Fuzz testing is an indispensable test-generation tool in software security. Fuzz testing uses
automated directed randomness to explore a variety of execution paths in software, trying to …

We define semi-valid input coverage (SVCov), the first coverage criterion for fuzz testing. Our
criterion is applicable whenever the valid inputs can be defined by a finite set of constraints …

Fuzz testing has been successful in finding defects of various software packages. These
defects include file parsing, image processing, Internet browsers, and network protocols …

Any kind of smart testing technique must be very efficient to be competitive with random fuzz
testing. State-of the-art test generators are largely inferior to random testing in real world …

The modern System-on-Chips (SoCs), with numerous complex and heterogeneous
intellectual properties (IPs), and the inclusion of highly-sensitive assets, become the target of …

Coverage-guided fuzz testing has gained prominence as a highly effective method of finding
security vulnerabilities such as buffer overflows in programs that parse binary data …

In software security testing, fuzz testing and symbolic execution are two main testing
techniques. Fuzz testing finds program bugs by executing the target program with random …

Coverage-guided testing has shown to be an effective way to find bugs. If we model
coverage-guided testing as a search problem (ie, finding inputs that can cover more …

There is a growing interest in the computer architecture community to incorporate
heterogeneity and specialization to improve performance. Developers can create …

Coverage-guided fuzz testing (" fuzzing") has become mainstream and we have observed
lots of progress in this research area recently. However, it is still challenging to efficiently test …