.png){kind=icon}
返回
FORMATFUZZER: Effective Fuzzing of Binary File Formats
.png){kind=icon}
PRE
AI
DOI：10.1145/3628157.png)
.png){kind=icon}
原文求助.png){kind=icon}
分享.png){kind=icon}
收藏
摘要
En 中文
Effective fuzzing of programs that process structured binary inputs, such as multimedia files, is a challenging task, since those programs expect a very specific input format. Existing fuzzers, however, are mostly format-agnostic, which makes them versatile, but also ineffective when a specific format is required. We present FORMATFUZZER, a generator for format-specific fuzzers. FORMATFUZZER takes as input a binary template (a format specification used by the 010 Editor) and compiles it into C++ code that acts as parser, mutator, and highly efficient generator of inputs conforming to the rules of the language. The resulting format-specific fuzzer can be used as a standalone producer or mutator in black-box settings, where no guidance from the program is available. In addition, by providing mutable decision seeds, it can be easily integrated with arbitrary format-agnostic fuzzers such as AFL to make them format-aware. In our evaluation on complex formats such as MP4 or ZIP, FORMATFUZZER showed to be a highly effective producer of valid inputs that also detected previously unknown memory errors in ffmpeg and timidity.
Keyword:
Structure-aware fuzzing
file format specifications
binary files
grammars
parser generators
generator-based fuzzing
期刊
A
IF:
6.2
论文数:
1.2K
被引数:
3.4K
机构
引用论文
Crystallographic structure and magnetic properties of polycrystalline FePd thin films on glass substrate玻璃衬底上多晶FePd薄膜的晶体结构和磁性能
.png){kind=icon}
PREAI
分享收藏The zonal anatomy of the prostate in man and in the Rhesus monkey (Macaca Mulatta)人和恒河猴 (猕猴) 前列腺的区域解剖
PREAI
分享收藏
分享收藏
查看更多内容