AegisAsync: Symbolic Async-Event Simulation for Risks in Python Asynchronous Programs
[Kryptografia i bezpieczeństwo] Autorzy: Baihong Chen, Wen Li
Security and robustness risks in Python async programs depend on event order, object identity, and execution after exceptions or cancellation. Detecting these risks requires connecting related operations across function calls and tracking their effects along execution paths. We present AegisAsync, a bytecode-based analysis of Python async risks for CPython 3.10-3.14. Its Async Event Transition Graph combines bytecode control flow, resolved calls, async events, and symbolic object relations. Bounded path-local simulation tracks event order and object states and explores cancellation at await suspensions. Six detector plugins evaluate the resulting traces and states to produce candidates with supporting witnesses. On AsyncBench, our benchmark of 180 labeled risks, AegisAsync detects all labeled risks with zero false positives on each of the five versions. Across five path budgets on 2,500…
- Kategoria arxiv
- cs.CR
- Kategoria
- Kryptografia i bezpieczeństwo