QSYM - A Practical Concolic Execution Engine Tailored for Hybrid Fuzzing
Explore a Distinguished Paper Award-winning conference talk on QSYM, a practical concolic execution engine designed for hybrid fuzzing. Delve into the limitations of traditional fuzzing and concolic execution methods, and discover how QSYM addresses these issues by combining both approaches. Learn about the key ideas behind QSYM's design, including tight integration of symbolic emulation with native execution, loosened soundness requirements, and performance optimizations. Examine the evaluation results showcasing QSYM's superior performance compared to state-of-the-art fuzzers, including its ability to find previously unknown security bugs in real-world programs. Gain insights into the implementation details, such as direct instruction execution, reduced symbolic execution, and optimistic constraint solving. Understand how QSYM scales to complex software and generates test cases that are challenging for traditional fuzzing methods.