.png){kind=icon}
返回
Graphuzz: Data-driven Seed Scheduling for Coverage-guided Greybox Fuzzing
.png){kind=icon}
OA
AI
DOI：10.1145/3664603.png)
.png){kind=icon}
原文求助.png){kind=icon}
分享.png){kind=icon}
收藏
摘要
En 中文
Seed scheduling is a critical step of greybox fuzzing, which assigns different weights to seed test cases during seed selection, and significantly impacts the efficiency of fuzzing. Existing seed scheduling strategies rely on manually designed models to estimate the potentials of seeds and determine their weights, which fails to capture the rich information of a seed and its execution and thus the estimation of seeds' potentials is not optimal. In this article, we introduce a new seed scheduling solution, Graphuzz, for coverage-guided greybox fuzzing, which utilizes deep learning models to estimate the potentials of seeds and works in a data-driven way. Specifically, we propose an extended control flow graph called e-CFG to represent the control-flow and data-flow features of a seed's execution, which is suitable for graph neural networks (GNN) to process and estimate seeds' potential. We evaluate each seed's code coverage increment and use it as the label to train the GNN model. Further, we propose a self-attention mechanism to enhance the GNN model so that it can capture overlooked features. We have implemented a prototype of Graphuzz based on the baseline fuzzer AFLplusplus. The evaluation results show that our model can estimate the potential of seeds and has the robust capability to generalize to different targets. Furthermore, the evaluation using 12 benchmarks from FuzzBench shows that Graphuzz outperforms AFLplusplus and the state-of-the-art seed scheduling solution K-Scheduler and other coverage-guided fuzzers in terms of code coverage, and the evaluation using 8 benchmarks from Magma shows that Graphuzz outperforms the baseline fuzzer AFLplusplus and SOTA solutions in terms of bug detection.
Keyword:
Fuzzing
seed scheduling
graph neural network
期刊
A
IF:
6.2
论文数:
1.2K
被引数:
3.4K
机构
引用论文
Applications of Supernumerary Robotic Limbs to Construction Works: Case Studies多余的机器人肢体在建筑工程中的应用: 案例研究OAAI
OAAI分享收藏Cysteine Dioxygenase 1 Is a Tumor Suppressor Gene Silenced by Promoter Methylation in Multiple Human Cancers半胱氨酸双加氧酶1是一种在多种人类癌症中被启动子甲基化沉默的抑癌基因.png)
PLoS ONE
OAAI
PLoS ONEIF0
OAAI分享收藏Relation between Elastic Tensors of Wurtzite and Zinc-Blende Structure Materials纤锌矿的弹性张量与闪锌矿结构材料的关系
PREAI
分享收藏分享收藏Late Miocene continental biota in Northeastern Patagonia (Península Valdés, Chubut, Argentina)巴塔哥尼亚东北部的中新世晚期大陆生物群 (阿根廷楚布的pen í nsulavald é s)
PREAI
分享收藏
查看更多内容