A systematic review of fuzzing techniques. Issue 75 (June 2018)

• Record Type: Journal Article
• Authors: Chen, Chen; Cui, Baojiang; Ma, Jinxin; Wu, Runpu; Guo, Jianchao; Liu, Wenqian
• Is Part Of: Computers & security. Issue 75(2018)
• Page Start: 118
• Page End: 137
• Publication Date: 2018-06
• Subjects: Software bug -- Vulnerability -- Fuzzing -- Dynamic symbolic execution -- Coverage guide -- Grammar representation -- Scheduling algorithms -- Taint analysis -- Static analysis; Computer security -- Periodicals; Electronic data processing departments -- Security measures -- Periodicals; 005.805
• DOI: 10.1016/j.cose.2018.02.002
• Languages: English
• ISSNs: 0167-4048

Abstract

Abstract: Fuzzing is an effective and widely used technique for finding security bugs and vulnerabilities in software. It inputs irregular test data into a target program to try to trigger a vulnerable condition in the program execution. Since the first random fuzzing system was constructed, fuzzing efficiency has been greatly improved by combination with several useful techniques, including dynamic symbolic execution, coverage guide, grammar representation, scheduling algorithms, dynamic taint analysis, static analysis and machine learning. In this paper, we will systematically review these techniques and their corresponding representative fuzzing systems. By introducing the principles, advantages and disadvantages of these techniques, we hope to provide researchers with a systematic and deeper understanding of fuzzing techniques and provide some references for this field.