The art, science, and engineering of fuzzing: A survey

VJM Manès, HS Han, C Han, SK Cha… - IEEE Transactions …, 2019 - ieeexplore.ieee.org
Among the many software testing techniques available today, fuzzing has remained highly
popular due to its conceptual simplicity, its low barrier to deployment, and its vast amount of …

Fuzzing: State of the art

H Liang, X Pei, X Jia, W Shen… - IEEE Transactions on …, 2018 - ieeexplore.ieee.org
As one of the most popular software testing techniques, fuzzing can find a variety of
weaknesses in a program, such as software bugs and vulnerabilities, by generating …

Razzer: Finding kernel race bugs through fuzzing

DR Jeong, K Kim, B Shivakumar… - 2019 IEEE Symposium …, 2019 - ieeexplore.ieee.org
A data race in a kernel is an important class of bugs, critically impacting the reliability and
security of the associated system. As a result of a race, the kernel may become …

[PDF][PDF] HFL: Hybrid Fuzzing on the Linux Kernel.

K Kim, DR Jeong, CH Kim, Y Jang, I Shin, B Lee - NDSS, 2020 - lifeasageek.github.io
Hybrid fuzzing, combining symbolic execution and fuzzing, is a promising approach for
vulnerability discovery because each approach can complement the other. However, we …

Designing new operating primitives to improve fuzzing performance

W Xu, S Kashyap, C Min, T Kim - Proceedings of the 2017 ACM SIGSAC …, 2017 - dl.acm.org
Fuzzing is a software testing technique that finds bugs by repeatedly injecting mutated
inputs to a target program. Known to be a highly practical approach, fuzzing is gaining more …

{SweynTooth}: unleashing mayhem over Bluetooth low energy

ME Garbelini, C Wang, S Chattopadhyay… - 2020 USENIX Annual …, 2020 - usenix.org
The Bluetooth Low Energy (BLE) is a promising short-range communication technology for
Internet-of-Things (IoT) with reduced energy consumption. Vendors implement BLE …

[PDF][PDF] Winnie: Fuzzing windows applications with harness synthesis and fast cloning

J Jung, S Tong, H Hu, J Lim, Y Jin, T Kim - Proceedings of the 2021 …, 2021 - par.nsf.gov
Fuzzing is an emerging technique to automatically validate programs and uncover bugs. It
has been widely used to test many programs and has found thousands of security …

Agamotto: Accelerating kernel driver fuzzing with lightweight virtual machine checkpoints

D Song, F Hetzelt, J Kim, BB Kang, JP Seifert… - 29th USENIX Security …, 2020 - usenix.org
Kernel-mode drivers are challenging to analyze for vulnerabilities, yet play a critical role in
maintaining the security of OS kernels. Their wide attack surface, exposed via both the …

NTFuzz: Enabling type-aware kernel fuzzing on windows with static binary analysis

J Choi, K Kim, D Lee, SK Cha - 2021 IEEE Symposium on …, 2021 - ieeexplore.ieee.org
Although it is common practice for kernel fuzzers to leverage type information of system
calls, current Windows kernel fuzzers do not follow the practice as most system calls are …

Precise and scalable detection of double-fetch bugs in OS kernels

M Xu, C Qian, K Lu, M Backes… - 2018 IEEE Symposium on …, 2018 - ieeexplore.ieee.org
During system call execution, it is common for operating system kernels to read userspace
memory multiple times (multi-reads). A critical bug may exist if the fetched userspace …