Fuzzing: a survey for roadmap

X Zhu, S Wen, S Camtepe, Y **ang - ACM Computing Surveys (CSUR), 2022 - dl.acm.org
Fuzz testing (fuzzing) has witnessed its prosperity in detecting security flaws recently. It
generates a large number of test cases and monitors the executions for defects. Fuzzing has …

Sok: Prudent evaluation practices for fuzzing

M Schloegel, N Bars, N Schiller… - … IEEE Symposium on …, 2024 - ieeexplore.ieee.org
Fuzzing has proven to be a highly effective approach to uncover software bugs over the past
decade. After AFL popularized the groundbreaking concept of lightweight coverage …

Magma: A ground-truth fuzzing benchmark

A Hazimeh, A Herrera, M Payer - … of the ACM on Measurement and …, 2020 - dl.acm.org
High scalability and low running costs have made fuzz testing the de facto standard for
discovering software bugs. Fuzzing techniques are constantly being improved in a race to …

Seed selection for successful fuzzing

A Herrera, H Gunadi, S Magrath, M Norrish… - Proceedings of the 30th …, 2021 - dl.acm.org
Mutation-based greybox fuzzing---unquestionably the most widely-used fuzzing technique---
relies on a set of non-crashing seed inputs (a corpus) to bootstrap the bug-finding process …

Nyx-net: network fuzzing with incremental snapshots

S Schumilo, C Aschermann, A Jemmett… - Proceedings of the …, 2022 - dl.acm.org
Coverage-guided fuzz testing (" fuzzing") has become mainstream and we have observed
lots of progress in this research area recently. However, it is still challenging to efficiently test …

Confuzzius: A data dependency-aware hybrid fuzzer for smart contracts

CF Torres, AK Iannillo, A Gervais… - 2021 IEEE European …, 2021 - ieeexplore.ieee.org
Smart contracts are Turing-complete programs that are executed across a blockchain.
Unlike traditional programs, once deployed, they cannot be modified. As smart contracts …

Rudra: finding memory safety bugs in rust at the ecosystem scale

Y Bae, Y Kim, A Askar, J Lim, T Kim - Proceedings of the ACM SIGOPS …, 2021 - dl.acm.org
Rust is a promising system programming language that guarantees memory safety at
compile time. To support diverse requirements for system software such as accessing low …

Bleem: Packet sequence oriented fuzzing for protocol implementations

Z Luo, J Yu, F Zuo, J Liu, Y Jiang, T Chen… - 32nd USENIX Security …, 2023 - usenix.org
Protocol implementations are essential components in network infrastructures. Flaws hidden
in the implementations can easily render devices vulnerable to adversaries. Therefore …

{FISHFUZZ}: Catch deeper bugs by throwing larger nets

H Zheng, J Zhang, Y Huang, Z Ren, H Wang… - 32nd USENIX Security …, 2023 - usenix.org
Fuzzers effectively explore programs to discover bugs. Greybox fuzzers mutate seed inputs
and observe their execution. Whenever a seed reaches new behavior (eg, new code or …

Can large language models write good property-based tests?

V Vikram, C Lemieux, J Sunshine, R Padhye - arxiv preprint arxiv …, 2023 - arxiv.org
Property-based testing (PBT), while an established technique in the software testing
research community, is still relatively underused in real-world software. Pain points in writing …