arXivDaily arXiv每日学术速递 周一至周五更新
arXiv周末暂无论文更新,休息一下吧,周末愉快~~
arXiv 2102.02527cs.CRcs.SE
收藏

FuzzSplore:可视化反馈驱动模糊技术

FuzzSplore: Visualizing Feedback-Driven Fuzzing Techniques

Andrea Fioraldi, Luigi Paolo Pileggi

摘要:

模糊测试技术是当前针对安全问题的软件测试的发展趋势。它们的巨大有效性吸引了研究人员和黑客的注意,并使他们参与开发许多新技术来改进模糊测试。这些技术的评价和交叉比较几乎是一个开放的问题。在本文中,我们提出了一个人驱动的方法来解决这个问题的基础上信息可视化。我们在AFL++模糊框架FuzzSplore上开发了一个原型,分析师可以使用它来获得有关应用于特定目标的不同模糊配置的有用见解,以便在模糊活动期间选择或调整最佳技术。

英文摘要:

Fuzz Testing techniques are the state of the art in software testing for security issues nowadays. Their great effectiveness attracted the attention of researchers and hackers and involved them in developing a lot of new techniques to improve Fuzz Testing. The evaluation and the cross-comparison of these techniques is an almost open problem. In this paper, we propose a human-driven approach to this problem based on information visualization. We developed a prototype upon the AFL++ fuzzing framework, FuzzSplore, that an analyst can use to get useful insights about different fuzzing configurations applied to a specific target in order to choose or tune the best technique during a fuzzing campaign.

机构、总结、中文摘要均由AI分析而来,可能存在错误,请以论文正文为准。

↑