Thu 27 May 2021 04:45 - 05:05 at Blended Sessions Room 1 - 2.4.1. Fuzzing
This paper presents a coverage-guided grammar-based fuzzing technique for automatically generating a corpus of concise test inputs for programs such as compilers. We walk-through a case study of a compiler designed for education and the corresponding problem of generating meaningful test cases to provide to students. The prior state-of-the-art solution is a combination of fuzzing and test-case reduction techniques such as variants of delta-debugging. Our key insight is that instead of attempting to minimize convoluted fuzzer-generated test inputs, we can instead grow concise test inputs by construction using a form of iterative deepening. We call this approach Bonsai Fuzzing. Experimental results show that Bonsai Fuzzing can generate test corpora having inputs that are 16–45% smaller in size on average as compared to a fuzz-then-reduce approach, while achieving approximately the same code coverage and fault-detection capability.
Wed 26 MayDisplayed time zone: Amsterdam, Berlin, Bern, Rome, Stockholm, Vienna change
16:05 - 17:05 | 2.4.1. FuzzingTechnical Track at Blended Sessions Room 1 +12h Chair(s): Hakan Erdogmus Carnegie Mellon University | ||
16:05 20mPaper | Input AlgebrasTechnical Track Technical Track Rahul Gopinath CISPA Helmholtz Center for Information Security, Hamed Nemati CISPA Helmholtz Center for Information Security, Andreas Zeller CISPA Helmholtz Center for Information Security Pre-print Media Attached | ||
16:25 20mPaper | Fuzzing Symbolic ExpressionsTechnical Track Technical Track Luca Borzacchiello Sapienza University of Rome, Emilio Coppa Sapienza University of Rome, Camil Demetrescu Sapienza University of Rome Pre-print Media Attached | ||
16:45 20mPaper | Growing A Test Corpus with Bonsai FuzzingTechnical Track Technical Track Vasudev Vikram University of California, Berkeley, Rohan Padhye Carnegie Mellon University, Koushik Sen University of California, Berkeley Pre-print Media Attached |
Thu 27 MayDisplayed time zone: Amsterdam, Berlin, Bern, Rome, Stockholm, Vienna change
04:05 - 05:05 | |||
04:05 20mPaper | Input AlgebrasTechnical Track Technical Track Rahul Gopinath CISPA Helmholtz Center for Information Security, Hamed Nemati CISPA Helmholtz Center for Information Security, Andreas Zeller CISPA Helmholtz Center for Information Security Pre-print Media Attached | ||
04:25 20mPaper | Fuzzing Symbolic ExpressionsTechnical Track Technical Track Luca Borzacchiello Sapienza University of Rome, Emilio Coppa Sapienza University of Rome, Camil Demetrescu Sapienza University of Rome Pre-print Media Attached | ||
04:45 20mPaper | Growing A Test Corpus with Bonsai FuzzingTechnical Track Technical Track Vasudev Vikram University of California, Berkeley, Rohan Padhye Carnegie Mellon University, Koushik Sen University of California, Berkeley Pre-print Media Attached |