Fuzzing vulnerability discovery techniques: Survey, challenges and future directions

C Beaman, M Redbourne, JD Mummery, S Hakak - Computers & Security, 2022 - Elsevier
Fuzzing is a powerful tool for vulnerability discovery in software, with much progress being
made in the field in recent years. There is limited literature available on the fuzzing …

{AFL++}: Combining incremental steps of fuzzing research

A Fioraldi, D Maier, H Eißfeldt, M Heuse - 14th USENIX Workshop on …, 2020 - usenix.org
In this paper, we present AFL++, a community-driven open-source tool that incorporates
state-of-the-art fuzzing research, to make the research comparable, reproducible …

Libafl: A framework to build modular and reusable fuzzers

A Fioraldi, DC Maier, D Zhang, D Balzarotti - Proceedings of the 2022 …, 2022 - dl.acm.org
The release of AFL marked an important milestone in the area of software security testing,
revitalizing fuzzing as a major research topic and spurring a large number of research …

Ijon: Exploring deep state spaces via fuzzing

C Aschermann, S Schumilo, A Abbasi… - 2020 IEEE Symposium …, 2020 - ieeexplore.ieee.org
Although current fuzz testing (fuzzing) methods are highly effective, there are still many
situations such as complex state machines where fully automated approaches fail. State-of …

Nyx-net: network fuzzing with incremental snapshots

S Schumilo, C Aschermann, A Jemmett… - Proceedings of the …, 2022 - dl.acm.org
Coverage-guided fuzz testing (" fuzzing") has become mainstream and we have observed
lots of progress in this research area recently. However, it is still challenging to efficiently test …

Dissecting american fuzzy lop: a fuzzbench evaluation

A Fioraldi, A Mantovani, D Maier… - ACM transactions on …, 2023 - dl.acm.org
AFL is one of the most used and extended fuzzers, adopted by industry and academic
researchers alike. Although the community agrees on AFL's effectiveness at discovering …

Binary-level directed fuzzing for {use-after-free} vulnerabilities

MD Nguyen, S Bardin, R Bonichon, R Groz… - … on Research in Attacks …, 2020 - usenix.org
Directed fuzzing focuses on automatically testing specific parts of the code by taking
advantage of additional information such as (partial) bug stack trace, patches or risky …

The use of likely invariants as feedback for fuzzers

A Fioraldi, DC D'Elia, D Balzarotti - 30th USENIX Security Symposium …, 2021 - usenix.org
While fuzz testing proved to be a very effective technique to find software bugs, open
challenges still exist. One of the its main limitations is the fact that popular coverage-guided …

FUZZOLIC: Mixing fuzzing and concolic execution

L Borzacchiello, E Coppa, C Demetrescu - Computers & Security, 2021 - Elsevier
In the last few years, a large variety of approaches and methodologies have been explored
in the context of software testing, ranging from black-box techniques, such as fuzzing, to …

[PDF][PDF] FUZZILLI: Fuzzing for JavaScript JIT Compiler Vulnerabilities.

S Groß, S Koch, L Bernhard, T Holz, M Johns - NDSS, 2023 - ndss-symposium.org
JavaScript has become an essential part of the Internet infrastructure, and today's interactive
web applications would be inconceivable without this programming language. On the …