Conference Proceedings
Legion: Best-first concolic testing (competition contribution)
D Liu, G Ernst, T Murray, BIP Rubinstein
23rd International Conference, FASE 2020, Held as Part of the European Joint Conferences on Theory and Practice of Software, ETAPS 2020, Dublin, Ireland, April 25–30, 2020, Proceedings | Springer | Published : 2020
Open access
Abstract
Legion is a grey-box coverage-based concolic tool that aims to balance the complementary nature of fuzzing and symbolic execution to achieve the best of both worlds. It proposes a variation of Monte Carlo tree search (MCTS) that formulates program exploration as sequential decision-making under uncertainty guided by the best-first search strategy. It relies on approximate path-preserving fuzzing, a novel instance of constrained random testing, which quickly generates many diverse inputs that likely target program parts of interest. In Test-Comp 2020 [1], the prototype performed within 90% of the best score in 9 of 22 categories.
Grants
Funding Acknowledgements
This research was supported by Data61 under the Defence Science and Technology Group's Next Generation Technologies Program.