[HTML][HTML] A survey on large language model (llm) security and privacy: The good, the bad, and the ugly

Y Yao, J Duan, K Xu, Y Cai, Z Sun, Y Zhang - High-Confidence Computing, 2024 - Elsevier
Abstract Large Language Models (LLMs), such as ChatGPT and Bard, have revolutionized
natural language understanding and generation. They possess deep language …

Fuzzing: a survey for roadmap

X Zhu, S Wen, S Camtepe, Y **ang - ACM Computing Surveys (CSUR), 2022 - dl.acm.org
Fuzz testing (fuzzing) has witnessed its prosperity in detecting security flaws recently. It
generates a large number of test cases and monitors the executions for defects. Fuzzing has …

[PDF][PDF] Large language model guided protocol fuzzing

R Meng, M Mirchev, M Böhme… - Proceedings of the …, 2024 - ndss-symposium.org
How to find security flaws in a protocol implementation without a machine-readable
specification of the protocol? Facing the internet, protocol implementations are particularly …

Stateful greybox fuzzing

J Ba, M Böhme, Z Mirzamomen… - 31st USENIX Security …, 2022 - usenix.org
Many protocol implementations are reactive systems, where the protocol process is in
continuous interaction with other processes and the environment. If a bug can be exposed …

Snipuzz: Black-box fuzzing of iot firmware via message snippet inference

X Feng, R Sun, X Zhu, M Xue, S Wen, D Liu… - Proceedings of the …, 2021 - dl.acm.org
The proliferation of Internet of Things (IoT) devices has made people's lives more
convenient, but it has also raised many security concerns. Due to the difficulty of obtaining …

From One Thousand Pages of Specification to Unveiling Hidden Bugs: Large Language Model Assisted Fuzzing of Matter {IoT} Devices

X Ma, L Luo, Q Zeng - … USENIX Security Symposium (USENIX Security 24 …, 2024 - usenix.org
Matter is an IoT connectivity standard backed by over two hundred companies. Since the
release of its specification in October 2022, numerous IoT devices have become Matter …

StateAFL: Greybox fuzzing for stateful network servers

R Natella - Empirical Software Engineering, 2022 - Springer
Fuzzing network servers is a technical challenge, since the behavior of the target server
depends on its state over a sequence of multiple messages. Existing solutions are costly …

Nyx-net: network fuzzing with incremental snapshots

S Schumilo, C Aschermann, A Jemmett… - Proceedings of the …, 2022 - dl.acm.org
Coverage-guided fuzz testing (" fuzzing") has become mainstream and we have observed
lots of progress in this research area recently. However, it is still challenging to efficiently test …

Llmif: Augmented large language model for fuzzing iot devices

J Wang, L Yu, X Luo - 2024 IEEE Symposium on Security and …, 2024 - ieeexplore.ieee.org
Despite the efficacy of fuzzing in verifying the implementation correctness of network
protocols, existing IoT protocol fuzzing approaches grapple with several limitations …

Regression greybox fuzzing

X Zhu, M Böhme - Proceedings of the 2021 ACM SIGSAC Conference on …, 2021 - dl.acm.org
What you change is what you fuzz! In an empirical study of all fuzzer-generated bug reports
in OSSFuzz, we found that four in every five bugs have been introduced by recent code …