Sok: Prudent evaluation practices for fuzzing

M Schloegel, N Bars, N Schiller… - … IEEE Symposium on …, 2024 - ieeexplore.ieee.org
Fuzzing has proven to be a highly effective approach to uncover software bugs over the past
decade. After AFL popularized the groundbreaking concept of lightweight coverage …

JIT-picking: Differential fuzzing of JavaScript engines

L Bernhard, T Scharnowski, M Schloegel… - Proceedings of the …, 2022 - dl.acm.org
Modern JavaScript engines that power websites and even full applications on the Web are
driven by the need for an increasingly fast and snappy user experience. These engines use …

[PDF][PDF] FUZZILLI: Fuzzing for JavaScript JIT Compiler Vulnerabilities.

S Groß, S Koch, L Bernhard, T Holz, M Johns - NDSS, 2023 - ndss-symposium.org
JavaScript has become an essential part of the Internet infrastructure, and today's interactive
web applications would be inconceivable without this programming language. On the …

Validating JIT compilers via compilation space exploration

C Li, Y Jiang, C Xu, Z Su - Proceedings of the 29th Symposium on …, 2023 - dl.acm.org
This paper introduces the novel concept of compilation space, which facilitates the thorough
validation of just-in-time (JIT) compilers in modern language virtual machines (LVMs). The …

Nodemedic: End-to-end analysis of node. js vulnerabilities with provenance graphs

D Cassel, WT Wong, L Jia - 2023 IEEE 8th European …, 2023 - ieeexplore.ieee.org
Packages in the Node. js ecosystem often suffer from serious vulnerabilities such as
arbitrary command injection and code execution. Existing taint analysis tools fall short in …

Minerva: browser API fuzzing with dynamic mod-ref analysis

C Zhou, Q Zhang, M Wang, L Guo, J Liang… - Proceedings of the 30th …, 2022 - dl.acm.org
Browser APIs are essential to the modern web experience. Due to their large number and
complexity, they vastly expand the attack surface of browsers. To detect vulnerabilities in …

Fuzzing JavaScript Interpreters with Coverage-Guided Reinforcement Learning for LLM-Based Mutation

J Eom, S Jeong, T Kwon - Proceedings of the 33rd ACM SIGSOFT …, 2024 - dl.acm.org
JavaScript interpreters, crucial for modern web browsers, require an effective fuzzing
method to identify security-related bugs. However, the strict grammatical requirements for …

Covrl: Fuzzing javascript engines with coverage-guided reinforcement learning for llm-based mutation

J Eom, S Jeong, T Kwon - arxiv preprint arxiv:2402.12222, 2024 - arxiv.org
Fuzzing is an effective bug-finding technique but it struggles with complex systems like
JavaScript engines that demand precise grammatical input. Recently, researchers have …

On detecting and measuring exploitable JavaScript functions in real-world applications

M Kluban, M Mannan, A Youssef - ACM Transactions on Privacy and …, 2024 - dl.acm.org
JavaScript is often rated as the most popular programming language for the development of
both client-side and server-side applications. Because of its popularity, JavaScript has …

A survey of modern compiler fuzzing

H Ma - arxiv preprint arxiv:2306.06884, 2023 - arxiv.org
Most software that runs on computers undergoes processing by compilers. Since compilers
constitute the fundamental infrastructure of software development, their correctness is …