一句话：提出 PRE2Fuzz，将协议逆向工程推断的格式规范自动转换为 PEACH 兼容 Pit 模板，打通逆向到模糊测试的最后一环。
针对专有或未文档化协议的安全测试难题，现有协议逆向工程虽能从网络流量或程序二进制中推断消息结构与语义，但其得到的格式规范无法直接用于模糊测试。本文提出 PRE2Fuzz，一个可扩展、集成的协议分析与转换系统。它集成多种逆向工程工具，支持并行分析，并自动将推断结果转换为 PEACH 兼容的可执行 Pit 文件，从而弥合协议逆向工程与自动化模糊测试之间的鸿沟。在八种广泛使用的协议上，使用 PRE2Fuzz 生成的 Pit 模板进行测试并取得了分支覆盖率，表明该系统具有实用性和通用性。
Security testing for proprietary or undocumented protocols is particularly challenging, as it depends on reverse-engineering techniques to infer protocol formats. This process involves analyzing network traffic or program binaries to deduce message structures and semantics. However, the resulting specifications cannot be directly used as input for fuzzing. To enable efficient automated security testing, a crucial conversion step is required: systematically transforming the reverse-engineered format specifications into PEACH-compatible Pit file. To address this need, this paper presents PRE2Fuzz, an extensible and integrated protocol analysis and conversion system. PRE2Fuzz integrates multiple reverse-engineering tools, supports parallel analysis, and automatically converts the inferred results into executable Pit file, thereby bridging the gap between protocol reverse engineering and automated fuzzing. Evaluations demonstrate the system’s practicality and generality: tests using PRE2Fuzz-generated Pit templates on eight widely used protocols achieved branch coverage.
@inproceedings{paperbot11501,
title = {Bridging the Final Gap: Fuzzing Template Generation from Protocol Reverse Engineering},
author = {Wenlong Zhang and Fuchen Ma and Yongjun Xie and Yuanliang Chen and Dalong Shi and Dongyi Yu and Heyuan Shi},
booktitle = {ICSE},
year = {2026},
doi = {10.1145/3774748.3787609}
}