A Novel Coverage-gudied Greybox Fuzzing based on Power Schedule Optimization with Time ComplexityVirtual
Coverage-guided Greybox fuzzing is regarded as a practical approach to detect software vulnerabilities, which targets to expand code coverage as much as possible. A common implementation is to assign more energy to such seeds which find new edges with less execution time. However, solely considering new edges may less effective because some hard-to-find branches often exist in the complex code of program. Code complexity is one of the key indicators to measure the code security. Compared to the code with simple structure, the program with higher code complexity is more likely to find more branches and cause security problems. To this end, we propose a novel fuzzing method which further use code complexity to optimize power schedule process in AFL (American Fuzzy Lop) and AFLFAST (American Fuzzy Lop Fast) . The goal of our method is to generate inputs which are more bias toward the code with higher complexity of the program under test. In addition, we conduct a preliminary empirical study under three widely used real-world programs, and the experimental results show that the proposed approach can trigger more crashes as well as improve the coverage discovery.
Tue 11 OctDisplayed time zone: Eastern Time (US & Canada) change
10:30 - 12:30 | Technical Session 3 - Fuzzing IResearch Papers / Tool Demonstrations / NIER Track at Banquet B Chair(s): Aravind Machiry Purdue University | ||
10:30 20mResearch paper | LawBreaker: An Approach for Specifying Traffic Laws and Fuzzing Autonomous Vehicles Research Papers Yang Sun Singapore Management University, Singapore, Chris Poskitt Singapore Management University, Jun Sun Singapore Management University, Yuqi Chen ShanghaiTech University, China, Zijiang Yang Xi'an Jiaotong University and GuardStrike Inc DOI Pre-print | ||
10:50 20mResearch paper | Fuzzle: Making a Puzzle for FuzzersACM SIGSOFT Distinguished Paper Award Research Papers | ||
11:10 10mDemonstration | ADEPT: A Testing Platform for Simulated Autonomous DrivingVirtual Tool Demonstrations Sen Wang Nanjing University, Zhuheng Sheng Nanjing University, Jingwei Xu , Taolue Chen University of Surrey, UK, Junjun Zhu Nanjing University, Shuhui Zhang Nanjing University, Yuan Yao Nanjing University, Xiaoxing Ma Nanjing University | ||
11:20 20mResearch paper | HTFuzz: Heap Operation Sequence Sensitive FuzzingVirtual Research Papers Yuanping Yu Institute of Software, Chinese Academy of Sciences, Xiangkun Jia Institute of Software Chinese Academy of Sciences, Yuwei Liu Institute of Software, Chinese Academy of Sciences, Yanhao Wang Qi An Xin Group Corp., Qian Sang Institute of Software, Chinese Academy of Sciences, Chao Zhang Tsinghua University, Purui Su Institute of Software/CAS China | ||
11:40 20mResearch paper | Efficient Greybox Fuzzing to Detect Memory ErrorsVirtualACM SIGSOFT Distinguished Paper Award Research Papers Jinsheng Ba National University of Singapore, Gregory J. Duck National University of Singapore, Abhik Roychoudhury National University of Singapore | ||
12:00 20mResearch paper | Griffin: Grammar-Free DBMS FuzzingVirtual Research Papers Jingzhou Fu School of Software, Tsinghua University, Jie Liang School of Software, Tsinghua University, Zhiyong Wu Tsinghua University, China, Mingzhe Wang Tsinghua University, Yu Jiang Tsinghua University | ||
12:20 10mVision and Emerging Results | A Novel Coverage-gudied Greybox Fuzzing based on Power Schedule Optimization with Time ComplexityVirtual NIER Track Shengran Wang School of Computer Science and Communication Engineering, Jiangsu University, Jinfu Chen Jiangsu University, Saihua Cai School of Computer Science and Communication Engineering, Jiangsu University, Chi Zhang Jiangsu University, Haibo Chen School of Computer Science and Communication Engineering, Jiangsu University, Jingyi Chen School of Computer Science and Communication Engineering, Jiangsu University |