ISSTA 2025
Wed 25 - Sat 28 June 2025 Trondheim, Norway
co-located with FSE 2025

The 4th International Fuzzing Workshop (FUZZING) 2025 welcomes all researchers, scientists, engineers and practitioners to present their latest research findings, empirical analyses, techniques, and applications in the area of fuzzing and software testing for automated bug finding. This year, the workshop will feature multiple interleaved tracks: a main track for pre-registered reports of research papers and a fuzzing nuggets track for short papers.

Please see the workshop website for more details about tracks, including the original CFP: https://fuzzingworkshop.github.io/

Keynote Speakers

Will Wilson, CEO and Co-Founder of Antithesis

Photo of Will Wilson

Title: Are you sure you belong in academia?

Abstract: I too once lived in an ivory tower, pondering the deepest mysteries of the universe (in my occasional snatches of spare time between writing grant proposals and fighting with IRBs). Then I quit and went into industry instead. To my surprise, there was interesting research happening there. I was still able to ponder the mysteries of creation, and I was better paid, and there were no IRBs.

Is the modern research university a path dependent outcome, or is it what we’d come up with if we were designing from scratch? What are the pros and cons of an endowed chair vs. a sinecure at FAANG? Is being surrounded by credentialed colleagues pursuing the same questions as you less important in the age of the internet, or more? Do crass financial incentives ruin the integrity of the scientific process? Is industry still a place where you can do deep, foundational work?

As computer scientists, two career paths stretch out in front of us. How can you tell which one you belong on? Come to this talk and find out. You will also learn about the secret third career path for CS theorists, and the even more secret fourth one.

Biography: Will Wilson is a failed mathematician who switched to programming because it seemed easier. He built distributed databases at FoundationDB, Apple, and Google. Along the way, he realized that computers are actually the enemy, and founded Antithesis to put them in their place.


Miryung Kim, Professor at UCLA

Photo of Miryung Kim

Title: Constraining Fuzzing without Paying Too Much

Abstract: Fuzzing currently has two flavors—an existing generic, domain-agnostic, solution such as AFL, or developers often build a custom generator such as “X”-Smith that is more effective for a specialized domain such as C, SQL, and MLIR. However, constructing a custom fuzzer such as “X”-Smith generally requires significant developer or engineering effort, measured in person-months.

In this talk, I will reflect on my group’s experience of designing custom fuzzers for data-intensive computing and heterogeneous hardware domains. I will discuss how we had to encode domain-specific constraints, custom feedback guidance, custom search strategies, and custom mutation operators to make the fuzzing solutions effective for a specialized domain. Then, reflecting on this manual specialization effort, I will propose a new direction on how we should strive to bootstrap a custom fuzzer, automatically or semi-automatically, without too much manual effort.

Toward this vision of “bootstrapping a custom fuzzer without paying too much”, I will share several ongoing effort to find the right balance between the universality of a fuzzer and its effectiveness in a specialized domain: (1) custom mutation synthesis from examples, (2) automated grammar refinement to constrain fuzzing, (3) LLM-guided constraint-generation for mutation, and (4) a lightweight DSL for context-guided input generation.

Biography: Miryung Kim is a Professor and Vice Chair of Graduate Studies in Computer Science at UCLA. Her research group focuses on software engineering for AI, big data, and hardware heterogeneity. She has mentored seven PhD students and postdocs who have gone on to become professors (at Columbia, Purdue, and two at Virginia Tech, among others). For her impact on nurturing the next generation of academics, she received the ACM SIGSOFT Influential Educator Award. She served as Program Co-Chair of the ACM International Conference on Foundations of Software Engineering (FSE 2022). She was a Keynote Speaker at ASE 2019 and ISSTA 2022 and has given Distinguished Lectures at CMU, UIUC, and other institutions. She is an Amazon Scholar at Amazon Web Services.

Plenary
Hide plenary sessions
You're viewing the program in a time zone which is different from your device's time zone change time zone

Sat 28 Jun

Displayed time zone: Amsterdam, Berlin, Bern, Rome, Stockholm, Vienna change

09:00 - 10:30
Morning 1FUZZING at Cosmos 3C
09:00
10m
Day opening
Welcome
FUZZING

09:10
50m
Keynote
Keynote: Constraining Fuzzing without Paying Too Much
FUZZING
Miryung Kim UCLA and Amazon Web Services
10:00
10m
Talk
Personalized Fuzzing: A Case Study with the FANDANGO Fuzzer on a GNSS Module
FUZZING
Stephan Neuhaus ZHAW School of Engineering, José Antonio Zamudio Amaya CISPA Helmholtz Center for Information Security, Andreas Zeller CISPA Helmholtz Center for Information Security
10:10
10m
Talk
Hybrid Fuzzing of Infrastructure as Code Programs
FUZZING
Emilio Coppa LUISS University, Daniel Sokolowski University of St. Gallen, Guido Salvaneschi University of St. Gallen
10:20
10m
Talk
Towards Fuzzing Zero-Knowledge Proof Circuits
FUZZING
Stefanos Chaliasos Imperial College London, Imam Al-Fath ZKSecurity, Alastair F. Donaldson Imperial College London
10:30 - 11:00
Coffee BreakCatering at Foyer
10:30
30m
Coffee break
Break
Catering

13:00 - 14:00
LunchCatering at Foyer
13:00
60m
Lunch
Lunch
Catering

14:00 - 15:30
Afternoon 1FUZZING at Cosmos 3C
14:00
18m
Talk
On the Applicability of Benford’s Law to Detect Saturation in Fuzzing
FUZZING
Jungwoo Lee KAIST, Haeun Lee KAIST, Sangjun Park KAIST, Sang Kil Cha KAIST
14:18
18m
Talk
Trailblazer: Practical End-to-end Web API Fuzzing
FUZZING
Lianglu Pan University of Melbourne, Shaanan Cohney University of Melbourne, Toby Murray University of Melbourne, Thuan Pham University of Melbourne
14:36
18m
Talk
Revisiting the Combination of Static Analysis Error Traces and Dynamic Symbolic Execution: A Potential Approach for True Positive Confirmation
FUZZING
Yihua Xu East China Normal University, Chengyu Zhang Loughborough University, Geguang Pu East China Normal University, China
14:54
18m
Talk
MQueez: Specification-Driven Fuzzing for MQTT Broker
FUZZING
Xinpeng Liu Zhejiang University, Qinying Wang Zhejiang University, Peiyu Liu Zhejiang University, Wenhai Wang Zhejiang University, Shouling Ji Zhejiang University
15:12
18m
Talk
Shepherd: High-Precision Coverage Inference for Response-guided Blackbox Fuzzing
FUZZING
Takuya Shimizu Ricerca Security, Inc., Ryuichi Yoshizawa Ricerca Security, Inc., Kaoru Otsuka Ricerca Security, Inc., Yudai Fujiwara Ricerca Security, Inc., Yuichi Sugiyama Ricerca Security, Inc.
15:30 - 16:00
Coffee BreakCatering at Foyer
15:30
30m
Coffee break
Break
Catering

16:00 - 16:10
Afternoon 2FUZZING at Cosmos 3C
16:00
10m
Day closing
Concluding Remarks
FUZZING

Questions? Use the FUZZING contact form.
:
: