Energy distribution matters in greybox fuzzing

Lingyun Situ, Linzhang Wang, Xuandong Li, Le Guan, Wenhui Zhang, Peng Liu

Research output: Chapter in Book/Report/Conference proceedingConference contribution

Abstract

Existing energy distribution strategies of AFL and its variants have two limitations. (1) They focus on increasing coverage but ignore the fact that some code regions are more likely to be vulnerable. (2) They randomly select mutators and deterministically specify the number to mutator, therefore lack insights regarding which granularity of mutators are more helpful at that particular stage. We improve the two limitations of AFL's fuzzing energy distribution in a principled way. We direct the fuzzer to strengthen fuzzing toward regions that have a higher probability to contain vulnerabilities based on static semantic metrics of the target program. Furthermore, granularity-aware scheduling of mutators is proposed, which dynamically assigns ratios to different mutation operators. We implemented these improvements as an extension to AFL. Large-scale experimental evaluations showed the effectiveness of each improvement and performance of integration. The proposed tool has helped us find 12 new bugs and expose three new CVEs.

Original languageEnglish (US)
Title of host publicationProceedings - 2019 IEEE/ACM 41st International Conference on Software Engineering
Subtitle of host publicationCompanion, ICSE-Companion 2019
PublisherInstitute of Electrical and Electronics Engineers Inc.
Pages270-271
Number of pages2
ISBN (Electronic)9781728117645
DOIs
StatePublished - May 1 2019
Event41st IEEE/ACM International Conference on Software Engineering: Companion, ICSE-Companion 2019 - Montreal, Canada
Duration: May 25 2019May 31 2019

Publication series

NameProceedings - 2019 IEEE/ACM 41st International Conference on Software Engineering: Companion, ICSE-Companion 2019

Conference

Conference41st IEEE/ACM International Conference on Software Engineering: Companion, ICSE-Companion 2019
CountryCanada
CityMontreal
Period5/25/195/31/19

Fingerprint

distribution strategy
Semantics
Scheduling
energy
scheduling
vulnerability
coverage
semantics
lack
evaluation
performance
Energy
Evaluation
Operator
Mutation
Distribution strategy
Vulnerability

All Science Journal Classification (ASJC) codes

  • Organizational Behavior and Human Resource Management
  • Software
  • Safety, Risk, Reliability and Quality
  • Education

Cite this

Situ, L., Wang, L., Li, X., Guan, L., Zhang, W., & Liu, P. (2019). Energy distribution matters in greybox fuzzing. In Proceedings - 2019 IEEE/ACM 41st International Conference on Software Engineering: Companion, ICSE-Companion 2019 (pp. 270-271). [8802844] (Proceedings - 2019 IEEE/ACM 41st International Conference on Software Engineering: Companion, ICSE-Companion 2019). Institute of Electrical and Electronics Engineers Inc.. https://doi.org/10.1109/ICSE-Companion.2019.00109
Situ, Lingyun ; Wang, Linzhang ; Li, Xuandong ; Guan, Le ; Zhang, Wenhui ; Liu, Peng. / Energy distribution matters in greybox fuzzing. Proceedings - 2019 IEEE/ACM 41st International Conference on Software Engineering: Companion, ICSE-Companion 2019. Institute of Electrical and Electronics Engineers Inc., 2019. pp. 270-271 (Proceedings - 2019 IEEE/ACM 41st International Conference on Software Engineering: Companion, ICSE-Companion 2019).
@inproceedings{5c52594eff3c4c96aa8db19ebf9dc87e,
title = "Energy distribution matters in greybox fuzzing",
abstract = "Existing energy distribution strategies of AFL and its variants have two limitations. (1) They focus on increasing coverage but ignore the fact that some code regions are more likely to be vulnerable. (2) They randomly select mutators and deterministically specify the number to mutator, therefore lack insights regarding which granularity of mutators are more helpful at that particular stage. We improve the two limitations of AFL's fuzzing energy distribution in a principled way. We direct the fuzzer to strengthen fuzzing toward regions that have a higher probability to contain vulnerabilities based on static semantic metrics of the target program. Furthermore, granularity-aware scheduling of mutators is proposed, which dynamically assigns ratios to different mutation operators. We implemented these improvements as an extension to AFL. Large-scale experimental evaluations showed the effectiveness of each improvement and performance of integration. The proposed tool has helped us find 12 new bugs and expose three new CVEs.",
author = "Lingyun Situ and Linzhang Wang and Xuandong Li and Le Guan and Wenhui Zhang and Peng Liu",
year = "2019",
month = "5",
day = "1",
doi = "10.1109/ICSE-Companion.2019.00109",
language = "English (US)",
series = "Proceedings - 2019 IEEE/ACM 41st International Conference on Software Engineering: Companion, ICSE-Companion 2019",
publisher = "Institute of Electrical and Electronics Engineers Inc.",
pages = "270--271",
booktitle = "Proceedings - 2019 IEEE/ACM 41st International Conference on Software Engineering",
address = "United States",

