Fuzzing: a survey for roadmap

X Zhu, S Wen, S Camtepe, Y Xiang - ACM Computing Surveys (CSUR), 2022 - dl.acm.org
Fuzz testing (fuzzing) has witnessed its prosperity in detecting security flaws recently. It
generates a large number of test cases and monitors the executions for defects. Fuzzing has …

The art, science, and engineering of fuzzing: A survey

VJM Manès, HS Han, C Han, SK Cha… - IEEE Transactions …, 2019 - ieeexplore.ieee.org
Among the many software testing techniques available today, fuzzing has remained highly
popular due to its conceptual simplicity, its low barrier to deployment, and its vast amount of …

Smartian: Enhancing smart contract fuzzing with static and dynamic data-flow analyses

J Choi, D Kim, S Kim, G Grieco… - 2021 36th IEEE/ACM …, 2021 - ieeexplore.ieee.org
Unlike traditional software, smart contracts have the unique organization in which a
sequence of transactions shares persistent states. Unfortunately, such a characteristic …

Seed selection for successful fuzzing

A Herrera, H Gunadi, S Magrath, M Norrish… - Proceedings of the 30th …, 2021 - dl.acm.org
Mutation-based greybox fuzzing---unquestionably the most widely-used fuzzing technique---
relies on a set of non-crashing seed inputs (a corpus) to bootstrap the bug-finding process …

{UNIFUZZ}: A holistic and pragmatic {Metrics-Driven} platform for evaluating fuzzers

Y Li, S Ji, Y Chen, S Liang, WH Lee, Y Chen… - 30th USENIX Security …, 2021 - usenix.org
A flurry of fuzzing tools (fuzzers) have been proposed in the literature, aiming at detecting
software vulnerabilities effectively and efficiently. To date, it is however still challenging to …

Ijon: Exploring deep state spaces via fuzzing

C Aschermann, S Schumilo, A Abbasi… - 2020 IEEE Symposium …, 2020 - ieeexplore.ieee.org
Although current fuzz testing (fuzzing) methods are highly effective, there are still many
situations such as complex state machines where fully automated approaches fail. State-of …

Nyx-net: network fuzzing with incremental snapshots

S Schumilo, C Aschermann, A Jemmett… - Proceedings of the …, 2022 - dl.acm.org
Coverage-guided fuzz testing (" fuzzing") has become mainstream and we have observed
lots of progress in this research area recently. However, it is still challenging to efficiently test …

Boosting fuzzer efficiency: An information theoretic perspective

M Böhme, VJM Manès, SK Cha - Proceedings of the 28th ACM Joint …, 2020 - dl.acm.org
In this paper, we take the fundamental perspective of fuzzing as a learning process.
Suppose before fuzzing, we know nothing about the behaviors of a program P: What does it …

Fuzzing javascript engines with aspect-preserving mutation

S Park, W Xu, I Yun, D Jang… - 2020 IEEE Symposium on …, 2020 - ieeexplore.ieee.org
Fuzzing is a practical, widely-deployed technique to find bugs in complex, real-world
programs like JavaScript engines. We observed, however, that existing fuzzing approaches …

Squirrel: Testing database management systems with language validity and coverage feedback

R Zhong, Y Chen, H Hu, H Zhang, W Lee… - Proceedings of the 2020 …, 2020 - dl.acm.org
Fuzzing is an increasingly popular technique for verifying software functionalities and finding
security vulnerabilities. However, current mutation-based fuzzers cannot effectively test …