Demystify the fuzzing methods: A comprehensive survey

S Mallissery, YS Wu - ACM Computing Surveys, 2023 - dl.acm.org
Massive software applications possess complex data structures or parse complex data
structures; in such cases, vulnerabilities in the software become inevitable. The …

Gptfuzzer: Red teaming large language models with auto-generated jailbreak prompts

J Yu, X Lin, X Xing - arXiv preprint arXiv:2309.10253, 2023 - arxiv.org
Large language models (LLMs) have recently experienced tremendous popularity and are
widely used from casual conversations to AI-driven programming. However, despite their …

{FloatZone}: Accelerating Memory Error Detection using the Floating Point Unit

F Gorter, E Barberis, R Isemann… - 32nd USENIX Security …, 2023 - usenix.org
Memory sanitizers are powerful tools to detect spatial and temporal memory errors, such as
buffer overflows and use-after-frees. Fuzzers and software testers often rely on these tools to …

[PDF][PDF] Sticky Tags: Efficient and Deterministic Spatial Memory Error Mitigation using Persistent Memory Tags

F Gorter, T Kroes, H Bos… - 2024 IEEE Symposium on …, 2024 - download.vusec.net
Spatial memory errors such as buffer overflows still rank among the top vulnerabilities in
C/C++ programs. Despite much research in the area, the performance overhead of (even …

FCEVAL: An effective and quantitative platform for evaluating fuzzer combinations fairly and easily

X Zhao, C Yang, Z Jia, Y Wang, J Ma - Computers & Security, 2023 - Elsevier
Multiple base fuzzers collaborate as a fuzzer combination. Fuzzer combinations have been
proven to perform more robustly and efficiently when fuzzing complicated real-world …

Greybox Fuzzing for Concurrency Testing

D Wolff, Z Shi, GJ Duck, U Mathur… - Proceedings of the 29th …, 2024 - dl.acm.org
Uncovering bugs in concurrent programs is a challenging problem owing to the
exponentially large search space of thread interleavings. Past approaches towards …

Fully Randomized Pointers

GJ Duck, SD Phaye, RHC Yap, TE Carlson - arXiv preprint arXiv …, 2024 - arxiv.org
Software security continues to be a critical concern for programs implemented in low-level
programming languages such as C and C++. Many defenses have been proposed in the …

Multi-Dimensional and Message-Guided Fuzzing for Robotic Programs in Robot Operating System

JJ Bai, HX Song, SM Hu - Proceedings of the 29th ACM International …, 2024 - dl.acm.org
An increasing number of robotic programs are implemented based on Robot Operating
System (ROS), which provides many practical tools and libraries for robot development. To …

[PDF][PDF] Facilitating Non-Intrusive In-Vivo Firmware Testing with Stateless Instrumentation

J Shi, W Li, W Wang, L Guan - ndss-symposium.org
Although numerous dynamic testing techniques have been developed, they can hardly be
directly applied to firmware of deeply embedded (eg, microcontroller-based) devices due to …