一句话:提出 Zeror,旨在降低插桩开销并保持覆盖率准确性,从而稳定提升模糊测试的漏洞检测性能。
覆盖率引导的模糊测试是漏洞检测的主流技术,但当前方法因插桩开销而性能显著下降。已有工作通过减少插桩开销来提高模糊测试速度,却牺牲了覆盖率准确性,导致漏洞检测性能不稳定。Zeror 针对这一权衡问题,试图在低插桩开销与高覆盖率准确性之间取得平衡,从而提升模糊测试的整体效率与稳定性。由于摘要未给出具体技术细节与实验数据,其方法设计与评估结果尚待正文确认。
Coverage-guided fuzzing is one of the most popular software testing techniques for vulnerability detection. While effective, current fuzzing methods suffer from significant performance penalty due to instrumentation overhead, which limits its practical use. Existing solutions improve the fuzzing speed by decreasing instrumentation overheads but sacrificing coverage accuracy, which results in unstable performance of vulnerability detection.
DOI 原文 ·
@inproceedings{paperbot5989,
title = {Zeror},
author = {Chijin Zhou and Mingzhe Wang and Jie Liang and Zhe Liu and Yu Jiang},
booktitle = {ASE},
year = {2020},
doi = {10.1145/3324884.3416572}
}