Industrial Oriented Evaluation of Fuzzing Techniques

Mingzhe Wang; Jie Liang; Chijin Zhou; Yuanliang Chen; Zhiyong Wu; Yu Jiang

doi:10.1109/ICST49551.2021.00043

Industrial Oriented Evaluation of Fuzzing Techniques

Mingzhe Wang
, Jie Liang
, Chijin Zhou
, Yuanliang Chen
, Zhiyong Wu
, Yu Jiang

Tsinghua University

科研成果: 书/报告/会议事项章节 › 会议稿件 › 同行评审

3 引用（Scopus）

摘要

uzzing is a promising method for discovering vulnerabilities. Recently, various techniques are developed to improve the efficiency of fuzzing, and impressive gains are observed in evaluation results. However, evaluation is complex, as many factors affect the results, for example, test suites, baseline and metrics. Even more, most experiment setups are lab-oriented, lacking industrial settings such as large code-base and parallel runs. The correlation between the academic evaluation results and the bug-finding ability in real industrial settings has not been sufficiently studied.

源语言	英语
主期刊名	Proceedings - 2021 IEEE 14th International Conference on Software Testing, Verification and Validation, ICST 2021
出版商	Institute of Electrical and Electronics Engineers Inc.
页	306-317
页数	12
ISBN（电子版）	9781728168364
DOI	https://doi.org/10.1109/ICST49551.2021.00043
出版状态	已出版 - 4月 2021
已对外发布	是
活动	14th IEEE International Conference on Software Testing, Verification and Validation, ICST 2021 - Virtual, Porto de Galinhas, 巴西期限: 12 4月 2021 → 16 4月 2021

出版系列

姓名	Proceedings - 2021 IEEE 14th International Conference on Software Testing, Verification and Validation, ICST 2021

会议

会议	14th IEEE International Conference on Software Testing, Verification and Validation, ICST 2021
国家/地区	巴西
市	Virtual, Porto de Galinhas
时期	12/04/21 → 16/04/21

访问文件

10.1109/ICST49551.2021.00043

其它文件与链接

链接到 Scopus 的出版物

引用此

Wang, M., Liang, J., Zhou, C., Chen, Y., Wu, Z., & Jiang, Y. (2021). Industrial Oriented Evaluation of Fuzzing Techniques. 在 Proceedings - 2021 IEEE 14th International Conference on Software Testing, Verification and Validation, ICST 2021 (页码 306-317). 文章 9438558 (Proceedings - 2021 IEEE 14th International Conference on Software Testing, Verification and Validation, ICST 2021). Institute of Electrical and Electronics Engineers Inc.. https://doi.org/10.1109/ICST49551.2021.00043

Wang, Mingzhe ; Liang, Jie ; Zhou, Chijin 等. / Industrial Oriented Evaluation of Fuzzing Techniques. Proceedings - 2021 IEEE 14th International Conference on Software Testing, Verification and Validation, ICST 2021. Institute of Electrical and Electronics Engineers Inc., 2021. 页码 306-317 (Proceedings - 2021 IEEE 14th International Conference on Software Testing, Verification and Validation, ICST 2021).

@inproceedings{264ee9e35bca4b91b41f19147db203c2,

title = "Industrial Oriented Evaluation of Fuzzing Techniques",

abstract = "uzzing is a promising method for discovering vulnerabilities. Recently, various techniques are developed to improve the efficiency of fuzzing, and impressive gains are observed in evaluation results. However, evaluation is complex, as many factors affect the results, for example, test suites, baseline and metrics. Even more, most experiment setups are lab-oriented, lacking industrial settings such as large code-base and parallel runs. The correlation between the academic evaluation results and the bug-finding ability in real industrial settings has not been sufficiently studied.",

keywords = "Fuzzing Optimizations, Industry Settings, Pitfalls and Solutions",

author = "Mingzhe Wang and Jie Liang and Chijin Zhou and Yuanliang Chen and Zhiyong Wu and Yu Jiang",

note = "Publisher Copyright: {\textcopyright} 2021 IEEE.; 14th IEEE International Conference on Software Testing, Verification and Validation, ICST 2021 ; Conference date: 12-04-2021 Through 16-04-2021",

year = "2021",

month = apr,

doi = "10.1109/ICST49551.2021.00043",

language = "英语",

series = "Proceedings - 2021 IEEE 14th International Conference on Software Testing, Verification and Validation, ICST 2021",

