Fuzz testing based on virtualization technology

Longbin Zhou; Zhoujun Li

doi:10.1145/3194452.3194477

Fuzz testing based on virtualization technology

Longbin Zhou^*
, Zhoujun Li

^*Corresponding author for this work

School of Computer Science and Engineering

Beihang University

Research output: Chapter in Book/Report/Conference proceeding › Conference contribution › peer-review

Abstract

As people pay more and more attention to software security, the technology of vulnerability mining has gradually become the research hotspot in the industry. Fuzz testing is the mainstream of the vulnerability mining technology. In order to solve the shortcomings of the traditional document fuzz testing, such as efficiency is not high and the function is missing, so a new method of document fuzz testing will be introduced. In this paper, there will be a new way to streamline the test sample. It depends on the code coverage. So the smallest sample set of maximum code coverage will be gotten by using this method. It relies on virtual machine technology, it is more reliable and more accurate than Binary instrumentation technology. This method can effectively reduce a large number of invalid test.

Original language	English
Title of host publication	Proceedings of 2018 International Conference on Computing and Artificial Intelligence, ICCAI 2018
Publisher	Association for Computing Machinery
Pages	57-61
Number of pages	5
ISBN (Electronic)	9781450364195
DOIs	https://doi.org/10.1145/3194452.3194477
State	Published - 12 Mar 2018
Event	1st International Conference on Computing and Artificial Intelligence, ICCAI 2018 - Chengdu, China Duration: 12 Mar 2018 → 14 Mar 2018

Publication series

Name	ACM International Conference Proceeding Series

Conference

Conference	1st International Conference on Computing and Artificial Intelligence, ICCAI 2018
Country/Territory	China
City	Chengdu
Period	12/03/18 → 14/03/18

Keywords

Code coverage
Fuzz testing
Virtualization Technology

Access to Document

10.1145/3194452.3194477

Cite this

@inproceedings{d06e9ebe7b7b460da8e7d2629d2d07ec,

title = "Fuzz testing based on virtualization technology",

abstract = "As people pay more and more attention to software security, the technology of vulnerability mining has gradually become the research hotspot in the industry. Fuzz testing is the mainstream of the vulnerability mining technology. In order to solve the shortcomings of the traditional document fuzz testing, such as efficiency is not high and the function is missing, so a new method of document fuzz testing will be introduced. In this paper, there will be a new way to streamline the test sample. It depends on the code coverage. So the smallest sample set of maximum code coverage will be gotten by using this method. It relies on virtual machine technology, it is more reliable and more accurate than Binary instrumentation technology. This method can effectively reduce a large number of invalid test.",

keywords = "Code coverage, Fuzz testing, Virtualization Technology",

author = "Longbin Zhou and Zhoujun Li",

note = "Publisher Copyright: {\textcopyright} 2018 Association for Computing Machinery.; 1st International Conference on Computing and Artificial Intelligence, ICCAI 2018 ; Conference date: 12-03-2018 Through 14-03-2018",

year = "2018",

month = mar,

day = "12",

doi = "10.1145/3194452.3194477",

language = "英语",

series = "ACM International Conference Proceeding Series",

publisher = "Association for Computing Machinery ",

pages = "57--61",

booktitle = "Proceedings of 2018 International Conference on Computing and Artificial Intelligence, ICCAI 2018",

address = "美国",

}

Zhou, L & Li, Z 2018, Fuzz testing based on virtualization technology. in Proceedings of 2018 International Conference on Computing and Artificial Intelligence, ICCAI 2018. ACM International Conference Proceeding Series, Association for Computing Machinery , pp. 57-61, 1st International Conference on Computing and Artificial Intelligence, ICCAI 2018, Chengdu, China, 12/03/18. https://doi.org/10.1145/3194452.3194477

Fuzz testing based on virtualization technology. / Zhou, Longbin; Li, Zhoujun.
Proceedings of 2018 International Conference on Computing and Artificial Intelligence, ICCAI 2018. Association for Computing Machinery , 2018. p. 57-61 (ACM International Conference Proceeding Series).

Research output: Chapter in Book/Report/Conference proceeding › Conference contribution › peer-review

TY - GEN

T1 - Fuzz testing based on virtualization technology

AU - Zhou, Longbin

AU - Li, Zhoujun

PY - 2018/3/12

Y1 - 2018/3/12

N2 - As people pay more and more attention to software security, the technology of vulnerability mining has gradually become the research hotspot in the industry. Fuzz testing is the mainstream of the vulnerability mining technology. In order to solve the shortcomings of the traditional document fuzz testing, such as efficiency is not high and the function is missing, so a new method of document fuzz testing will be introduced. In this paper, there will be a new way to streamline the test sample. It depends on the code coverage. So the smallest sample set of maximum code coverage will be gotten by using this method. It relies on virtual machine technology, it is more reliable and more accurate than Binary instrumentation technology. This method can effectively reduce a large number of invalid test.

AB - As people pay more and more attention to software security, the technology of vulnerability mining has gradually become the research hotspot in the industry. Fuzz testing is the mainstream of the vulnerability mining technology. In order to solve the shortcomings of the traditional document fuzz testing, such as efficiency is not high and the function is missing, so a new method of document fuzz testing will be introduced. In this paper, there will be a new way to streamline the test sample. It depends on the code coverage. So the smallest sample set of maximum code coverage will be gotten by using this method. It relies on virtual machine technology, it is more reliable and more accurate than Binary instrumentation technology. This method can effectively reduce a large number of invalid test.

KW - Code coverage

KW - Fuzz testing

KW - Virtualization Technology

UR - https://www.scopus.com/pages/publications/85048365519

U2 - 10.1145/3194452.3194477

DO - 10.1145/3194452.3194477

M3 - 会议稿件

AN - SCOPUS:85048365519

T3 - ACM International Conference Proceeding Series

SP - 57

EP - 61

BT - Proceedings of 2018 International Conference on Computing and Artificial Intelligence, ICCAI 2018

PB - Association for Computing Machinery

T2 - 1st International Conference on Computing and Artificial Intelligence, ICCAI 2018

Y2 - 12 March 2018 through 14 March 2018

ER -

Fuzz testing based on virtualization technology

Abstract

Publication series

Conference

Keywords

Access to Document

Other files and links

Fingerprint

Cite this