.png){kind=icon}
返回
A Coverage-Guided Fuzzing Method for Automatic Software Vulnerability Detection Using Reinforcement Learning-Enabled Multi-Level Input Mutation
.png){kind=icon}
OA
AI
DOI：10.1109/ACCESS.2024.3421989.png)
.png){kind=icon}
原文求助.png){kind=icon}
分享.png){kind=icon}
收藏
摘要
En 中文
Fuzzing is a popular and effective software testing technique that automatically generates or modifies inputs to test the stability and vulnerabilities of a software system, which has been widely applied and improved by security researchers and experts. The goal of fuzzing is to uncover potential weaknesses in software by providing unexpected and invalid inputs to the target program to monitor its behavior and identify errors or unintended outcomes. Recently, researchers have also integrated promising machine learning algorithms, such as reinforcement learning, to enhance the fuzzing process. Reinforcement learning (RL) has been proven to be able to improve the effectiveness of fuzzing by selecting and prioritizing transformation actions with higher coverage, which reduces the required effort to uncover vulnerabilities. However, RL-based fuzzing models also encounter certain limitations, including an imbalance between exploitation and exploration. In this study, we propose a coverage-guided RL-based fuzzing model that enhances grey-box fuzzing, in which we leverage deep Q-learning to predict and select input variations to maximize code coverage and use code coverage as a reward signal. This model is complemented by simple input selection and scheduling algorithms that promote a more balanced approach to exploiting and exploring software. Furthermore, we introduce a multi-level input mutation model combined with RL to create a sequence of actions for comprehensive input variation. The proposed model is compared to other fuzzing tools in testing various real-world programs, where the results indicate a notable enhancement in terms of code coverage, discovered paths, and execution speed of our solution.
Keyword:
Fuzzing
Codes
Software
Q-learning
Fault diagnosis
Source coding
Reinforcement learning
fuzzing
vulnerability detection
coverage fuzzing
期刊
IF:
3.6
论文数:
9.8W
被引数:
29.4W
机构
引用论文
CGFuzzer: A Fuzzing Approach Based on Coverage-Guided Generative Adversarial Networks for Industrial IoT ProtocolsCGFuzzer: 一种基于覆盖引导的生成对抗网络的模糊方法，用于工业物联网协议
PREAI
分享收藏分享收藏Molecular Characterization and Phylogenetic Relationship of Wild Type 1 Poliovirus Strains Circulating across Pakistan and Afghanistan Bordering Areas during 2010–2012.png)
PLoS ONE
OAAI
PLoS ONEIF0
OAAI分享收藏
查看更多内容