Grammar-based fuzzing has been shown to significantly improve bug detection in programs with highly structured inputs. However, since grammars are largely handwritten, it is rarely used as a standalone technique in large-spectrum fuzzers as it requires human expertise. To fill this gap, promising techniques begin to emerge to automate the extraction of context-free grammars directly from the program under test. Unfortunately, the resulting grammars are usually not expressive enough and generate too many wrong inputs to provide results capable of competing with other fuzzing techniques. In this paper we propose a technique to automate the creation of attribute grammars from context-free grammars, thus significantly lowering the barrier of entry for efficient and effective large-scale grammar-based fuzzing.
Tue 16 JulDisplayed time zone: Beijing, Chongqing, Hong Kong, Urumqi change
14:00 - 15:30 | |||
14:00 20mDoctoral symposium paper | A Cost-Effective Strategy for Software Vulnerability Prediction Based on Bellwether Analysis Doctoral Symposium Patrick Kwaku Kudjo Jiangsu University | ||
14:20 20mDoctoral symposium paper | Towards Scalable Defense of Information Flow Security for Distributed Systems Doctoral Symposium Xiaoqin Fu Washington State University | ||
14:40 20mDoctoral symposium paper | Mining Constraints for Grammar Fuzzing Doctoral Symposium Michaël Mera CISPA, Germany | ||
15:00 30mTalk | Panel Disscussion Doctoral Symposium |