paperbot · PL 论文追踪

全部论文 待读 收藏

Beyond the First Crash: Interaction-Aware Multi-fault Fuzzing

超越首次崩溃:交互感知的多故障模糊测试
ASE Proceedings of the 41st IEEE/ACM International Conference on Automated Software Engineering2026引用 0 inbox
Omar I. Al-Bataineh
crossref: 2026-10-09

AI 速览

一句话:提出 CoFuzz,用探针机制增量构建故障交互图,将模糊测试从收集孤立崩溃转向揭示多故障的掩蔽、级联与协同结构。

模糊测试擅长发现单个故障,却系统性地无法揭示故障在执行中的交互:一个程序点的崩溃可能掩蔽、触发或改变其他故障的表现,导致关键的故障交互未被发现。本文提出 CoFuzz,一个交互感知的模糊测试框架,将模糊测试从收集孤立崩溃转向揭示故障交互结构。CoFuzz 采用基于探针的机制,在模糊测试过程中增量构建故障交互图 M:当在某站点 fi 检测到崩溃后,CoFuzz 临时中和 fi 并重新进行模糊测试,以暴露此前被掩蔽的故障,并将关系分类为掩蔽、级联或协同。这些交互信号指导语料库优先级排序与变异,使探索朝向故障组合而非仅覆盖代码。作者进一步提出交互覆盖率这一补充代码覆盖率的指标,并勾勒了可扩展的交互感知模糊测试研究议程,以揭示真实软件的完整故障拓扑。

问题
模糊测试通常只能发现孤立的崩溃,无法揭示一个故障如何掩蔽、触发或改变其他故障的表现,因而多故障交互结构被系统性地忽略。
方法
提出 CoFuzz:在检测到某站点崩溃后临时中和该故障并重新模糊测试,增量构建故障交互图,将关系分类为掩蔽、级联与协同,并用这些信号指导语料优先级排序与变异。
评估
摘要未报告具体实验评估,主要提出交互覆盖率指标以补充代码覆盖率,并给出可扩展交互感知模糊测试的研究议程。
原文摘要(Abstract)

Fuzz testing is highly effective at exposing individual faults, yet it systematically fails to reveal how faults interact within execution. A crash at one program point can mask, trigger, or alter the manifestation of others, leaving critical interactions undiscovered. We present CoFuzz, an interaction-aware fuzzing framework that shifts fuzzing from collecting isolated crashes to uncovering fault interaction structure. CoFuzz employs a probe-based mechanism that incrementally constructs a fault interaction map M during fuzzing: upon detecting a crash at site fi, CoFuzz temporarily neutralizes fi and re-fuzzes to expose previously masked faults, classifying relationships as masking, cascading, or synergistic. These interaction signals guide corpus prioritization and mutation, steering exploration toward fault combinations rather than coverage alone. We further introduce interaction coverage, a metric complementing code coverage, and outline a research agenda for scalable interaction-aware fuzzing that exposes the full fault topology of real software.

链接与引用

DOI 原文 · PDF(开放获取) ·

BibTeX
@inproceedings{paperbot12202,
  title = {Beyond the First Crash: Interaction-Aware Multi-fault Fuzzing},
  author = {Omar I. Al-Bataineh},
  booktitle = {ASE},
  year = {2026},
  doi = {10.1145/3832783.3834538}
}