}

Situ, L, Wang, L, Li, X, Guan, L, Zhang, W & Liu, P 2019, Energy distribution matters in greybox fuzzing. in Proceedings - 2019 IEEE/ACM 41st International Conference on Software Engineering: Companion, ICSE-Companion 2019., 8802844, Proceedings - 2019 IEEE/ACM 41st International Conference on Software Engineering: Companion, ICSE-Companion 2019, Institute of Electrical and Electronics Engineers Inc., pp. 270-271, 41st IEEE/ACM International Conference on Software Engineering: Companion, ICSE-Companion 2019, Montreal, Canada, 5/25/19. https://doi.org/10.1109/ICSE-Companion.2019.00109

Energy distribution matters in greybox fuzzing. / Situ, Lingyun; Wang, Linzhang; Li, Xuandong; Guan, Le; Zhang, Wenhui; Liu, Peng.

Proceedings - 2019 IEEE/ACM 41st International Conference on Software Engineering: Companion, ICSE-Companion 2019. Institute of Electrical and Electronics Engineers Inc., 2019. p. 270-271 8802844 (Proceedings - 2019 IEEE/ACM 41st International Conference on Software Engineering: Companion, ICSE-Companion 2019).

Research output: Chapter in Book/Report/Conference proceedingConference contribution

TY - GEN

T1 - Energy distribution matters in greybox fuzzing

AU - Situ, Lingyun

AU - Wang, Linzhang

AU - Li, Xuandong

AU - Guan, Le

AU - Zhang, Wenhui

AU - Liu, Peng

PY - 2019/5/1

Y1 - 2019/5/1

N2 - Existing energy distribution strategies of AFL and its variants have two limitations. (1) They focus on increasing coverage but ignore the fact that some code regions are more likely to be vulnerable. (2) They randomly select mutators and deterministically specify the number to mutator, therefore lack insights regarding which granularity of mutators are more helpful at that particular stage. We improve the two limitations of AFL's fuzzing energy distribution in a principled way. We direct the fuzzer to strengthen fuzzing toward regions that have a higher probability to contain vulnerabilities based on static semantic metrics of the target program. Furthermore, granularity-aware scheduling of mutators is proposed, which dynamically assigns ratios to different mutation operators. We implemented these improvements as an extension to AFL. Large-scale experimental evaluations showed the effectiveness of each improvement and performance of integration. The proposed tool has helped us find 12 new bugs and expose three new CVEs.

AB - Existing energy distribution strategies of AFL and its variants have two limitations. (1) They focus on increasing coverage but ignore the fact that some code regions are more likely to be vulnerable. (2) They randomly select mutators and deterministically specify the number to mutator, therefore lack insights regarding which granularity of mutators are more helpful at that particular stage. We improve the two limitations of AFL's fuzzing energy distribution in a principled way. We direct the fuzzer to strengthen fuzzing toward regions that have a higher probability to contain vulnerabilities based on static semantic metrics of the target program. Furthermore, granularity-aware scheduling of mutators is proposed, which dynamically assigns ratios to different mutation operators. We implemented these improvements as an extension to AFL. Large-scale experimental evaluations showed the effectiveness of each improvement and performance of integration. The proposed tool has helped us find 12 new bugs and expose three new CVEs.

UR - http://www.scopus.com/inward/record.url?scp=85071847178&partnerID=8YFLogxK

UR - http://www.scopus.com/inward/citedby.url?scp=85071847178&partnerID=8YFLogxK

U2 - 10.1109/ICSE-Companion.2019.00109

DO - 10.1109/ICSE-Companion.2019.00109

M3 - Conference contribution

AN - SCOPUS:85071847178

T3 - Proceedings - 2019 IEEE/ACM 41st International Conference on Software Engineering: Companion, ICSE-Companion 2019

SP - 270

EP - 271

BT - Proceedings - 2019 IEEE/ACM 41st International Conference on Software Engineering

PB - Institute of Electrical and Electronics Engineers Inc.

ER -

Situ L, Wang L, Li X, Guan L, Zhang W, Liu P. Energy distribution matters in greybox fuzzing. In Proceedings - 2019 IEEE/ACM 41st International Conference on Software Engineering: Companion, ICSE-Companion 2019. Institute of Electrical and Electronics Engineers Inc. 2019. p. 270-271. 8802844. (Proceedings - 2019 IEEE/ACM 41st International Conference on Software Engineering: Companion, ICSE-Companion 2019). https://doi.org/10.1109/ICSE-Companion.2019.00109