FuzzingDriver: the Missing Dictionary to Increase Code Coverage in Fuzzers

Ebrahim, Arash Ale; Hazhirpasand, Mohammadreza; Nierstrasz, Oscar; Ghafari, Mohammad (March 2022). FuzzingDriver: the Missing Dictionary to Increase Code Coverage in Fuzzers. In: IEEE International Conference on Software Analysis, Evolution and Reengineering (SANER). 10.1109/SANER53432.2022.00042

[img] Text
Ebra22a.pdf - Accepted Version
Restricted to registered users only
Available under License Publisher holds Copyright.

Download (1MB) | Request a copy

We propose a tool, called FuzzingDriver, to generate dictionary tokens for coverage-based greybox fuzzers (CGF) from the codebase of any target program. FuzzingDriver does not add any overhead to the fuzzing job as it is run beforehand. We compared FuzzingDriver to Google dictionaries by fuzzing six open-source targets, and we found that FuzzingDriver consistently achieves higher code coverage in all tests. We also executed eight benchmarks on FuzzBench to demonstrate how utilizing FuzzingDriver's dictionaries can outperform six widely-used CGF fuzzers. In future work, investigating the impact of FuzzingDriver's dictionaries on improving bug coverage might prove important.

Item Type:

Conference or Workshop Item (Paper)

Division/Institute:

08 Faculty of Science > Institute of Computer Science (INF)
08 Faculty of Science > Institute of Computer Science (INF) > Software Composition Group (SCG) [discontinued]

UniBE Contributor:

Hazhirpasand Barkadehi, Mohammadreza, Nierstrasz, Oscar

Subjects:

000 Computer science, knowledge & systems

Language:

English

Submitter:

Oscar Nierstrasz

Date Deposited:

15 Aug 2022 12:54

Last Modified:

05 Dec 2022 16:22

Publisher DOI:

10.1109/SANER53432.2022.00042

Uncontrolled Keywords:

scg-pub snf-asa3 scg22 jb22

BORIS DOI:

10.48350/171922

URI:

https://boris.unibe.ch/id/eprint/171922

Actions (login required)

Edit item Edit item
Provide Feedback