Fuzzing: a survey for roadmap

X Zhu, S Wen, S Camtepe, Y Xiang - ACM Computing Surveys (CSUR), 2022 - dl.acm.org
Fuzz testing (fuzzing) has witnessed its prosperity in detecting security flaws recently. It
generates a large number of test cases and monitors the executions for defects. Fuzzing has …

Magma: A ground-truth fuzzing benchmark

A Hazimeh, A Herrera, M Payer - … of the ACM on Measurement and …, 2020 - dl.acm.org
High scalability and low running costs have made fuzz testing the de facto standard for
discovering software bugs. Fuzzing techniques are constantly being improved in a race to …

Seed selection for successful fuzzing

A Herrera, H Gunadi, S Magrath, M Norrish… - Proceedings of the 30th …, 2021 - dl.acm.org
Mutation-based greybox fuzzing---unquestionably the most widely-used fuzzing technique---
relies on a set of non-crashing seed inputs (a corpus) to bootstrap the bug-finding process …

Nyx-net: network fuzzing with incremental snapshots

S Schumilo, C Aschermann, A Jemmett… - Proceedings of the …, 2022 - dl.acm.org
Coverage-guided fuzz testing (" fuzzing") has become mainstream and we have observed
lots of progress in this research area recently. However, it is still challenging to efficiently test …

Can large language models write good property-based tests?

V Vikram, C Lemieux, R Padhye - arXiv preprint arXiv:2307.04346, 2023 - arxiv.org
Property-based testing (PBT), while an established technique in the software testing
research community, is still relatively underused in real-world software. Pain points in writing …

Rudra: finding memory safety bugs in rust at the ecosystem scale

Y Bae, Y Kim, A Askar, J Lim, T Kim - Proceedings of the ACM SIGOPS …, 2021 - dl.acm.org
Rust is a promising system programming language that guarantees memory safety at
compile time. To support diverse requirements for system software such as accessing low …

Diane: Identifying fuzzing triggers in apps to generate under-constrained inputs for iot devices

N Redini, A Continella, D Das… - … IEEE Symposium on …, 2021 - ieeexplore.ieee.org
Internet of Things (IoT) devices have rooted themselves in the everyday life of billions of
people. Thus, researchers have applied automated bug finding techniques to improve their …

Confuzzius: A data dependency-aware hybrid fuzzer for smart contracts

CF Torres, AK Iannillo, A Gervais… - 2021 IEEE European …, 2021 - ieeexplore.ieee.org
Smart contracts are Turing-complete programs that are executed across a blockchain.
Unlike traditional programs, once deployed, they cannot be modified. As smart contracts …

[PDF][PDF] Winnie: Fuzzing windows applications with harness synthesis and fast cloning

J Jung, S Tong, H Hu, J Lim, Y Jin, T Kim - Proceedings of the 2021 …, 2021 - par.nsf.gov
Fuzzing is an emerging technique to automatically validate programs and uncover bugs. It
has been widely used to test many programs and has found thousands of security …

Understanding large language model based fuzz driver generation

C Zhang, M Bai, Y Zheng, Y Li, X Xie, Y Li… - arXiv preprint arXiv …, 2023 - arxiv.org
Fuzz drivers are a necessary component of API fuzzing. However, automatically generating
correct and robust fuzz drivers is a difficult task. Compared to existing approaches, LLM …