返回
V-Fuzz: Vulnerability Prediction-Assisted Evolutionary Fuzzing for Binary Programs
DOI:10.1109/TCYB.2020.3013675.png)
摘要
En 中文
Fuzzing is a technique of finding bugs by executing a target program recurrently with a large number of abnormal inputs. Most of the coverage-based fuzzers consider all parts of a program equally and pay too much attention to how to improve the code coverage. It is inefficient as the vulnerable code only takes a tiny fraction of the entire code. In this article, we design and implement an evolutionary fuzzing framework called V-Fuzz, which aims to find bugs efficiently and quickly in limited time for binary programs. V-Fuzz consists of two main components: 1) a vulnerability prediction model and 2) a vulnerability-oriented evolutionary fuzzer. Given a binary program to V-Fuzz, the vulnerability prediction model will give a prior estimation on which parts of a program are more likely to be vulnerable. Then, the fuzzer leverages an evolutionary algorithm to generate inputs which are more likely to arrive at the vulnerable locations, guided by the vulnerability prediction result. The experimental results demonstrate that V-Fuzz can find bugs efficiently with the assistance of vulnerability prediction. Moreover, V-Fuzz has discovered ten common vulnerabilities and exposures (CVEs), and three of them are newly discovered.
Keyword:
Fuzzing
Computer bugs
Predictive models
Machine learning
Feature extraction
Software
Numerical models
Fuzz testing
graph embedding
vulnerability prediction
AI总结
对已上传原文的论文进行重点信息的提取,主要内容包括:简要概述、研究摘要、背景介绍、关键亮点、图文解析、展望与总结。
期刊
IF:
10.5
论文数:
1.1W
被引数:
5.0W
机构
引用论文
Cysteine Dioxygenase 1 Is a Tumor Suppressor Gene Silenced by Promoter Methylation in Multiple Human Cancers半胱氨酸双加氧酶1是一种在多种人类癌症中被启动子甲基化沉默的抑癌基因
PLoS ONE
IF0
Learning Hierarchical Spectral-Spatial Features for Hyperspectral Image Classification用于高光谱图像分类的分层光谱-空间特征学习
Extending and improving metagenomic taxonomic profiling with uncharacterized species with MetaPhlAn 4用MetaPhlAn 4扩展和改善未表征物种的宏基因组分类学概况

