Thread-sensitive fuzzing for concurrency bug detection

doi:10.1016/j.cose.2024.104171

2025-01-01

PRE

DOI：10.1016/j.cose.2024.104171

原文链接

原文求助

摘要

En 中文

Fuzzing is a commonly used method for identifying bugs and vulnerabilities in software. However, current methods for improving fuzzing in concurrency environments often lack a detailed analysis of the program's concurrent state space. This leads to inefficient execution of previously verified concurrent states and missed information. We have developed TSAFL, a novel concurrency fuzzing framework that aims to detect the running state of concurrency programs and uncover hard-to-find vulnerabilities. TSAFL builds upon AFL's concurrency vulnerability detection capabilities by incorporating three new techniques. Firstly, we introduce two new coverage metrics to measure concurrency: concurrent behavior window and CFG prediction. These metrics enhance the TSAFL's capabilities to explore more thread interleavings. The second technique adds efficient thread-interleaved scheduling to fuzzing combined with period scheduling. Several methods are proposed to avoid problems caused by simply using period scheduling to accurately detect and verify all concurrent state spaces. Thirdly, we propose a multi-objective optimization mechanism based on the characteristics of concurrent fuzz testing to fully utilize the information in the seed files. Using these three techniques, our concurrency fuzzing approach effectively covers infrequent thread interleavings with concrete context information. We evaluated TSAFL on user-level applications, and experiments show that TSAFL outperforms AFL++ and MOPT in multithreading-related seed generation and concurrent vulnerability detection.

Keyword:

Fuzzing

Concurrency bugs

Bug detection

Thread interleaving

期刊

Computers and Security

IF:

5.4

论文数:

4.6K

被引数:

1.4W

机构

Harbin Engineering University

学者数:

1.9W

论文数: 1.3W

被引数: 1.3W

引用论文

Nanomaterials: General Synthetic Approaches

Essentials in Nanoscience and Nanotechnology

IF0

2016-03-16

PREAI

Cysteine Dioxygenase 1 Is a Tumor Suppressor Gene Silenced by Promoter Methylation in Multiple Human Cancers 半胱氨酸双加氧酶1是一种在多种人类癌症中被启动子甲基化沉默的抑癌基因

PLoS ONE

IF0

2012-09-27

OAAI

Mariana Brait; Shizhang Ling; Jatin K. Nagpal; Xiaofei Chang; Hannah Lui Park; Juna Lee; Jun Okamura; Keishi Yamashita; David Sidransky; Myoung Sook Kim

Preparation, Evaluation and Analysis of a French‐Fry‐Type Product from Sweet Potatoes

Journal of Food Science

IF0

2006-08-25

PREAI

W. M. WALTER; M. W. HOOVER

Fuzzing: A Survey for Roadmap 模糊测试: 路线图调查

ACM COMPUTING SURVEYS

IF28

2022-09-09

105

PREAI