@inproceedings{e3ba62c0f37f4b55a523a592445e531d,
title = "CONVUL: An effective tool for detecting concurrency vulnerabilities",
abstract = "Concurrency vulnerabilities are extremely harmful and can be frequently exploited to launch severe attacks. Due to the non-determinism of multithreaded executions, it is very difficult to detect them. Recently, data race detectors and techniques based on maximal casual model have been applied to detect concurrency vulnerabilities. However, the former are ineffective and the latter report many false negatives. In this paper, we present CONVUL, an effective tool for concurrency vulnerability detection. CONVUL is based on exchangeable events, and adopts novel algorithms to detect three major kinds of concurrency vulnerabilities. In our experiments, CONVUL detected 9 of 10 known vulnerabilities, while other tools only detected at most 2 out of these 10 vulnerabilities. The 10 vulnerabilities are available at https://github.com/mryancai/ConVul.",
keywords = "Concurrency, Vulnerabilities",
author = "Ruijie Meng and Biyun Zhu and Hao Yun and Haicheng Li and Yan Cai and Zijiang Yang",
note = "Publisher Copyright: {\textcopyright} 2019 IEEE.; 34th IEEE/ACM International Conference on Automated Software Engineering, ASE 2019 ; Conference date: 10-11-2019 Through 15-11-2019",
year = "2019",
month = nov,
doi = "10.1109/ASE.2019.00125",
language = "英语",
series = "Proceedings - 2019 34th IEEE/ACM International Conference on Automated Software Engineering, ASE 2019",
publisher = "Institute of Electrical and Electronics Engineers Inc.",
pages = "1154--1157",
booktitle = "Proceedings - 2019 34th IEEE/ACM International Conference on Automated Software Engineering, ASE 2019",
}