Reduce dependence on application-externalized behavior

Establish a system-call feedback mechanism for web fuzzing that remains effective when application control flow or state transitions are not exposed through monitored file paths or recognizable SQL statements.

Background

The most effective TraceLib configuration records system calls carrying monitored file paths or recognized SQL statements. Behavior processed entirely in application memory may not cross a system-call boundary and therefore cannot be directly observed by either TraceLib configuration. The paper reports substantial variation in feedback quality across applications and identifies this dependence on externally observable behavior as an unresolved limitation.

References

Open problems include the restriction to one active request at a time, dependence on application externalization, and reduced effectiveness on encrypted database connections.

— TraceLib: System-Call Bitmap Feedback Mechanism for Language-Agnostic Web Fuzzing  (2609.34778 - Dharmaadi et al., 28 Sep 2026) in Abstract; Section ‘Limitations’, subsection ‘Dependence on Application Externalization’