS components is uncertain due to the lack of source code, design artifacts and test cases, since only their binary code is supplied. Fault injection in components' binary code is a solution to understand the risks posed by buggy OTS components. In this paper, we consider the problem of the accurate mutation of binary code for fault injection purposes. Fault injection emulates bugs in high-level programming constructs (assignments, expressions, function calls, ...) by mutating their translation in binary code. However, the semantic gap between the source code and its binary translation often leads to inaccurate mutations. We propose Faultprog, a systematic approach for testing the accuracy of binary mutation tools. Faultprog automatically generates synthetic programs using a stochastic grammar, and mutates both their binary code with the tool under test, and their source code as reference for comparisons. Moreover, we present a case study on a commercial binary mutation tool, where Faultprog was adopted to identify code patterns and compiler optimizations that affect its mutation accuracy.

• 出版日期2018-2