Youtor
NDSS 2022 Fuzzing Fuzzing Configurations of Program Options
>> YOUR LINK HERE: ___ http://youtube.com/watch?v=SL9gB8EtEyA
NDSS 2022 Fuzzing Workshop • 3-1 Fuzzing Configurations of Program Options • While many real-world programs are shipped with configurations to enable/disable functionalities, fuzzers have mostly been applied to test single configurations of these programs. In this work, we first conduct an empirical study to understand how program configurations affect fuzzing performance. We find that limiting a campaign to a single configuration can result in failing to cover a significant amount of code. We also observe that different program configurations contribute differing amounts of code coverage, challenging the idea that each one can be efficiently fuzzed individually. Motivated by these two observations we propose ConfigFuzz, which can fuzz configurations along with normal inputs. ConfigFuzz transforms the target program to encode its program options within part of the fuzzable input, so existing fuzzers’ mutation operators can be reused to fuzz program configurations. We instantiate ConfigFuzz on 3 configurable, common fuzzing targets, and integrate their executions in FuzzBench. In our preliminary evaluation, ConfigFuzz nearly always outperforms the baseline fuzzing of a single configuration, and in one target also outperforms the fuzzing of a sequence of sampled configurations. However, we find that sometimes fuzzing a sequence of sampled configurations, with shared seeds, improves on ConfigFuzz. We propose hypotheses and plan to use data visualization to further understand the behavior of ConfigFuzz, and refine it, in the full evaluation. • Q A • • NDSS 2022 Fuzzing 3-1 Q A • PAPER • https://www.ndss-symposium.org/wp-con... • AUTHORS • Zenong Zhang (University of Texas at Dallas), George Klees (University of Maryland), Eric Wang (Poolesville High School), Michael Hicks (University of Maryland), Shiyi Wei (University of Texas at Dallas) • Network and Distributed System Security (NDSS) Symposium 2022, 24 – 28 April, 2022 Catamaran Resort Hotel Spa, San Diego, California, and online. • ABOUT NDSS • The Network and Distributed System Security Symposium (NDSS) fosters information exchange among researchers and practitioners of network and distributed system security. The target audience includes those interested in practical aspects of network and distributed system security, with a focus on actual system design and implementation. A major goal is to encourage and enable the Internet community to apply, deploy, and advance the state of available security technologies. • https://www.ndss-symposium.org/ • #NDSS #NDSS22 #NDSS2022 #InternetSecurity
#############################
