一句话:提出两种基于上下文无关文法的性能模糊测试器 TreeLine 和 SlackLine,可在数分钟内从有效输入中发现性能问题。
传统模糊测试常需长时间运行,以寻找触发安全漏洞的(多为无效的)输入,而较少关注合法输入引发的性能缺陷。本文提出 TreeLine 与 SlackLine,两种面向上下文无关文法描述的结构化文本程序的基于语法的模糊器,目标是在有效输入空间中快速发现性能问题。二者使用相同的文法规范与插桩执行后端,前端搜索策略分别为 Monte Carlo Tree Search 与推导树拼接。分离关注点便于研究者替换或扩展前端搜索与后端执行。作者强调其能在数分钟而非数小时内发现性能问题,但摘要未报告具体基准与定量结果。
TreeLine and SlackLine are grammar-based fuzzers for quickly finding performance problems in programs driven by richly structured text that can be described by context-free grammar. In contrast to long fuzzing campaigns to find (mostly invalid) inputs that trigger security vulnerabilities, TreeLine and SlackLine are designed to search for performance problems in the space of valid inputs in minutes rather than hours. The TreeLine and SlackLine front-ends differ in search strategy (Monte Carlo Tree Search or derivation tree splicing, respectively) but accept the same grammar specifications and rely on a common back-end for instrumented execution. Separation of concerns should facilitate use by other researchers who wish to explore alternatives and extensions of either the front or back ends.