The art, science, and engineering of fuzzing: A survey
Among the many software testing techniques available today, fuzzing has remained highly
popular due to its conceptual simplicity, its low barrier to deployment, and its vast amount of …
popular due to its conceptual simplicity, its low barrier to deployment, and its vast amount of …
{REPT}: Reverse debugging of failures in deployed software
Debugging software failures in deployed systems is important because they impact real
users and customers. However, debugging such failures is notoriously hard in practice …
users and customers. However, debugging such failures is notoriously hard in practice …
A survey on bug deduplication and triage methods from multiple points of view
C Qian, M Zhang, Y Nie, S Lu, H Cao - Applied Sciences, 2023 - mdpi.com
To address the issue of insufficient testing caused by the continuous reduction of software
development cycles, many organizations maintain bug repositories and bug tracking …
development cycles, many organizations maintain bug repositories and bug tracking …
Ankou: Guiding grey-box fuzzing towards combinatorial difference
Grey-box fuzzing is an evolutionary process, which maintains and evolves a population of
test cases with the help of a fitness function. Fitness functions used by current grey-box …
test cases with the help of a fitness function. Fitness functions used by current grey-box …
{AURORA}: Statistical crash analysis for automated root cause explanation
Given the huge success of automated software testing techniques, a large amount of
crashes is found in practice. Identifying the root cause of a crash is a time-intensive …
crashes is found in practice. Identifying the root cause of a crash is a time-intensive …
[PDF][PDF] Fuzzing: Art, science, and engineering
Authors' addresses: Valentin JM Manès, KAIST CSRC, 291 Daehak-ro, Yuseong-gu,
Daejeon, 34141, Korea, valentin. manes@ kaist. ac. kr; HyungSeok Han, KAIST, 291 …
Daejeon, 34141, Korea, valentin. manes@ kaist. ac. kr; HyungSeok Han, KAIST, 291 …
E&v: Prompting large language models to perform static analysis by pseudo-code execution and verification
Static analysis, the process of examining code without executing it, is crucial for identifying
software issues. Yet, static analysis is hampered by its complexity and the need for …
software issues. Yet, static analysis is hampered by its complexity and the need for …
Virtual device farms for mobile app testing at scale: A pursuit for fidelity, efficiency, and accessibility
Virtual devices based on device emulation have been widely used in lab research of mobile
app testing for their efficiency and low cost. However, it remains controversial to use virtual …
app testing for their efficiency and low cost. However, it remains controversial to use virtual …
Semantic crash bucketing
Precise crash triage is important for automated dynamic testing tools, like fuzzers. At scale,
fuzzers produce millions of crashing inputs. Fuzzers use heuristics, like stack hashes, to cut …
fuzzers produce millions of crashing inputs. Fuzzers use heuristics, like stack hashes, to cut …
Automated bug hunting with data-driven symbolic root cause analysis
The increasing cost of successful cyberattacks has caused a mindset shift, whereby
defenders now employ proactive defenses, namely software bug hunting, alongside existing …
defenders now employ proactive defenses, namely software bug hunting, alongside existing …