.png){kind=icon}
返回
CAMFuzz: Explainable Fuzzing with Local Interpretation
.png){kind=icon}
OA
AI
DOI：10.1186/s42400-022-00116-x.png)
.png){kind=icon}
原文求助.png){kind=icon}
分享.png){kind=icon}
收藏
摘要
En 中文
Grey-box fuzzing techniques have been widely used in software bug finding. In general, there are many decisions to make in the fuzzing process, including which code block in the target program should be explored first, which bytes of an input seed should be mutated to reach the target code block, and how to mutate the chosen input bytes. However, existing solutions usually rely on random exploration or certain heuristics to choose where and how to fuzz, which limits the efficiency of fuzzing. In this paper, we propose a novel solution CAMFuzz to guide the fuzzing process with explainable decisions in explainable artificial intelligence (XAI). First, we propose a dynamic weight adjustment algorithm, which considers both the difficulty of reaching a block and the number of unvisited blocks nearby, to find code blocks worthy to explore first. Second, we utilize a widely used local interpretation technique, i.e., class activation mapping (CAM), to recognize which part of an input seed should be mutated to reach a given target code block. Therefore, CAMFuzz can distinguish which part of code in the program is more important and which positions in the input file should be mutated first, in order to achieve a better code coverage and bug finding efficiency. Third, to further help the fuzzer increase fuzzing efficiency, we leverage a lightweight static program analysis to help the fuzzer identify magic values. We implement a prototype of CAMFuzz and evaluate it on 13 real-world programs (including 11 open source targets, 2 closed-source commercial products including a Microsoft component and Hancom Office) Results show that CAMFuzz outperforms state-of-the-art fuzzers in both code coverage and bug finding. To detail, CAMFuzz on average achieves 2.07x more bugs and 1.17x coverage improvements. In total, it found 19 previously unknown vulnerabilities, of which 6 have been assigned by CVE so far.
Keyword:
Fuzzing
Explainable artificial intelligence
Grey-box fuzzing
期刊
C
IF:
3.7
论文数:
589
被引数:
1.0K
机构
引用论文
Crystallographic structure and magnetic properties of polycrystalline FePd thin films on glass substrate玻璃衬底上多晶FePd薄膜的晶体结构和磁性能
.png){kind=icon}
PREAI
分享收藏Applications of Supernumerary Robotic Limbs to Construction Works: Case Studies多余的机器人肢体在建筑工程中的应用: 案例研究OAAI
OAAI分享收藏
查看更多内容