{AFL++}: Combining incremental steps of fuzzing research

A Fioraldi, D Maier, H Eißfeldt, M Heuse - 14th USENIX Workshop on …, 2020 - usenix.org
In this paper, we present AFL++, a community-driven open-source tool that incorporates
state-of-the-art fuzzing research, to make the research comparable, reproducible …

Libafl: A framework to build modular and reusable fuzzers

A Fioraldi, DC Maier, D Zhang, D Balzarotti - Proceedings of the 2022 …, 2022 - dl.acm.org
The release of AFL marked an important milestone in the area of software security testing,
revitalizing fuzzing as a major research topic and spurring a large number of research …

{UNIFUZZ}: A holistic and pragmatic {Metrics-Driven} platform for evaluating fuzzers

Y Li, S Ji, Y Chen, S Liang, WH Lee, Y Chen… - 30th USENIX Security …, 2021 - usenix.org
A flurry of fuzzing tools (fuzzers) have been proposed in the literature, aiming at detecting
software vulnerabilities effectively and efficiently. To date, it is however still challenging to …

{QSYM}: A practical concolic execution engine tailored for hybrid fuzzing

I Yun, S Lee, M Xu, Y Jang, T Kim - 27th USENIX Security Symposium …, 2018 - usenix.org
Recently, hybrid fuzzing has been proposed to address the limitations of fuzzing and
concolic execution by combining both approaches. The hybrid approach has shown its …

Designing new operating primitives to improve fuzzing performance

W Xu, S Kashyap, C Min, T Kim - Proceedings of the 2017 ACM SIGSAC …, 2017 - dl.acm.org
Fuzzing is a software testing technique that finds bugs by repeatedly injecting mutated
inputs to a target program. Known to be a highly practical approach, fuzzing is gaining more …

Breaking through binaries: Compiler-quality instrumentation for better binary-only fuzzing

S Nagy, A Nguyen-Tuong, JD Hiser… - 30th USENIX Security …, 2021 - usenix.org
Coverage-guided fuzzing is one of the most effective software security testing techniques.
Fuzzing takes on one of two forms: compiler-based or binary-only, depending on the …

A systematic review of fuzzing based on machine learning techniques

Y Wang, P Jia, L Liu, C Huang, Z Liu - PloS one, 2020 - journals.plos.org
Security vulnerabilities play a vital role in network security system. Fuzzing technology is
widely used as a vulnerability discovery technology to reduce damage in advance …

{EnFuzz}: Ensemble fuzzing with seed synchronization among diverse fuzzers

Y Chen, Y Jiang, F Ma, J Liang, M Wang… - 28th USENIX Security …, 2019 - usenix.org
Fuzzing is widely used for vulnerability detection. There are various kinds of fuzzers with
different fuzzing strategies, and most of them perform well on their targets. However, in …

{FIXREVERTER}: A Realistic Bug Injection Methodology for Benchmarking Fuzz Testing

Z Zhang, Z Patterson, M Hicks, S Wei - 31st USENIX Security Symposium …, 2022 - usenix.org
Fuzz testing is an active area of research with proposed improvements published at a rapid
pace. Such proposals are assessed empirically: Can they be shown to perform better than …

Magma: A ground-truth fuzzing benchmark

A Hazimeh, A Herrera, M Payer - … of the ACM on Measurement and …, 2020 - dl.acm.org
High scalability and low running costs have made fuzz testing the de facto standard for
discovering software bugs. Fuzzing techniques are constantly being improved in a race to …