Mining Attributed Input Grammars and their Applications in Fuzzing
Undetected errors in software systems are a common cause of vulnerabilities and security holes. Grammar Fuzzing is an effective method for testing these systems, but it has limitations such as lack of knowledge about the semantics of the program and difficulty obtaining grammar for these systems. To address these limitations, we propose an approach to automatically mine grammars, and enhance it with semantic rules and contextual constraints to create attribute grammars. These attribute grammars can then be used for fuzzing. Our preliminary results show that this automated extraction process is feasible, as we successfully applied it to an expression parser and were able to extract an attribute grammar representing the parser’s functionality.
Research Associate @ University of Applied Sciences Upper Austria, Campus Hagenberg
Next milestone: PhD in Engineering Sciences @ JKU
Find me on …
Sun 16 AprDisplayed time zone: Dublin change
11:00 - 12:30 | |||
11:00 30mTalk | Mining Attributed Input Grammars and their Applications in Fuzzing Doctoral Symposium Andreas Pointner University of Applied Sciences Upper Austria, Hagenberg, Austria | ||
11:30 30mTalk | Towards Context-Aware Spectrum-Based Fault Localization Doctoral Symposium Attila Szatmári Szegedi Tudományegyetem | ||
12:00 30mTalk | Automatic Benchmark Generation for Object Constraint Language Doctoral Symposium Ankit Jha Maynooth University | ||
