BENZENE: A Practical Root Cause Analysis System with an Under-Constrained State Mutation

Younggi Park, Hwiwon Lee, Jinho Jung, Hyungjoon Koo, Huy Kang Kim

IEEE Symposium on Security and Privacy 2024 · Day 2 · Continental Ballroom 4

Software crashes pose a persistent and critical security challenge, frequently signaling underlying vulnerabilities such as memory corruption bugs. The sheer volume of crash reports generated daily – exemplified by Ubuntu's reported millions of error reports – far exceeds the capacity for manual human analysis. This talk, "BENZENE: A Practical Root Cause Analysis System with an Under-Constrained State Mutation," introduces an innovative automated system designed to streamline and enhance the efficiency of root cause analysis for software crashes. Presented by Younggi Park from Korea University, alongside collaborators from Korea University and Sejong University, the research addresses a fundamental bottleneck in modern software security: the ability to quickly and accurately pinpoint the origins of software failures in complex, highly structured programs.

AI review

BENZENE introduces a highly effective, novel approach to automated root cause analysis. Its 'under-constrained state mutation' technique efficiently generates crucial crash-similar but non-crashing behaviors, a significant bottleneck for traditional methods. With 93% accuracy across 60 real-world bugs and an 8x speed improvement, this research delivers substantial practical impact for vulnerability remediation in complex software.

Watch on YouTube