A formally verified program is only as correct as its specifications (SPEC). But how to assure
that the SPEC is complete and free of loopholes? This paper presents Fast, short for Fuzzing …

Programs that take highly-structured files as inputs normally process inputs in stages: syntax
parsing, semantic checking, and application execution. Deep bugs are often hidden in the …

Fuzz testing is an effective and scalable technique to perform software security
assessments. Yet, contemporary fuzzers fall short of thoroughly testing applications with a …

Fuzz testing has been proved its effectiveness in discovering software vulnerabilities.
Empowered its randomness nature along with a coverage-guiding feature, fuzzing has been …

Fuzz testing is an active area of research with proposed improvements published at a rapid
pace. Such proposals are assessed empirically: Can they be shown to perform better than …

Fuzzing is arguably the most practical approach for detecting security bugs in software, but a
non-trivial extent of efforts is required for its adoption. To be effective, high-quality fuzz …

Recent advances in fuzz testing have introduced several forms of feedback mechanisms,
motivated by the fact that for a large range of programs and libraries, edgecoverage alone is …

Mutation-based fuzzing is a popular and widely employed black-box testing technique for
finding security and robustness bugs in software. It owes much of its success to its simplicity; …

As an improvement on traditional random fuzzing, directed fuzzing utilizes dynamic taint
analysis to locate regions of seed inputs which can influence security-sensitive program …

Fuzz testing has proven successful in finding security vulnerabilities in large programs.
However, traditional fuzz testing tools have a well-known common drawback: they are …