The art, science, and engineering of fuzzing: A survey

VJM Manès, HS Han, C Han, SK Cha… - IEEE Transactions …, 2019 - ieeexplore.ieee.org
Among the many software testing techniques available today, fuzzing has remained highly
popular due to its conceptual simplicity, its low barrier to deployment, and its vast amount of …

{REPT}: Reverse debugging of failures in deployed software

W Cui, X Ge, B Kasikci, B Niu, U Sharma… - … USENIX Symposium on …, 2018 - usenix.org
Debugging software failures in deployed systems is important because they impact real
users and customers. However, debugging such failures is notoriously hard in practice …

A survey on bug deduplication and triage methods from multiple points of view

C Qian, M Zhang, Y Nie, S Lu, H Cao - Applied Sciences, 2023 - mdpi.com
To address the issue of insufficient testing caused by the continuous reduction of software
development cycles, many organizations maintain bug repositories and bug tracking …

Ankou: Guiding grey-box fuzzing towards combinatorial difference

VJM Manès, S Kim, SK Cha - Proceedings of the ACM/IEEE 42nd …, 2020 - dl.acm.org
Grey-box fuzzing is an evolutionary process, which maintains and evolves a population of
test cases with the help of a fitness function. Fitness functions used by current grey-box …

{AURORA}: Statistical crash analysis for automated root cause explanation

T Blazytko, M Schlögel, C Aschermann… - 29th USENIX Security …, 2020 - usenix.org
Given the huge success of automated software testing techniques, a large amount of
crashes is found in practice. Identifying the root cause of a crash is a time-intensive …

[PDF][PDF] Fuzzing: Art, science, and engineering

VJM Manes, HS Han, C Han, SK Cha, M Egele… - arxiv preprint arxiv …, 2018 - jiliac.com
Authors' addresses: Valentin JM Manès, KAIST CSRC, 291 Daehak-ro, Yuseong-gu,
Daejeon, 34141, Korea, valentin. manes@ kaist. ac. kr; HyungSeok Han, KAIST, 291 …

E&v: Prompting large language models to perform static analysis by pseudo-code execution and verification

Y Hao, W Chen, Z Zhou, W Cui - arxiv preprint arxiv:2312.08477, 2023 - arxiv.org
Static analysis, the process of examining code without executing it, is crucial for identifying
software issues. Yet, static analysis is hampered by its complexity and the need for …

Virtual device farms for mobile app testing at scale: A pursuit for fidelity, efficiency, and accessibility

H Lin, J Qiu, H Wang, Z Li, L Gong, D Gao… - Proceedings of the 29th …, 2023 - dl.acm.org
Virtual devices based on device emulation have been widely used in lab research of mobile
app testing for their efficiency and low cost. However, it remains controversial to use virtual …

Semantic crash bucketing

R van Tonder, J Kotheimer, C Le Goues - Proceedings of the 33rd ACM …, 2018 - dl.acm.org
Precise crash triage is important for automated dynamic testing tools, like fuzzers. At scale,
fuzzers produce millions of crashing inputs. Fuzzers use heuristics, like stack hashes, to cut …

Automated bug hunting with data-driven symbolic root cause analysis

C Yagemann, SP Chung, B Saltaformaggio… - Proceedings of the 2021 …, 2021 - dl.acm.org
The increasing cost of successful cyberattacks has caused a mindset shift, whereby
defenders now employ proactive defenses, namely software bug hunting, alongside existing …