CRAXfuzz: Target-Aware Symbolic Fuzz Testing

2015 ◽  
Author(s):  
Chao-Chun Yeh ◽  
Hsiang Chung ◽  
Shih-Kun Huang
Keyword(s):  
Fuzz Testing

CONFU

2012 ◽  
pp. 152-167
Author(s):  
Huning Dai ◽  
Christian Murphy ◽  
Gail E. Kaiser
Keyword(s):  
Case Studies ◽  
Software Security ◽  
Performance Evaluations ◽  
Testing Technique ◽  
Security Vulnerabilities ◽  
Testing Framework ◽  
Testing Methodology ◽  
Fuzz Testing ◽  
Runtime Environment ◽  
Semantic Validity

Many software security vulnerabilities only reveal themselves under certain conditions, that is, particular configurations and inputs together with a certain runtime environment. One approach to detecting these vulnerabilities is fuzz testing. However, typical fuzz testing makes no guarantees regarding the syntactic and semantic validity of the input, or of how much of the input space will be explored. To address these problems, the authors present a new testing methodology called Configuration Fuzzing. Configuration Fuzzing is a technique whereby the configuration of the running application is mutated at certain execution points to check for vulnerabilities that only arise in certain conditions. As the application runs in the deployment environment, this testing technique continuously fuzzes the configuration and checks “security invariants’’ that, if violated, indicate vulnerability. This paper discusses the approach and introduces a prototype framework called ConFu (CONfiguration FUzzing testing framework) for implementation. Additionally, the results of case studies that demonstrate the approach’s feasibility are presented along with performance evaluations.

scholarly journals Binary Fuzz Testing Method Based on LSTM

2019 ◽  
Vol 612 ◽  
pp. 032192
Author(s):  
Xiaoxiao Yuan ◽  
Limin Pan ◽  
Senlin Luo
Keyword(s):  
Testing Method ◽  
Fuzz Testing
Sign in / Sign up

Export Citation Format

Share Document