Fuzzing vulnerability discovery techniques: Survey, challenges and future directions
C Beaman, M Redbourne, JD Mummery, S Hakak - Computers & Security, 2022 - Elsevier
Fuzzing is a powerful tool for vulnerability discovery in software, with much progress being
made in the field in recent years. There is limited literature available on the fuzzing …
made in the field in recent years. There is limited literature available on the fuzzing …
{AFL++}: Combining incremental steps of fuzzing research
In this paper, we present AFL++, a community-driven open-source tool that incorporates
state-of-the-art fuzzing research, to make the research comparable, reproducible …
state-of-the-art fuzzing research, to make the research comparable, reproducible …
Libafl: A framework to build modular and reusable fuzzers
The release of AFL marked an important milestone in the area of software security testing,
revitalizing fuzzing as a major research topic and spurring a large number of research …
revitalizing fuzzing as a major research topic and spurring a large number of research …
Ijon: Exploring deep state spaces via fuzzing
Although current fuzz testing (fuzzing) methods are highly effective, there are still many
situations such as complex state machines where fully automated approaches fail. State-of …
situations such as complex state machines where fully automated approaches fail. State-of …
Nyx-net: network fuzzing with incremental snapshots
Coverage-guided fuzz testing (" fuzzing") has become mainstream and we have observed
lots of progress in this research area recently. However, it is still challenging to efficiently test …
lots of progress in this research area recently. However, it is still challenging to efficiently test …
Dissecting american fuzzy lop: a fuzzbench evaluation
AFL is one of the most used and extended fuzzers, adopted by industry and academic
researchers alike. Although the community agrees on AFL's effectiveness at discovering …
researchers alike. Although the community agrees on AFL's effectiveness at discovering …
Binary-level directed fuzzing for {use-after-free} vulnerabilities
Directed fuzzing focuses on automatically testing specific parts of the code by taking
advantage of additional information such as (partial) bug stack trace, patches or risky …
advantage of additional information such as (partial) bug stack trace, patches or risky …
The use of likely invariants as feedback for fuzzers
While fuzz testing proved to be a very effective technique to find software bugs, open
challenges still exist. One of the its main limitations is the fact that popular coverage-guided …
challenges still exist. One of the its main limitations is the fact that popular coverage-guided …
FUZZOLIC: Mixing fuzzing and concolic execution
In the last few years, a large variety of approaches and methodologies have been explored
in the context of software testing, ranging from black-box techniques, such as fuzzing, to …
in the context of software testing, ranging from black-box techniques, such as fuzzing, to …
[PDF][PDF] FUZZILLI: Fuzzing for JavaScript JIT Compiler Vulnerabilities.
JavaScript has become an essential part of the Internet infrastructure, and today's interactive
web applications would be inconceivable without this programming language. On the …
web applications would be inconceivable without this programming language. On the …