Skip to main navigation Skip to search Skip to main content

GeMuFuzz: Integrating Generative and Mutational Fuzzing with Deep Learning

  • Zheng Zhang*
  • , Rui Ma
  • , Yuqi Zhai
  • , Yuche Yang
  • , Siqi Zhao
  • , Hongming Chen
  • *Corresponding author for this work
  • Beijing Institute of Technology
  • Industrial and Commercial Bank of China Limited

Research output: Chapter in Book/Report/Conference proceedingConference contributionpeer-review

Abstract

Current grey-box protocol fuzzers may not work well with poor-quality initial seeds. That makes it difficult to cover diverse message types and protocol states defined in the protocol specification. To mitigate this issue, we propose GeMuFuzz, which integrates deep learning based seed generation into mutation-based grey-box fuzzing. Moreover, GeMuFuzz considers the high-dimensional information implied in seeds generated during fuzzing. We also evaluated the performance of GeMuFuzz by comparing with the baseline fuzzer AFLNET on 8 typical protocol implementations of ProFuzzBench. GeMuFuzz discovered 5.07% more paths and 6.19% more crashes, as well as 8.57% more states and 10.54% more state transitions than AFLNET. The experimental results highlight that GeMuFuzz could improve the effectiveness of fuzzing.

Original languageEnglish
Title of host publicationProceedings - 2024 IEEE 23rd International Conference on Trust, Security and Privacy in Computing and Communications, TrustCom 2024, 18th IEEE International Conference on Big Data Science and Engineering, BigDataSE 2024, 27th IEEE International Conference on Computational Science and Engineering, CSE 2024, 22nd International Conferences on Embedded and Ubiquitous Computing, EUC 2024 and 12th IEEE International Conference on Smart City and Informatization, iSCI 2024
PublisherInstitute of Electrical and Electronics Engineers Inc.
Pages1889-1895
Number of pages7
Edition2024
ISBN (Electronic)9798331506209, 9798331506209
DOIs
Publication statusPublished - 2024
Externally publishedYes
Event23rd IEEE International Conference on Trust, Security and Privacy in Computing and Communications, TrustCom 2024 - Sanya, China
Duration: 17 Dec 202421 Dec 2024

Conference

Conference23rd IEEE International Conference on Trust, Security and Privacy in Computing and Communications, TrustCom 2024
Country/TerritoryChina
CitySanya
Period17/12/2421/12/24

Keywords

  • deep learning
  • protocol fuzzing
  • seed generation

Fingerprint

Dive into the research topics of 'GeMuFuzz: Integrating Generative and Mutational Fuzzing with Deep Learning'. Together they form a unique fingerprint.

Cite this