PTfuzz: Guided Fuzzing With Processor Trace Feedback

التفاصيل البيبلوغرافية
العنوان: PTfuzz: Guided Fuzzing With Processor Trace Feedback
المؤلفون: Yingqi Luo, Xu Zhou, Xugang Wu, Gen Zhang, Erxue Min
المصدر: IEEE Access, Vol 6, Pp 37302-37313 (2018)
بيانات النشر: Institute of Electrical and Electronics Engineers (IEEE), 2018.
سنة النشر: 2018
مصطلحات موضوعية: 021110 strategic, defence & security studies, Emulation, software security, greybox fuzzing, General Computer Science, business.industry, Computer science, 0211 other engineering and technologies, General Engineering, 020207 software engineering, 02 engineering and technology, Fuzz testing, Fuzzy logic, Feedback, Intel PT, Software, Software bug, Embedded system, 0202 electrical engineering, electronic engineering, information engineering, General Materials Science, lcsh:Electrical engineering. Electronics. Nuclear engineering, Instrumentation (computer programming), business, lcsh:TK1-9971, TRACE (psycholinguistics)
الوصف: Greybox fuzzing, such as american fuzzy lop (AFL), is very efficient in finding software vulnerability, which makes it the state-of-the-art fuzzing technology. Greybox fuzzing leverages the branch information collected during program running as feedback to guide choosing seeds. Current greybox fuzzing generally uses two kinds of methods to collect branch information: compile-time instrumentation (AFL) and emulation [AFL extended with QEMU emulation (QAFL)]. Compile-time instrumentation is efficient, but it does not support binary programs. Meanwhile, emulation supports binary programs, but its efficiency is very low. In this paper, we propose a greybox fuzzing approach named PTfuzz, which leverages hardware mechanism (Intel Processor Trace) to collect branch information. Our approach supports binary programs, just like the emulation method, while it gains a comparable performance with the compile-time instrumentation method. Our experiments show that PTfuzz can fuzz the original binary programs without any modification, and we gain a $3\times $ performance improvement compared to QAFL.
تدمد: 2169-3536
DOI: 10.1109/access.2018.2851237
URL الوصول: https://explore.openaire.eu/search/publication?articleId=doi_dedup___::892ab12ef93bb6e143623bf8458dd57d
https://doi.org/10.1109/access.2018.2851237
Rights: OPEN
رقم الانضمام: edsair.doi.dedup.....892ab12ef93bb6e143623bf8458dd57d
قاعدة البيانات: OpenAIRE
الوصف
تدمد:21693536
DOI:10.1109/access.2018.2851237