Results 141 to 150 of about 192 (172)

Pangolin: Incremental Hybrid Fuzzing With Polyhedral Path Abstraction [PDF]

open access: yes2020 IEEE Symposium on Security and Privacy (SP), 2020
Hybrid fuzzing, which combines the merits of both fuzzing and concolic execution, has become one of the most important trends in coverage-guided fuzzing techniques. Despite the tremendous research on hybrid fuzzers, we observe that existing techniques are still inefficient.
Charles Zhang, Rongxin Wu, Heqing Huang
exaly   +3 more sources

BSFuzz: Branch-State Guided Hybrid Fuzzing

open access: yesElectronics, 2023
Hybrid fuzzing is an automated software testing approach that synchronizes test cases between the fuzzer and the concolic executor to improve performance. The concolic executor solves path constraints to direct the fuzzer to explore the uncovered path.
Shuaibing Lu, Zhi Wang
exaly   +2 more sources
Some of the next articles are maybe not open access.

Related searches:

Sequence Directed Hybrid Fuzzing

2020 IEEE 27th International Conference on Software Analysis, Evolution and Reengineering (SANER), 2020
Existing directed grey-box fuzzers are effective compared with coverage-based fuzzers. However, they fail to achieve a balance between effectiveness and efficiency, and it is difficult to cover complex paths due to random mutation. To mitigate the issue, we propose a novel approach, sequence directed hybrid fuzzing (SDHF), which leverages a sequence ...
Hongliang Liang   +3 more
openaire   +2 more sources

Hd-Fuzz: Hardware Dependency-Aware Firmware Fuzzing Via Hybrid Mmio Modeling

Journal of Network and Computer Applications, 2023
Numerous interconnected small embedded systems, such as Internet of Things (IoT) devices, are pervasive in our daily lives; however, their security lags behind. In particular, firmware vulnerabilities in low-level infrastructure have a more severe impact than application -level vulnerabilities.
Juhwan Kim   +4 more
openaire   +4 more sources

A Survey of Hybrid Fuzzing based on Symbolic Execution

Proceedings of the 2020 International Conference on Cyberspace Innovation of Advanced Technologies, 2020
Fuzzing has now developed into an efficient method of vulnerability mining. Symbolic execution is also a popular software vulnerability mining technology. Both are research hotspots in the field of network and information security. Hybrid fuzzing is the addition of symbolic execution technology on the basis of traditional fuzzing, and has now developed
Tao Zhang 0079   +4 more
openaire   +1 more source

FEFuzzer: Hybrid Files Fuzzing Tool

2021
Fuzzing is one of the most effective techniques for finding bugs and mining potential vulnerabilities in applications. In the fuzzing test, how to select test cases directly affects the result of the testing. In this paper, we propose a new method that can compute the effectiveness of test cases based on the genetic algorithm.
Tengfei Tu   +4 more
openaire   +1 more source

A Hybrid Interface Recovery Method for Android Kernels Fuzzing

2020 IEEE 20th International Conference on Software Quality, Reliability and Security (QRS), 2020
Android kernel fuzzing is a research area of interest specifically for detecting kernel vulnerabilities which may allow attackers to obtain the root privilege. The number of Android mobile phones is increasing rapidly with the explosive growth of Android kernel drivers.
Shuaibing Lu   +3 more
openaire   +2 more sources

A Priority Based Path Searching Method for Improving Hybrid Fuzzing

Computers and Security, 2021
Abstract Hybrid fuzzing which combines classical fuzzing with concolic execution to produce effective test suites is an advanced software vulnerability detection technique. Because fuzzing and concolic execution are complementary in nature, some researchers propose “optimal strategy” and “discriminative dispatch strategy” to improve the performance ...
Pei-hong Lin   +3 more
exaly   +3 more sources

Binary-oriented hybrid fuzz testing

2015 6th IEEE International Conference on Software Engineering and Service Science (ICSESS), 2015
In software security testing, fuzz testing and symbolic execution are two main testing techniques. Fuzz testing finds program bugs by executing the target program with random inputs it generates while monitoring the execution for abnormal behaviors. Though fuzz testing is able to explore deep into a program's state space efficiently, it usually cannot ...
Dong Fangquan   +3 more
openaire   +1 more source

PatchFuzz: An Efficient Way to Incorporate Patching With Hybrid Fuzzing

IEEE Transactions on Dependable and Secure Computing
Fu Xiao, Yan Lin, Letian Sha
exaly   +2 more sources

Home - About - Disclaimer - Privacy