Results 1 to 10 of about 283 (220)
Vulnerability-oriented directed fuzzing for binary programs [PDF]
Scientific Reports, 2022 Directed greybox fuzzing (DGF) is an effective method to detect vulnerabilities of the specified target code. Nevertheless, there are three main issues in the existing DGFs.
Lu Yu +4 more
doaj +4 more sources
RLTG: Multi-targets directed greybox fuzzing. [PDF]
PLoS ONE, 2023 Directed greybox fuzzing guides fuzzers to explore specific objective code areas and has achieved good performance in some scenarios such as patch testing.
Yubo He, Yuefei Zhu
doaj +4 more sources
SwitchFuzz: Switch Short-Term Goals in Directed Grey-Box Fuzzing
Applied Sciences, 2022 In recent years, fuzzing has become a powerful tool for security researchers to uncover security vulnerabilities. It is used to discover software vulnerabilities by continuously generating malformed inputs to trigger bugs.
Ziheng He +4 more
doaj +3 more sources
A directed greybox fuzzer for windows applications [PDF]
Scientific ReportsDirected greybox fuzzing (DGF) has proven effective in vulnerability discovery, but most efforts focus on the Linux platform, with substantially less attention devoted to Windows platform due to its closed-source and GUI software nature.
Xin Ren, Peng-fei Wang, Xu Zhou, Kai Lu
doaj +2 more sources
Constructing More Complete Control Flow Graphs Utilizing Directed Gray-Box Fuzzing
Applied Sciences, 2021 Control Flow Graphs (CFGs) provide fundamental data for many program analyses, such as malware analysis, vulnerability detection, code similarity analysis, etc.
Kailong Zhu +4 more
doaj +3 more sources
Relational Modelling for Automotive Cybersecurity: Structural Transition and Graph-Topology-Based CAN Intrusion Detection [PDF]
SensorsA central open question in automotive intrusion detection is not merely whether relational representations of Controller Area Network (CAN) traffic improve performance, but which aspects of CAN traffic structure transfer robustly across attacks and which
Mohammad Khalaf Khreasat +1 more
doaj +2 more sources
G-Fuzz: A Directed Fuzzing Framework for gVisor
IEEE Transactions on Dependable and Secure ComputinggVisor is a Google-published application-level kernel for containers. As gVisor is lightweight and has sound isolation, it has been widely used in many IT enterprises \cite{Stripe, DigitalOcean, Cloundflare}. When a new vulnerability of the upstream gVisor is found, it is important for the downstream developers to test the corresponding code to ...
Yuwei Li, Yuan Chen, Shouling Ji
exaly +3 more sources
HyperGo: Probability-based directed hybrid fuzzing
Computers and SecurityDirected grey-box fuzzing (DGF) is a target-guided fuzzing intended for testing specific targets (e.g., the potential buggy code). Despite numerous techniques proposed to enhance directedness, the existing DGF techniques still face challenges, such as taking into account the difficulty of reaching different basic blocks when designing the fitness ...
Peihong Lin, Pengfei Wang, Kai Lu
exaly +3 more sources
A directed greybox fuzzing tool for continuous integration
SoftwareXChanges are occurred frequently during continuous integration. Existing testing methods often suffer from weak specificity or insufficiency when applied to continuous integration.
Wenwei Lan +3 more
doaj +2 more sources
Fuzzing Test Case Generation Method Based on Depth-first Search [PDF]
Jisuanji kexue, 2021 Fuzzing test is an important method to exploit network protocol vulnerability.Existing fuzzing test methods have some problems such as incomplete path coverage and low efficiency.To solve these problems,this paper proposes a depth-first search based ...
LI Yi-hao, HONG Zheng, LIN Pei-hong
doaj +1 more source