Symbolic execution for software testing: Three decades later. Proceedings 2020 Network and Distributed System Security Symposium.Ĭadar, C. Hotfuzz: Discovering algorithmic denial-of-service vulnerabilities through guided micro-fuzzing. In 2012 IEEE Fifth International Conference on Software Testing, Verification and Validation, pages 818-825.īlair, W., Mambretti, A., Arshad, S., Weissbacher, M., Robertson, W., Kirda, E., and Egele, M. A taint based approach for smart fuzzing. ACM.īekrar, S., Bekrar, C., Groz, R., and Mounier, L.

In Proceedings of the 38th ACM SIGPLAN Conference on Programming Language Design and Implementation, PLDI 2017, pages 95-110, New York, NY, USA.

The results may be helpful to any researchers who plan to explore this research area.īastani, O., Sharma, R., Aiken, A., and Liang, P. This paper reviews the recent research work related to library fuzzing and functionįuzzing. However, library or function fuzzing could be a very useful testing tool for programmers andĭevelopers. Large number of false positives.There has been not much research in the area of library fuzzing. In addition, randomly generatingĬertain parameters might break the relationships between parameters and therefore result in a Different from anĮxecutable program, functions cannot be run on themselves. Secure or not.To help with it, library fuzzing has been proposed.Fuzzing a whole program is veryĬommon, however, fuzzing a standalone function or library is challenging. Most programmers would simply use public libraries without doubting whether these libraries are

Libraries andįunctions are commonly used by programmers to be directly called from their programs. Programs with many randomly generated fuzzing inputs to trigger overlooked bugs. Fuzzing is a powerful software security testing technique.

Windows kernel driver fuzzing tools