Fuzz testing (fuzzing) has witnessed its prosperity in detecting security flaws recently. It
generates a large number of test cases and monitors the executions for defects. Fuzzing has …

Fuzzing has proven to be a highly effective approach to uncover software bugs over the past
decade. After AFL popularized the groundbreaking concept of lightweight coverage …

Coverage-guided fuzz testing (" fuzzing") has become mainstream and we have observed
lots of progress in this research area recently. However, it is still challenging to efficiently test …

Protocol implementations are essential components in network infrastructures. Flaws hidden
in the implementations can easily render devices vulnerable to adversaries. Therefore …

ARM TrustZone forms the security backbone of mobile devices. TrustZone-based Trusted
Execution Environments (TEEs) facilitate security-sensitive tasks like user authentication …

Binary reverse engineering is an arduous and tedious task performed by skilled and
expensive human analysts. Information about the source code is irrevocably lost in the …

Despite the fact that the state-of-the-art fuzzers can generate inputs efficiently, existing fuzz
drivers still cannot adequately cover entries in libraries. Most of these fuzz drivers are crafted …

Crafting high-quality fuzz drivers not only is time-consuming but also requires a deep
understanding of the library. However, the state-of-the-art automatic fuzz driver generation …

Coverage-guided fuzzing's aggressive, high-volume testing has helped reveal tens of
thousands of software security flaws. While executing billions of test cases mandates fast …

Fuzzing is arguably the most practical approach for detecting security bugs in software, but a
non-trivial extent of efforts is required for its adoption. To be effective, high-quality fuzz …