Fuzz testing has enjoyed great success at discovering security critical bugs in real software.
Recently, researchers have devoted significant effort to devising new fuzzing techniques …

With a growing number of embedded devices that create, transform, and send data
autonomously at its core, the Internet of Things (IoT) is a reality in different sectors, such as …

Smart contracts, programs running on blockchain systems, leverage diverse decentralized
applications (DApps). Unfortunately, well-known smart contract platforms, Ethereum for …

Industrial Control Systems (ICS) have seen a rapid proliferation in the last decade amplified
by the advent of the 4th Industrial Revolution. At the same time, several notable …

Existing symbolic execution typically assumes the analyzer can control the I/O environment
and/or access the library code, which, however, is not the case when programs run on a …

Concretization is an effective weapon in the armory of symbolic execution engines.
However, concretization can lead to loss in coverage, path divergence, and generation of …

Recently, software testing has become a significant component of information security. The
most reliable technique for automated software testing is a fuzzing tool that feeds programs …

Fuzzing techniques that can automatically detect software vulnerabilities are used widely
today. However, attackers also abuse these fuzzing techniques to find software …

Current state-of-the-art automated fuzzing approaches cannot explore deep program-states
without human assistance. Recently, Ijon allowed humans to provide code-annotations on …

Symbolic execution is a powerful program analysis technique. External environment
construction and internal path explosion are two long-standing problems which may affect …