Fuzzers for stateful systems: Survey and Research Directions

التفاصيل البيبلوغرافية
العنوان: Fuzzers for stateful systems: Survey and Research Directions
المؤلفون: Daniele, Cristian, Andarzian, Seyed Behnam, Poll, Erik
سنة النشر: 2023
المجموعة: Computer Science
مصطلحات موضوعية: Computer Science - Cryptography and Security, A.1, D.2
الوصف: Fuzzing is a security testing methodology effective in finding bugs. In a nutshell, a fuzzer sends multiple slightly malformed messages to the software under test, hoping for crashes or weird system behaviour. The methodology is relatively simple, although applications that keep internal states are challenging to fuzz. The research community has responded to this challenge by developing fuzzers tailored to stateful systems, but a clear understanding of the variety of strategies is still missing. In this paper, we present the first taxonomy of fuzzers for stateful systems and provide a systematic comparison and classification of these fuzzers.
نوع الوثيقة: Working Paper
URL الوصول: http://arxiv.org/abs/2301.02490
رقم الانضمام: edsarx.2301.02490
قاعدة البيانات: arXiv