.png){kind=icon}
返回
Evaluating seed selection for fuzzing JavaScript engines
.png){kind=icon}
PRE
AI
DOI：10.1007/s10664-023-10340-9.png)
.png){kind=icon}
原文求助.png){kind=icon}
分享.png){kind=icon}
收藏
摘要
En 中文
JavaScript (JS), as a platform-independent programming language, remains to be the most popular language over the years. However, popular JavaScript engines that have been widely utilized by web browsers to interpret JS code, have become the most common targets for attackers. Thus ensuring the security and reliability of JS engines is significant. Fuzzing is a simple yet effective method to unveil vulnerabilities. However, existing JS fuzzers focus more on the design of effective mutation mechanisms to generate diverse and valid seeds while they often ignore the importance of the initial seed corpus selected to drive the fuzzing process. In this paper, we performed extensive experiments to systematically evaluate the impact of seed selection on fuzzing JavaScript engines. In particular, we investigate seed selections from three main dimensions, their collected sources (e.g., CVE PoCs, Regression tests, etc.), the number and sizes, as well as a set of concerned code properties. Our major findings reveal that seeds collected from different sources can cast a significant impact on the fuzzing effectiveness (i.e., CVE PoC is significantly better than the other types of seeds), and seed files containing those concerned code structures can lead existing fuzzers to achieve superior results in terms of both code coverage and unique crashes identified. Inspired by our observations, we devised a simple heuristic to prioritize JavaScript files when selecting seed corpus. Our experiments show that when driven by our selected seed corpus, the existing state-of-art fuzzer is able to achieve significantly higher code coverage and identify more crashes.
Keyword:
Fuzzing
JavaScript engines
Seed selection
Empirical study
期刊
IF:
3.6
论文数:
2.0K
被引数:
5.3K
机构
暂无机构信息
引用论文
The Effect of Electron Irradiation on the Structure of Sodium Aluminum-Iron Phosphate Glasses电子辐照对磷酸铝铁钠玻璃结构的影响.png)
MRS Advances
MRS AdvancesIF0
PREAI
分享收藏Crystallographic structure and magnetic properties of polycrystalline FePd thin films on glass substrate玻璃衬底上多晶FePd薄膜的晶体结构和磁性能
PREAI
分享收藏
查看更多内容