publisher = "Institute of Electrical and Electronics Engineers Inc.",

pages = "306--317",

booktitle = "Proceedings - 2021 IEEE 14th International Conference on Software Testing, Verification and Validation, ICST 2021",

address = "美国",

}

Wang, M, Liang, J, Zhou, C, Chen, Y, Wu, Z & Jiang, Y 2021, Industrial Oriented Evaluation of Fuzzing Techniques. 在 Proceedings - 2021 IEEE 14th International Conference on Software Testing, Verification and Validation, ICST 2021., 9438558, Proceedings - 2021 IEEE 14th International Conference on Software Testing, Verification and Validation, ICST 2021, Institute of Electrical and Electronics Engineers Inc., 页码 306-317, 14th IEEE International Conference on Software Testing, Verification and Validation, ICST 2021, Virtual, Porto de Galinhas, 巴西, 12/04/21. https://doi.org/10.1109/ICST49551.2021.00043

Industrial Oriented Evaluation of Fuzzing Techniques. / Wang, Mingzhe; Liang, Jie; Zhou, Chijin 等.
Proceedings - 2021 IEEE 14th International Conference on Software Testing, Verification and Validation, ICST 2021. Institute of Electrical and Electronics Engineers Inc., 2021. 页码 306-317 9438558 (Proceedings - 2021 IEEE 14th International Conference on Software Testing, Verification and Validation, ICST 2021).

科研成果: 书/报告/会议事项章节 › 会议稿件 › 同行评审

TY - GEN

T1 - Industrial Oriented Evaluation of Fuzzing Techniques

AU - Wang, Mingzhe

AU - Liang, Jie

AU - Zhou, Chijin

AU - Chen, Yuanliang

AU - Wu, Zhiyong

AU - Jiang, Yu

PY - 2021/4

Y1 - 2021/4

N2 - uzzing is a promising method for discovering vulnerabilities. Recently, various techniques are developed to improve the efficiency of fuzzing, and impressive gains are observed in evaluation results. However, evaluation is complex, as many factors affect the results, for example, test suites, baseline and metrics. Even more, most experiment setups are lab-oriented, lacking industrial settings such as large code-base and parallel runs. The correlation between the academic evaluation results and the bug-finding ability in real industrial settings has not been sufficiently studied.

AB - uzzing is a promising method for discovering vulnerabilities. Recently, various techniques are developed to improve the efficiency of fuzzing, and impressive gains are observed in evaluation results. However, evaluation is complex, as many factors affect the results, for example, test suites, baseline and metrics. Even more, most experiment setups are lab-oriented, lacking industrial settings such as large code-base and parallel runs. The correlation between the academic evaluation results and the bug-finding ability in real industrial settings has not been sufficiently studied.

KW - Fuzzing Optimizations

KW - Industry Settings

KW - Pitfalls and Solutions

UR - https://www.scopus.com/pages/publications/85107970736

U2 - 10.1109/ICST49551.2021.00043

DO - 10.1109/ICST49551.2021.00043

M3 - 会议稿件

AN - SCOPUS:85107970736

T3 - Proceedings - 2021 IEEE 14th International Conference on Software Testing, Verification and Validation, ICST 2021

SP - 306

EP - 317

BT - Proceedings - 2021 IEEE 14th International Conference on Software Testing, Verification and Validation, ICST 2021

PB - Institute of Electrical and Electronics Engineers Inc.

T2 - 14th IEEE International Conference on Software Testing, Verification and Validation, ICST 2021

Y2 - 12 April 2021 through 16 April 2021

ER -

Wang M, Liang J, Zhou C, Chen Y, Wu Z, Jiang Y. Industrial Oriented Evaluation of Fuzzing Techniques. 在 Proceedings - 2021 IEEE 14th International Conference on Software Testing, Verification and Validation, ICST 2021. Institute of Electrical and Electronics Engineers Inc. 2021. 页码 306-317. 9438558. (Proceedings - 2021 IEEE 14th International Conference on Software Testing, Verification and Validation, ICST 2021). doi: 10.1109/ICST49551.2021.00043

Industrial Oriented Evaluation of Fuzzing Techniques

摘要

出版系列

会议

访问文件

其它文件与链接

指纹

引用此