Fuzzing: a survey for roadmap

X Zhu, S Wen, S Camtepe, Y Xiang - ACM Computing Surveys (CSUR), 2022 - dl.acm.org
Fuzz testing (fuzzing) has witnessed its prosperity in detecting security flaws recently. It
generates a large number of test cases and monitors the executions for defects. Fuzzing has …

Fuzzbench: an open fuzzer benchmarking platform and service

J Metzman, L Szekeres, L Simon, R Sprabery… - Proceedings of the 29th …, 2021 - dl.acm.org
Fuzzing is a key tool used to reduce bugs in production software. At Google, fuzzing has
uncovered tens of thousands of bugs. Fuzzing is also a popular subject of academic …

Sok: Prudent evaluation practices for fuzzing

M Schloegel, N Bars, N Schiller… - … IEEE Symposium on …, 2024 - ieeexplore.ieee.org
Fuzzing has proven to be a highly effective approach to uncover software bugs over the past
decade. After AFL popularized the groundbreaking concept of lightweight coverage …

Magma: A ground-truth fuzzing benchmark

A Hazimeh, A Herrera, M Payer - … of the ACM on Measurement and …, 2020 - dl.acm.org
High scalability and low running costs have made fuzz testing the de facto standard for
discovering software bugs. Fuzzing techniques are constantly being improved in a race to …

Augmenting greybox fuzzing with generative ai

J Hu, Q Zhang, H Yin - arXiv preprint arXiv:2306.06782, 2023 - arxiv.org
Real-world programs expecting structured inputs often has a format-parsing stage gating the
deeper program space. Neither a mutation-based approach nor a generative approach can …

A systematic review of fuzzing

X Zhao, H Qu, J Xu, X Li, W Lv, GG Wang - Soft Computing, 2024 - Springer
Fuzzing is an important technique in software and security testing that involves continuously
generating a large number of test cases against target programs to discover unexpected …

A large-scale empirical study on the vulnerability of deployed IoT devices

B Zhao, S Ji, WH Lee, C Lin, H Weng… - … on Dependable and …, 2020 - ieeexplore.ieee.org
The Internet of Things (IoT) has become ubiquitous and greatly affected peoples' daily lives.
With the increasing development of IoT devices, the corresponding security issues are …

{FuzzJIT}:{Oracle-Enhanced} Fuzzing for {JavaScript} Engine {JIT} Compiler

J Wang, Z Zhang, S Liu, X Du, J Chen - 32nd USENIX Security …, 2023 - usenix.org
We present a novel fuzzing technique, FuzzJIT, for exposing JIT compiler bugs in JavaScript
engines, based on our insight that JIT compilers shall only speed up the execution but never …

Critical code guided directed greybox fuzzing for commits

Y Xiang, X Zhang, P Liu, S Ji, H Liang, J Xu… - 33rd USENIX Security …, 2024 - usenix.org
Newly submitted commits are prone to introducing vulnerabilities into programs. As a
promising countermeasure, directed greybox fuzzers can be employed to test commit …

[PDF][PDF] EMS: History-Driven Mutation for Coverage-based Fuzzing.

C Lyu, S Ji, X Zhang, H Liang, B Zhao, K Lu, R Beyah - NDSS, 2022 - ndss-symposium.org
Mutation-based fuzzing is one of the most popular approaches to discover vulnerabilities in
a program. To alleviate the inefficiency of mutation-based fuzzing incurred by high …