Publication

Back to overview

FuzzingDriver: the Missing Dictionary to Increase Code Coverage in Fuzzers

Type of publication Peer-reviewed
Publikationsform Proceedings (peer-reviewed)
Author Ebrahim Arash Ale, Hazhirpasand Mohammadreza, Nierstrasz Oscar, Ghafari Mohammad,
Project Agile Software Assistance
Show all

Proceedings (peer-reviewed)

Title of proceedings 29th edition of the IEEE International Conference on Software Analysis, Evolution and Reengineering (SANER)

Open Access

URL http://scg.unibe.ch/archive/papers/Ebra22a.pdf
Type of Open Access Repository (Green Open Access)

Abstract

We propose a tool, called FuzzingDriver, to generate dictionary tokens for coverage-based greybox fuzzers (CGF) from the codebase of any target program. FuzzingDriver does not add any overhead to the fuzzing job as it is run beforehand. We compared FuzzingDriver to Google dictionaries by fuzzing six open-source targets, and we found that FuzzingDriver consistently achieves higher code coverage in all tests. We also executed eight benchmarks on FuzzBench to demonstrate how utilizing FuzzingDriver's dictionaries can outperform six widely-used CGF fuzzers. In future work, investigating the impact of FuzzingDriver's dictionaries on improving bug coverage might prove important.
-