2000 character limit reached
Greybox fuzzing time-intensive programs
Published 28 Nov 2023 in cs.SE | (2311.17200v1)
Abstract: We examine (directed) greybox fuzzing from a geometrical perspective, viewing dissimilarities on inputs and on control flow graphs (with dynamical statistics) as primitive objects of interest. We prototype and evaluate GoExploreFuzz, a greybox fuzzer for time-intensive programs that incorporates this perspective. The results indicate useful capabilities for greybox fuzzing that have hitherto been underutilized, notably quantifying the diversity of paths and autonomously tuning the "bandwidth" of mutations.
- 2020. libFuzzer. https://llvm.org/docs/LibFuzzer.html.
- 2023. FuzzTest. https://github.com/google/fuzztest.
- 2023. goExploreFuzz. https://github.com/SteveHuntsmanSTR/GoExploreFuzz.
- Stateful greybox fuzzing. In USENIX Security Symposium. 3255–3272.
- Boosting fuzzer efficiency: an information theoretic perspective. In ACM Joint Meeting on European Software Engineering Conference and Symposium on the Foundations of Software Engineering. 678–689.
- Directed greybox fuzzing. In ACM SIGSAC Conference on Computer and Communications Security. 2329–2344.
- Coverage-based greybox fuzzing as Markov chain. In ACM SIGSAC Conference on Computer and Communications Security. 1032–1043.
- A metric on directed graphs and Markov chains based on hitting probabilities. SIAM Journal on Mathematics of Data Science 3, 2 (2021), 467–493.
- First return, then explore. Nature 590, 7847 (2021), 580–586.
- {{\{{AFL++}}\}}: Combining incremental steps of fuzzing research. In USENIX Workshop on Offensive Technologies.
- Steve Huntsman. 2023. Quality-diversity in dissimilarity spaces. In Genetic and Evolutionary Computation Conference. 1009–1018.
- Tom Leinster. 2021. Entropy and Diversity: The Axiomatic Approach. Cambridge University Press.
- Tom Leinster and Mark W Meckes. 2016. Maximizing diversity in biology and beyond. Entropy 18, 3 (2016), 88.
- The art, science, and engineering of fuzzing: A survey. IEEE Transactions on Software Engineering 47, 11 (2019), 2312–2331.
- Revisiting neural program smoothing for fuzzing. In ACM Joint European Software Engineering Conference and Symposium on the Foundations of Software Engineering.
- GAIT: A geometric approach to information theory. In International Conference on Artificial Intelligence and Statistics. PMLR, 2601–2611.
- DiPri: distance-based seed prioritization for greybox fuzzing (Registered Report). In International Fuzzing Workshop. 21–30.
- MC2: rigorous and efficient directed greybox fuzzing. In ACM SIGSAC Conference on Computer and Communications Security. 2595–2609.
- A new notion of effective resistance for directed graphs—Part I: Definition and properties. IEEE Trans. Automat. Control 61, 7 (2015), 1727–1736.
- The Fuzzing Book. https://www.fuzzingbook.org.
- Fubo Zhang and Erik H D’Hollander. 2004. Using hammock graphs to structure programs. IEEE Transactions on Software Engineering 30, 4 (2004), 231–245.
- Fuzzing: a survey for roadmap. ACM Computing Surveys (CSUR) (2022).
Paper Prompts
Sign up for free to create and run prompts on this paper using GPT-5.
Top Community Prompts
Collections
Sign up for free to add this paper to one or more collections.