.png){kind=icon}
返回
DFL: A DOM sample generation oriented fuzzing framework for browser
.png){kind=icon}
PRE
AI
DOI：10.1016/j.infsof.2024.107591.png)
.png){kind=icon}
原文求助.png){kind=icon}
分享.png){kind=icon}
收藏
摘要
En 中文
The security of web browsers, being fundamental to Internet access infrastructure, has garnered significant attention. Current approaches to identify browser vulnerabilities predominantly rely on code auditing and componentized unit testing. Fuzzing has emerged as an efficient technique for vulnerability discovery. However, adapting this method to browser security testing poses considerable challenges. Recent endeavors in browser vulnerability discovery primarily concentrate on the parsing engine, with limited solutions addressing the rendering engine. Moreover, coverage-guided mutation, a critical aspect, is not prevalent in existing fuzzing frameworks. In this paper, we present a coverage-guided fuzzing framework of DFL, which builds on Freedom and AFL to re-engineer various text generators based on DOM syntax and optimize the efficiency of sample generation. Additionally, serialization and deserialisation methods are developed for the implementation of generator text mutations and the seamless conversion between binary samples and the source DOM tree. When compared with three established DOM fuzzing frameworks in the latest Chromium kernel, DFL has demonstrated an ability to uncover 1.5-3 times more vulnerabilities within a short timeframe. Our research identifies potential avenues for further exploration in browser rendering engine security, specifically focusing on sample generation and path direction.
Keyword:
DOM
Browser security
Gray-box fuzzing
Coverage guided fuzzing
Browser rendering engine
期刊
IF:
4.3
论文数:
3.8K
被引数:
7.7K
机构
引用论文
Crystallographic structure and magnetic properties of polycrystalline FePd thin films on glass substrate玻璃衬底上多晶FePd薄膜的晶体结构和磁性能
PREAI
分享收藏分享收藏分享收藏Fuzzing vulnerability discovery techniques: Survey, challenges and future directionsFuzing漏洞发现技术: 调查、挑战和未来方向.png)
COMPUTERS & SECURITY
COMPUTERS & SECURITYIF5.4
PREAI
分享收藏Ureterocalicostomy for Treatment of Complex Cases of Ureteropelvic Junction Obstruction in AdultsUrology
UrologyIF0
PREAI
分享收藏TT-XSS: A novel taint tracking based dynamic detection framework for DOM Cross-Site ScriptingTt-xss: 一种新的基于污点跟踪的DOM跨站脚本动态检测框架
OAAI
OAAI分享收藏TEEFuzzer: A fuzzing framework for trusted execution environments with heuristic seed mutationTEEFuzzer: 具有启发式种子突变的可信执行环境的模糊框架
PREAI
分享收藏Associations between high-metabolic rate organ masses and fasting hunger: A study using whole-body magnetic resonance imaging in healthy males高代谢率器官质量与空腹饥饿之间的关联: 一项使用健康男性全身磁共振成像的研究OAAI
OAAI分享收藏
查看更多内容