LOC-Based Instruction Selection for Statistical Root Cause Analysis
摘要
Root-Cause Analysis (RCA) is crucial for finding software security flaws from fuzzing results. However, automating this process is considered challenging. In particular, it is well known that statistical RCA techniques are quite slow, frequently requiring hours to thoroughly examine a crash. In this paper, we propose a LOC-based instruction selection method for statistical root cause analysis. Our method improves both the effectiveness and the efficiency of AURORA, a novel binary-only method for automated RCA. LOC-based outperforms AURORA on most of the targets. Especially, our LOC-based method is much faster and more effective than AURORA on all complex, time-consuming targets.