{"title":"Directer: A Parallel and Directed Fuzzing based on Concolic Execution","authors":"Xiaobin Song, Zehui Wu, Yunchao Wang","doi":"10.1145/3220267.3220272","DOIUrl":null,"url":null,"abstract":"Fuzzing is a widely used technology to find vulnerabilities, but the current technology is mostly based on coverage and there are relatively few research in the field of directed fuzzing. In this paper, a parallelized testing technique combining directed fuzzing and concolic execution will be proposed. It extracts path space within the level of basic block in the function call chain through the program control flow analysis and function call relationship. Concolic execution is used to implement the target reachable paths guidance, in order to achieve the goal of rapid arrival. In the experimental stage, the developed Directer was used to test on LAVA dataset, which shows better performance than the existing fuzzers.","PeriodicalId":177522,"journal":{"name":"International Conference on Software and Information Engineering","volume":"1 1","pages":"0"},"PeriodicalIF":0.0000,"publicationDate":"2018-05-02","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":"0","resultStr":null,"platform":"Semanticscholar","paperid":null,"PeriodicalName":"International Conference on Software and Information Engineering","FirstCategoryId":"1085","ListUrlMain":"https://doi.org/10.1145/3220267.3220272","RegionNum":0,"RegionCategory":null,"ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":null,"EPubDate":"","PubModel":"","JCR":"","JCRName":"","Score":null,"Total":0}
引用次数: 0
Abstract
Fuzzing is a widely used technology to find vulnerabilities, but the current technology is mostly based on coverage and there are relatively few research in the field of directed fuzzing. In this paper, a parallelized testing technique combining directed fuzzing and concolic execution will be proposed. It extracts path space within the level of basic block in the function call chain through the program control flow analysis and function call relationship. Concolic execution is used to implement the target reachable paths guidance, in order to achieve the goal of rapid arrival. In the experimental stage, the developed Directer was used to test on LAVA dataset, which shows better performance than the existing fuzzers.
京公网安备 11010802042870号
京ICP备2023020795号-1
分享
求助内容：
应助结果提醒方式：
扫码关注我们
