Detailed Information

Cited 0 time in webofscience Cited 0 time in scopus
Metadata Downloads

MaxAFL: Maximizing Code Coverage with a Gradient-Based Optimization Technique

Authors
Kim, YoungjoonYoon, Jiwon
Issue Date
1월-2021
Publisher
MDPI
Keywords
fuzzing; optimization; gradient descent; test automation
Citation
ELECTRONICS, v.10, no.1, pp.1 - 23
Indexed
SCIE
SCOPUS
Journal Title
ELECTRONICS
Volume
10
Number
1
Start Page
1
End Page
23
URI
https://scholar.korea.ac.kr/handle/2021.sw.korea/50214
DOI
10.3390/electronics10010011
ISSN
2079-9292
Abstract
Evolutionary fuzzers generally work well with typical software programs because of their simple algorithm. However, there is a limitation that some paths with complex constraints cannot be tested even after long execution. Fuzzers based on concolic execution have emerged to address this issue. The concolic execution fuzzers also have limitations in scalability. Recently, the gradient-based fuzzers that use a gradient to mutate inputs have been introduced. Gradient-based fuzzers can be applied to real-world programs and achieve high code coverage. However, there is a problem that the existing gradient-based fuzzers require heavyweight analysis or sufficient learning time. In this paper, we propose a new type of gradient-based fuzzer, MaxAFL, to overcome the limitations of existing gradient-based fuzzers. Our approach constructs an objective function through fine-grained static analysis. After constructing a well-made objective function, we can apply the gradient-based optimization algorithm. We use a modified gradient-descent algorithm to minimize our objective function and propose some probabilistic techniques to escape local optimum. We introduce an adaptive objective function which aims to explore various paths in the program. We implemented MaxAFL based on the original AFL. MaxAFL achieved increase of code coverage per time compared with three other fuzzers in six open-source Linux binaries. We also measured cumulative code coverage per total execution, and MaxAFL outperformed the other fuzzers in this metric. Finally, MaxAFL can also find more bugs than the other fuzzers.
Files in This Item
There are no files associated with this item.
Appears in
Collections
School of Cyber Security > Department of Information Security > 1. Journal Articles

qrcode

Items in ScholarWorks are protected by copyright, with all rights reserved, unless otherwise indicated.

Related Researcher

Researcher Yoon, Ji Won photo

Yoon, Ji Won
정보보호학과
Read more

Altmetrics

Total Views & Downloads

BROWSE