SymFlow: Event-Chain-Aware Symbolic Execution for Serverless Sensitive Data Flow(…)
summary
SymFlow combines static architectural analysis to build an event dependency graph with inter-function event-sensitive symbolic execution that emulates cloud APIs and generates concrete event trains. Implemented and evaluated on CloudBench and 104 AWSomePy apps, it reports 36.6% more sensitive data flows than CloudFlow, increases detection precision by 14.4%, and boosts event-chain coverage by 73.6%, uncovering two previously unknown zero-day vulnerabilities in real applications.
AI-written summary · about
chapters (12)
- 0:00SymFlow introduction
- 1:06Serverless data flow challenges
- 3:58Architecture vs feasibility gap
- 5:43SymFlow workflow overview
- 7:28Building event dependency graph
- 8:12Generating executable event chains
- 9:18Validating flows with symbolic execution
- 11:00Evaluation results
- 13:29Detected vulnerability case study
- 14:55Future work
- 15:38Conclusion
- 16:21Q&A
related talks
14mCloudFlow: Identifying Security-sensitive Data Flows in Serverless
49mRelational Observability for Cloud-Native Security and Data Science
20mDataflow Engines for Executing Cloud Applications: a Maslow's Hammer or Natural Outcome?
50mAutomated Serverless Security Testing: Delivering secure apps continuously
24mObservability across serverless asynchronous managed services
14mAutomated Verification of Idempotence for Stateful Serverless Applications
22mGo Flow Safe
15mSymbolic Value-Flow Static Analysis: Deep, Precise, Complete Modeling of Ethereum Smart Contracts