Device drivers are security-critical. In monolithic kernels like Linux, there are hundreds of
thousands of drivers which run in the same privilege as the core kernel. Consequently, a …

Greybox fuzzing is a proven and effective testing method for the detection of security
vulnerabilities and other bugs in modern software systems. Greybox fuzzing can also be …

Grammar-based fuzzing is a technique used to find software vulnerabilities by injecting well-
formed inputs generated following rules that encode application semantics. Most grammar …

Fuzzing is an emerging technique to automatically validate programs and uncover bugs. It
has been widely used to test many programs and has found thousands of security …

Fuzzing network servers is a technical challenge, since the behavior of the target server
depends on its state over a sequence of multiple messages. Existing solutions are costly …

Real-Time Operating System (RTOS) has become the main category of embedded systems.
It is widely used to support tasks requiring real-time response such as printers and switches …

Protocol implementations are essential components in network infrastructures. Flaws hidden
in the implementations can easily render devices vulnerable to adversaries. Therefore …

The popularity of coverage-guided greybox fuzzers has led to a tsunami of security-critical
bugs that developers must prioritize and fix. Knowing the capabilities a bug exposes (eg …

Directed greybox fuzzing is an augmented fuzzing technique intended for the targeted
usages such as crash reproduction and proof-of-concept generation, which gives …

Fuzzing is significantly evolved in analysing native code, but web applications, invariably,
have received limited attention until now. This paper designs, implements and evaluates …