Fuzzers for stateful systems: Survey and Research Directions

C Daniele, SB Andarzian, E Poll - ACM Computing Surveys, 2024 - dl.acm.org
Fuzzing is a very effective testing methodology to find bugs. In a nutshell, a fuzzer sends
many slightly malformed messages to the software under test, hoping for crashes or …

[HTML][HTML] Bridging the Gap: A Survey and Classification of Research-Informed Ethical Hacking Tools

P Modesti, L Golightly, L Holmes, C Opara… - Journal of Cybersecurity …, 2024 - mdpi.com
The majority of Ethical Hacking (EH) tools utilised in penetration testing are developed by
practitioners within the industry or underground communities. Similarly, academic …

SoK: Prudent Evaluation Practices for Fuzzing

M Schloegel, N Bars, N Schiller, L Bernhard… - arXiv preprint arXiv …, 2024 - arxiv.org
Fuzzing has proven to be a highly effective approach to uncover software bugs over the past
decade. After AFL popularized the groundbreaking concept of lightweight coverage …

Battling against Protocol Fuzzing: Protecting Networked Embedded Devices from Dynamic Fuzzers

P Liu, Y Zheng, C Sun, H Li, Z Li, L Sun - ACM Transactions on Software …, 2024 - dl.acm.org
N etworked E mbedded D evices (NEDs) are increasingly targeted by cyberattacks, mainly
due to their widespread use in our daily lives. Vulnerabilities in NEDs are the root causes of …

[PDF][PDF] Chronos: Finding Timeout Bugs in Practical Distributed Systems by Deep-Priority Fuzzing with Transient Delay

Y Chen - 2024 IEEE Symposium on Security and Privacy (SP), 2024 - wingtecher.com
Delays are inevitable in complex distributed environments. Timeout mechanisms are
commonly used to handle unexpected failures in distributed systems. However, incorrect …

A Survey of Protocol Fuzzing

X Zhang, C Zhang, X Li, Z Du, Y Li, Y Zheng… - arXiv preprint arXiv …, 2024 - arxiv.org
Communication protocols form the bedrock of our interconnected world, yet vulnerabilities
within their implementations pose significant security threats. Recent developments have …

When Fuzzing Meets LLMs: Challenges and Opportunities

Y Jiang, J Liang, F Ma, Y Chen, C Zhou… - … Proceedings of the …, 2024 - dl.acm.org
Fuzzing, a widely-used technique for bug detection, has seen advancements through Large
Language Models (LLMs). Despite their potential, LLMs face specific challenges in fuzzing …

A Survey of Network Protocol Fuzzing: Model, Techniques and Directions

S Jiang, Y Zhang, J Li, H Yu, L Luo, G Sun - arXiv preprint arXiv …, 2024 - arxiv.org
As one of the most successful and effective software testing techniques in recent years, fuzz
testing has uncovered numerous bugs and vulnerabilities in modern software, including …

2023 年工业控制系统安全热点回眸

程鹏, 张镇勇, 车欣, 陈积明 - 科技导报, 2024 - kjdb.org
2023 年, 勒索病毒仍然威胁着全球工业控制系统安全, 地缘政治冲突加剧导致工控系统成为敌对
双方网络攻击的重要战场, 供应链攻击再度成为工控系统的软肋. 工控系统安全行业关注度持续 …

Fuzzing for Stateful Protocol Implementations: Are We There Yet?

K Jian, Y Zou, Y Li, J Cao, M Li, J Sun, J Shi… - … on Theoretical Aspects of …, 2024 - Springer
Stateful protocols, such as FTP, SIP, and RTSP, play a significant role in computer systems.
However, their implementation is prone to security vulnerabilities, which have drawn …