Gray-Box Fuzzing via Gradient Descent and Boolean Expression
Coverage

D 2024

Gray-Box Fuzzing via Gradient Descent and Boolean Expression Coverage

JONÁŠ, Martin, Jan STREJČEK, Marek TRTÍK a Lukáš URBAN

Základní údaje

Originální název

Gray-Box Fuzzing via Gradient Descent and Boolean Expression Coverage

Autoři

JONÁŠ, Martin (203 Česká republika, domácí), Jan STREJČEK (203 Česká republika, garant, domácí), Marek TRTÍK (203 Česká republika, domácí) a Lukáš URBAN (703 Slovensko, domácí)

Vydání

Cham (Švýcarsko), Tools and Algorithms for the Construction and Analysis of Systems - 30th International Conference, TACAS 2024, Held as Part of the European Joint Conferences on Theory and Practice of Software, ETAPS 2024, Luxembourg City, Luxembourg, April 6-11, 2024, Proceedings, Part III, od s. 90-109, 20 s. 2024

Nakladatel

Springer

Další údaje

Jazyk

angličtina

Typ výsledku

Stať ve sborníku

Obor

10201 Computer sciences, information science, bioinformatics

Stát vydavatele

Německo

Utajení

není předmětem státního či obchodního tajemství

Forma vydání

elektronická verze "online"

Odkazy

URL

Impakt faktor

Impact factor: 0.402 v roce 2005

Organizační jednotka

Fakulta informatiky

ISBN

978-3-031-57255-5

ISSN

DOI

http://dx.doi.org/10.1007/978-3-031-57256-2_5

UT WoS

001284187100005

Klíčová slova anglicky

fuzzing; test generation; atomic Boolean expression; Fizzer

Štítky

formela-conference, formela-ver, fuzzing, program analysis, test generation

Příznaky

Mezinárodní význam, Recenzováno

Změněno: 18. 10. 2024 16:54, prof. RNDr. Jan Strejček, Ph.D.

Anotace

V originále

We present a gray-box fuzzing approach based on several new ideas. While standard gray-box fuzzing aims to cover all branches of the input program, our approach primarily aims to cover both results of each Boolean expression. To achieve this goal, we track the distances to flipping these results and we dynamically detect the input bytes that influence the distance. Then we use this information to efficiently flip the results. More precisely, we apply gradient descent on the detected bytes or we create new inputs by using detected bytes from different inputs. We implemented our approach in a tool called Fizzer. An evaluation on the benchmarks of Test-Comp 2023 shows that Fizzer is fully competitive with the winning tools of the competition, which use advanced formal methods like symbolic execution or bounded model checking, usually in combination with fuzzing.

Návaznosti

GA23-06506S, projekt VaV

Název: Pokročilá analýza a verifikace pro pokročilý software

Investor: Grantová agentura ČR, Pokročilá analýza a verifikace pro pokročilý software

MUNI/A/1592/2023, interní kód MU

Název: Modelování, analýza a verifikace (2024)

Investor: Masarykova univerzita, Modelování, analýza a verifikace (2024)

MUNI/A/1608/2023, interní kód MU

Název: Zapojení studentů Fakulty informatiky do mezinárodní vědecké komunity 24

Investor: Masarykova univerzita, Zapojení studentů Fakulty informatiky do mezinárodní vědecké komunity 24

Citovat

JONÁŠ, Martin, Jan STREJČEK, Marek TRTÍK a Lukáš URBAN. Gray-Box Fuzzing via Gradient Descent and Boolean Expression Coverage. Online. In Bernd Finkbeiner and Laura Kovács. Tools and Algorithms for the Construction and Analysis of Systems - 30th International Conference, TACAS 2024, Held as Part of the European Joint Conferences on Theory and Practice of Software, ETAPS 2024, Luxembourg City, Luxembourg, April 6-11, 2024, Proceedings, Part III. Cham (Švýcarsko): Springer, 2024, s. 90-109. ISBN 978-3-031-57255-5. Dostupné z: https://dx.doi.org/10.1007/978-3-031-57256-2_5.

@inproceedings{2396438,
   author = {Jonáš, Martin and Strejček, Jan and Trtík, Marek and Urban, Lukáš},
   address = {Cham (Švýcarsko)},
   booktitle = {Tools and Algorithms for the Construction and Analysis of Systems - 30th International Conference, TACAS 2024, Held as Part of the European Joint Conferences on Theory and Practice of Software, ETAPS 2024, Luxembourg City, Luxembourg, April 6-11, 2024, Proceedings, Part III},
   doi = {http://dx.doi.org/10.1007/978-3-031-57256-2_5},
   editor = {Bernd Finkbeiner and Laura Kovács},
   keywords = {fuzzing; test generation; atomic Boolean expression; Fizzer},
   howpublished = {elektronická verze "online"},
   language = {eng},
   location = {Cham (Švýcarsko)},
   isbn = {978-3-031-57255-5},
   pages = {90-109},
   publisher = {Springer},
   title = {Gray-Box Fuzzing via Gradient Descent and Boolean Expression Coverage},
   url = {https://link.springer.com/chapter/10.1007/978-3-031-57256-2_5},
   year = {2024}
}

TY  - JOUR
ID  - 2396438
AU  - Jonáš, Martin - Strejček, Jan - Trtík, Marek - Urban, Lukáš
PY  - 2024
TI  - Gray-Box Fuzzing via Gradient Descent and Boolean Expression Coverage
PB  - Springer
CY  - Cham (Švýcarsko)
SN  - 9783031572555
KW  - fuzzing
KW  - test generation
KW  - atomic Boolean expression
KW  - Fizzer
UR  - https://link.springer.com/chapter/10.1007/978-3-031-57256-2_5
N2  - We present a gray-box fuzzing approach based on several new ideas. While standard gray-box fuzzing aims to cover all branches of the input program, our approach primarily aims to cover both results of each Boolean expression. To achieve this goal, we track the distances to flipping these results and we dynamically detect the input bytes that influence the distance. Then we use this information to efficiently flip the results. More precisely, we apply gradient descent on the detected bytes or we create new inputs by using detected bytes from different inputs. We implemented our approach in a tool called Fizzer. An evaluation on the benchmarks of Test-Comp 2023 shows that Fizzer is fully competitive with the winning tools of the competition, which use advanced formal methods like symbolic execution or bounded model checking, usually in combination with fuzzing.
ER  -

JONÁŠ, Martin, Jan STREJČEK, Marek TRTÍK a Lukáš URBAN. Gray-Box Fuzzing via Gradient Descent and Boolean Expression Coverage. Online. In Bernd Finkbeiner and Laura Kovács. \textit{Tools and Algorithms for the Construction and Analysis of Systems - 30th International Conference, TACAS 2024, Held as Part of the European Joint Conferences on Theory and Practice of Software, ETAPS 2024, Luxembourg City, Luxembourg, April 6-11, 2024, Proceedings, Part III}. Cham (Švýcarsko): Springer, 2024, s.~90-109. ISBN~978-3-031-57255-5. Dostupné z: https://dx.doi.org/10.1007/978-3-031-57256-2\_{}5.

Podrobný výpis o publikaci