跳到主要导航 跳到搜索 跳到主要内容

GeMuFuzz: Integrating Generative and Mutational Fuzzing with Deep Learning

  • Zheng Zhang*
  • , Rui Ma
  • , Yuqi Zhai
  • , Yuche Yang
  • , Siqi Zhao
  • , Hongming Chen
  • *此作品的通讯作者
  • Beijing Institute of Technology
  • Industrial and Commercial Bank of China Limited

科研成果: 书/报告/会议事项章节会议稿件同行评审

摘要

Current grey-box protocol fuzzers may not work well with poor-quality initial seeds. That makes it difficult to cover diverse message types and protocol states defined in the protocol specification. To mitigate this issue, we propose GeMuFuzz, which integrates deep learning based seed generation into mutation-based grey-box fuzzing. Moreover, GeMuFuzz considers the high-dimensional information implied in seeds generated during fuzzing. We also evaluated the performance of GeMuFuzz by comparing with the baseline fuzzer AFLNET on 8 typical protocol implementations of ProFuzzBench. GeMuFuzz discovered 5.07% more paths and 6.19% more crashes, as well as 8.57% more states and 10.54% more state transitions than AFLNET. The experimental results highlight that GeMuFuzz could improve the effectiveness of fuzzing.

源语言英语
主期刊名Proceedings - 2024 IEEE 23rd International Conference on Trust, Security and Privacy in Computing and Communications, TrustCom 2024, 18th IEEE International Conference on Big Data Science and Engineering, BigDataSE 2024, 27th IEEE International Conference on Computational Science and Engineering, CSE 2024, 22nd International Conferences on Embedded and Ubiquitous Computing, EUC 2024 and 12th IEEE International Conference on Smart City and Informatization, iSCI 2024
出版商Institute of Electrical and Electronics Engineers Inc.
1889-1895
页数7
版本2024
ISBN(电子版)9798331506209, 9798331506209
DOI
出版状态已出版 - 2024
已对外发布
活动23rd IEEE International Conference on Trust, Security and Privacy in Computing and Communications, TrustCom 2024 - Sanya, 中国
期限: 17 12月 202421 12月 2024

会议

会议23rd IEEE International Conference on Trust, Security and Privacy in Computing and Communications, TrustCom 2024
国家/地区中国
Sanya
时期17/12/2421/12/24

学术指纹

探究 'GeMuFuzz: Integrating Generative and Mutational Fuzzing with Deep Learning' 的科研主题。它们共同构成独一无二的学术指纹。

引用此