FSE 2025
Mon 23 - Fri 27 June 2025 Trondheim, Norway
Tue 24 Jun 2025 15:10 - 15:30 at Aurora B - Fuzzing 2 Chair(s): Haipeng Cai

Testing ultra-large microservices-based FinTech systems presents significant challenges, including restricted access to production environments, complex dependencies, and stringent security constraints. We propose SandBoxFuzz, a scalable grey-box fuzzing technique that addresses these limitations by leveraging aspect-oriented programming and runtime reflection to enable dynamic specification mining, generating targeted inputs for constrained environments. SandBoxFuzz also introduces a log-based coverage mechanism, seamlessly integrated into the build pipeline, eliminating the need for runtime coverage agents that are often infeasible in industrial settings. SandBoxFuzz has been successfully deployed to Ant Group’s production line and, compared to an initial solution built on a state-of-the-art fuzzing framework, it demonstrates superior performance in their microservices software. SandBoxFuzz achieves a 7.5% increase in branch coverage, identifies 1,850 additional exceptions, and reduces setup time from hours to minutes, highlighting its effectiveness and practical utility in a real-world industrial environment. By open-sourcing SandBoxFuzz, we provide a practical and effective tool for researchers and practitioners to test large-scale microservices systems.

Tue 24 Jun

Displayed time zone: Amsterdam, Berlin, Bern, Rome, Stockholm, Vienna change

14:00 - 15:30
14:00
20m
Talk
AFLNet Five Years Later: On Coverage-Guided Protocol Fuzzing
Journal First
Ruijie Meng National University of Singapore, Singapore, Thuan Pham University of Melbourne, Marcel Böhme MPI for Security and Privacy, Abhik Roychoudhury National University of Singapore
14:20
20m
Talk
My Fuzzers Won’t Build: An Empirical Study of Fuzzing Build Failures
Journal First
Olivier Nourry The University of Osaka, Yutaro Kashiwa Nara Institute of Science and Technology, Weiyi Shang University of Waterloo, Honglin Shu Kyushu University, Yasutaka Kamei Kyushu University
14:40
20m
Talk
Directed Testing in MLIR: Unleashing Its Potential by Overcoming the Limitations of Random Fuzzing
Research Papers
Weiyuan Tong Northwest University, Zixu Wang Northwest University, Zhanyong Tang Northwest University, Jianbin Fang National University of Defense Technology, Yuqun Zhang Southern University of Science and Technology, Guixin Ye Northwest University
DOI
15:00
10m
Talk
GAFLERNA Ahoy! Integrating EM Side-Channel Analysis into Traditional Fuzzing Workflows
Ideas, Visions and Reflections
Jorge Barredo IKERLAN, Mondragon Unibertsitatea, Justyna Petke University College London, David Clark University College London, Daniel Blackwell University College London, Maialen Eceiza IKERLAN, Jose Luis Flores University of the Basque Country UPV/EHU, Mikel Iturbe Mondragon Unibertsitatea
15:10
20m
Talk
Grey-Box Fuzzing in Constrained Ultra-Large Systems: Lessons for SE Community
Industry Papers
Jiazhao Yu Sun Yat-sen University, Yanlun Tu Ant Group, Zhanlei Zhang Macquaire University, TIEHUA ZHANG Tongji University, Cheng Xu Ant Group, Weigang Wu Sun Yat-sen University, Hong Jin Kang University of Sydney, Xi Zheng Macquarie University

Information for Participants
Tue 24 Jun 2025 14:00 - 15:30 at Aurora B - Fuzzing 2 Chair(s): Haipeng Cai
Info for room Aurora B:

Aurora B is the second room in the Aurora wing.

When facing the main Cosmos Hall, access to the Aurora wing is on the right, close to the side entrance of the hotel.