arrow
返回

BaSFuzz: Fuzz testing based on difference analysis for seed bytes

delete2025-04-01
delete0
PRE
AI
W
Wenwei Lan
C
Chen Huang
喻婷婷 封面图
喻婷婷 (Tingting Yu)
L
Li Li Li
Z
Zhanqi Cui *
DOI:10.1016/j.jss.2025.112340delete
delete原文链接
delete分享
delete收藏
摘要

摘要

En 中文
Coverage-guided Greybox Fuzzing (CGF) is one of the most effective dynamic software testing techniques, which focus on improving the code coverage. The methodology automatically generates new offspring test cases by mutating existing test cases and analyzing program execution, preserving the interesting test cases as seeds for subsequent mutations. However, existing CGF tools often neglect the similarity between seeds. The mutation of similar seeds can yield a multitude of similar offspring test cases, subsequently executing similar code segments of the program under test. This challenge hinders the improvement of code coverage, consequently impacting the efficiency of fuzz testing. To address this issue, this paper proposes a fuzz testing method BaSFuzz based on difference analysis for seed bytes. The method leverages both byte similarity and structure similarity to analyze the differences between seed bytes. Subsequently, it computes a similarity score for each seed and reorders the seed queue in ascending order of similarity scores. Based on this method, a prototype tool is developed and compared with AFL, AFLFast, MOpt, AFL++-Hier and HTFuzz on 12 target programs. The experimental results indicate that BaSFuzz achieved 190.14%, 143.9%, 10.93%, 374.85% and 11.79% more edge coverage compared to the five tools, respectively. Additionally, BaSFuzz triggered unique crashes 3.57 times, 1.46 times, 42.38%, 2.85 times, and 33.44% more than the five tools, respectively.
Keyword:
Coverage-guided Greybox Fuzzing
Byte similarity
Structure similarity
Seed selection

期刊

Journal of Systems and Software 封面图
Journal of Systems and Software
IF:
4.1
论文数:
5.5K
被引数:
8.4K

机构

暂无机构信息
引用论文

引用论文

Gene Therapy In Lung Transplantation: Effective Gene Transfer Via The Airways
err1998-03-01
err0
errOAAI
errAnders Jeppsson; Ronald Lee; Carlo Pellegrini; Timothy O'Brien; Henry D. Tazelaar; Christopher G. McGregor
err分享
err收藏
Fuzzing: A Survey for Roadmap模糊测试: 路线图调查
err2022-09-09
err105
PREAI
errZhu, Xiaogang; Wen, Sheng; Camtepe, Seyit; Xiang, Yang
err分享
err收藏
V-Fuzz: Vulnerability Prediction-Assisted Evolutionary Fuzzing for Binary ProgramsV-fuzz: 二进制程序的漏洞预测辅助进化模糊
err2022-05-01
err26
PREAI
errLi, Yuwei; Ji, Shouling; Lyu, Chenyang; Chen, Yuan; Chen, Jianhai; Gu, Qinchen; Wu, Chunming; Beyah, Raheem
err分享
err收藏
Changing body ownership using visual metamorphosis使用视觉变态改变身体所有权
err2016-03-23
err0
PREAI
errTomoya Sasaki; MHD Yamen Saraiji; Kouta Minamizawa; Michiteru Kitazaki; Masahiko Inami
err分享
err收藏
PRHAN: Automated Pull Request Description Generation Based on Hybrid Attention Network
err2022-03-01
err13
PREAI
errFang, Sen; Zhang, Tao; Tan, You-Shuai; Xu, Zhou; Yuan, Zhi-Xin; Meng, Ling-Ze
err分享
err收藏
学者 查看更多内容