Fuzzing: a survey for roadmap
Fuzz testing (fuzzing) has witnessed its prosperity in detecting security flaws recently. It
generates a large number of test cases and monitors the executions for defects. Fuzzing has …
generates a large number of test cases and monitors the executions for defects. Fuzzing has …
Fuzzbench: an open fuzzer benchmarking platform and service
Fuzzing is a key tool used to reduce bugs in production software. At Google, fuzzing has
uncovered tens of thousands of bugs. Fuzzing is also a popular subject of academic …
uncovered tens of thousands of bugs. Fuzzing is also a popular subject of academic …
Sok: Prudent evaluation practices for fuzzing
Fuzzing has proven to be a highly effective approach to uncover software bugs over the past
decade. After AFL popularized the groundbreaking concept of lightweight coverage …
decade. After AFL popularized the groundbreaking concept of lightweight coverage …
Magma: A ground-truth fuzzing benchmark
High scalability and low running costs have made fuzz testing the de facto standard for
discovering software bugs. Fuzzing techniques are constantly being improved in a race to …
discovering software bugs. Fuzzing techniques are constantly being improved in a race to …
Augmenting greybox fuzzing with generative ai
Real-world programs expecting structured inputs often has a format-parsing stage gating the
deeper program space. Neither a mutation-based approach nor a generative approach can …
deeper program space. Neither a mutation-based approach nor a generative approach can …
A systematic review of fuzzing
Fuzzing is an important technique in software and security testing that involves continuously
generating a large number of test cases against target programs to discover unexpected …
generating a large number of test cases against target programs to discover unexpected …
A large-scale empirical study on the vulnerability of deployed IoT devices
The Internet of Things (IoT) has become ubiquitous and greatly affected peoples' daily lives.
With the increasing development of IoT devices, the corresponding security issues are …
With the increasing development of IoT devices, the corresponding security issues are …
{FuzzJIT}:{Oracle-Enhanced} Fuzzing for {JavaScript} Engine {JIT} Compiler
We present a novel fuzzing technique, FuzzJIT, for exposing JIT compiler bugs in JavaScript
engines, based on our insight that JIT compilers shall only speed up the execution but never …
engines, based on our insight that JIT compilers shall only speed up the execution but never …
Critical code guided directed greybox fuzzing for commits
Newly submitted commits are prone to introducing vulnerabilities into programs. As a
promising countermeasure, directed greybox fuzzers can be employed to test commit …
promising countermeasure, directed greybox fuzzers can be employed to test commit …
[PDF][PDF] EMS: History-Driven Mutation for Coverage-based Fuzzing.
Mutation-based fuzzing is one of the most popular approaches to discover vulnerabilities in
a program. To alleviate the inefficiency of mutation-based fuzzing incurred by high …
a program. To alleviate the inefficiency of mutation-based fuzzing incurred by high …