.png){kind=icon}
返回
Fuzzing: A Survey for Roadmap
.png){kind=icon}
PRE
AI
DOI：10.1145/3512345.png)
.png){kind=icon}
原文求助.png){kind=icon}
分享.png){kind=icon}
收藏
摘要
En 中文
Fuzz testing (fuzzing) has witnessed its prosperity in detecting security flaws recently. It generates a large number of test cases and monitors the executions for defects. Fuzzing has detected thousands of bugs and vulnerabilities in various applications. Although effective, there lacks systematic analysis of gaps faced by fuzzing. As a technique of defect detection, fuzzing is required to narrow down the gaps between the entire input space and the defect space. Without limitation on the generated inputs, the input space is infinite. However, defects are sparse in an application, which indicates that the defect space is much smaller than the entire input space. Besides, because fuzzing generates numerous test cases to repeatedly examine targets, it requires fuzzing to perform in an automatic manner. Due to the complexity of applications and defects, it is challenging to automatize the execution of diverse applications. In this article, we systematically review and analyze the gaps as well as their solutions, considering both breadth and depth. This survey can be a roadmap for both beginners and advanced developers to better understand fuzzing.
Keyword:
Fuzz testing
security
fuzzing theory
input space
automation
期刊
IF:
28
论文数:
2.4K
被引数:
3.5W
机构
引用论文
A direct approach to fault-tolerance in measurement-based quantum computation via teleportation通过隐形传态在基于测量的量子计算中实现容错的直接方法
OAAI
OAAI分享收藏A sensitive and Specific PCR-based Assay to Quantify Hepatitis B Virus Covalently Closed Circular (ccc) DNA While Preserving Cellular DNA.png)
BIO-PROTOCOL
OAAI
BIO-PROTOCOLIF0
OAAI分享收藏Cysteine Dioxygenase 1 Is a Tumor Suppressor Gene Silenced by Promoter Methylation in Multiple Human Cancers半胱氨酸双加氧酶1是一种在多种人类癌症中被启动子甲基化沉默的抑癌基因PLoS ONEOAAI
PLoS ONEIF0
OAAI分享收藏
查看更多内容