paperbot · PL 论文追踪

全部论文 待读 收藏

P2 Visualizing and Understanding the Internals of Fuzzing

可视化并理解模糊测试的内部机制
ASE Proceedings of the 39th IEEE/ACM International Conference on Automated Software Engineering2024匹配度 3/10 · 该论文属于灰盒模糊测试(动态分析/测试)领域,与用户核心关注的静态分析、LLM/Agent 驱动的程序分析与形式化验证、浮点及贝叶斯程序分析几乎没有直接交集。仅在方法论层面(指出仅用覆盖率/漏洞数评估混淆了模糊测试内部组件的实际效果)与用户偏好“问题驱动、指出已有 benchmark/评估失效”的取向有一定共鸣,但研究对象与问题域偏离较远。引用 2 inbox
Sriteja Kummita, Zenong Zhang, Eric Bodden, Shiyi Wei
crossref: 2026-09-12

AI 速览

一句话:提出可视化手段来揭示灰盒模糊测试内部组件的行为,以弥补仅靠覆盖率或漏洞发现能力评估改进效果的不足。

灰盒模糊测试已被广泛研究并实用化,大量论文针对模糊测试器的内部组件提出改进。然而,现有评估大多只报告运行时代码覆盖率或漏洞发现能力,而改进实际发生在模糊测试器内部组件上,因此这类实验结果不足以判断内部改动对模糊测试器性能的真实影响。本文通过初步文献调研指出这一评估缺口,并提出对模糊测试器内部进行可视化与理解的方法,旨在让研究者与开发者能够观察和分析内部组件的行为,从而更准确地评估改进是否真正有效、是否具有泛化性。

问题
灰盒模糊测试的改进多针对模糊测试器内部组件,但现有评估主要依赖运行时覆盖率或漏洞发现能力,无法有效衡量内部改动对性能的实际影响。
方法
通过初步文献调研揭示评估缺口,并提出对灰盒模糊测试器内部组件进行可视化与理解的手段。
评估
摘要未给出具体评估结果,仅说明基于文献调研论证现有评估方式不足以判断内部改动的影响,并以此引出可视化内部机制的研究方向。
原文摘要(Abstract)

Greybox fuzzing is one of the fuzzing techniques that has been extensively researched and used in practice. Plenty of publications propose improvements to greybox fuzzing. However, the extent to which these improvements really work and generalize is not yet understood: our preliminary study of the recent literature in grey-box fuzzing shows that most papers evaluate their fuzzers in terms of runtime code coverage or bug-finding capability, although the improvements made are to the internal components (or internals) of the fuzzer. Results drawn from such experiments are insufficient to judge the impact the changes in the fuzzer's internals have on its performance.

链接与引用

DOI 原文 · PDF(开放获取) ·

BibTeX
@inproceedings{paperbot8277,
  title = {Visualizing and Understanding the Internals of Fuzzing},
  author = {Sriteja Kummita and Zenong Zhang and Eric Bodden and Shiyi Wei},
  booktitle = {ASE},
  year = {2024},
  doi = {10.1145/3691620.3695284}
}