Automatic and lightweight grammar generation for fuzz testing
DC Field | Value | Language |
---|---|---|
dc.contributor.author | Kim, Su Yong | - |
dc.contributor.author | Cha, Sungdeok | - |
dc.contributor.author | Bae, Doo-Hwan | - |
dc.date.accessioned | 2021-09-06T00:16:22Z | - |
dc.date.available | 2021-09-06T00:16:22Z | - |
dc.date.created | 2021-06-14 | - |
dc.date.issued | 2013-07 | - |
dc.identifier.issn | 0167-4048 | - |
dc.identifier.uri | https://scholar.korea.ac.kr/handle/2021.sw.korea/102854 | - |
dc.description.abstract | Blackbox fuzz testing can only test a small portion of code when rigorously checking the well-formedness of input values. To overcome this problem, blackbox fuzz testing is performed using a grammar that delineates the format information of input values. However, it is almost impossible to manually construct a grammar if the input specifications are not known. We propose an alternative technique: the automatic generation of fuzzing grammars using API-level concolic testing. API-level concolic testing collects constraints at the library function level rather than the instruction level. While API-level concolic testing may be less accurate than instruction-level concolic testing, it is highly useful for speedily generating fuzzing grammars that enhance code coverage for real-world programs. To verify the feasibility of the proposed concept, we implemented the system for generating ActiveX control fuzzing grammars, named YMIR. The experiment results showed that the YMIR system was capable of generating fuzzing grammars that can raise branch coverage for ActiveX control using highly-structured input string by 15-50%. In addition, the YMIR system discovered two new vulnerabilities revealed only when input values are well-formed. Automatic fuzzing grammar generation through API-level concolic testing is not restricted to the testing of ActiveX controls; it should also be applicable to other string processing program whose source code is unavailable. (C) 2013 Elsevier Ltd. All rights reserved. | - |
dc.language | English | - |
dc.language.iso | en | - |
dc.publisher | ELSEVIER ADVANCED TECHNOLOGY | - |
dc.title | Automatic and lightweight grammar generation for fuzz testing | - |
dc.type | Article | - |
dc.contributor.affiliatedAuthor | Cha, Sungdeok | - |
dc.identifier.doi | 10.1016/j.cose.2013.02.001 | - |
dc.identifier.scopusid | 2-s2.0-84875148672 | - |
dc.identifier.wosid | 000319307700001 | - |
dc.identifier.bibliographicCitation | COMPUTERS & SECURITY, v.36, pp.1 - 11 | - |
dc.relation.isPartOf | COMPUTERS & SECURITY | - |
dc.citation.title | COMPUTERS & SECURITY | - |
dc.citation.volume | 36 | - |
dc.citation.startPage | 1 | - |
dc.citation.endPage | 11 | - |
dc.type.rims | ART | - |
dc.type.docType | Article | - |
dc.description.journalClass | 1 | - |
dc.description.journalRegisteredClass | scie | - |
dc.description.journalRegisteredClass | scopus | - |
dc.relation.journalResearchArea | Computer Science | - |
dc.relation.journalWebOfScienceCategory | Computer Science, Information Systems | - |
dc.subject.keywordAuthor | Hybrid fuzz testing | - |
dc.subject.keywordAuthor | Whitebox fuzz testing | - |
dc.subject.keywordAuthor | Blackbox fuzz testing | - |
dc.subject.keywordAuthor | Grammar-based fuzzer | - |
dc.subject.keywordAuthor | ActiveX control | - |
Items in ScholarWorks are protected by copyright, with all rights reserved, unless otherwise indicated.
(02841) 서울특별시 성북구 안암로 14502-3290-1114
COPYRIGHT © 2021 Korea University. All Rights Reserved.
Certain data included herein are derived from the © Web of Science of Clarivate Analytics. All rights reserved.
You may not copy or re-distribute this material in whole or in part without the prior written consent of Clarivate Analytics.