Publications associées à Seed Selection for Successful Fuzzing

Arvin: Greybox Fuzzing Using Approximate Dynamic CFG Analysis

Fuzzing has emerged as the most broadly used testing technique to discover bugs. Effective fuzzers rely on coverage to prioritize inputs that exercise new program areas. Edge-based code coverage of the Program Under Test (PUT) is the most commonly used cov ...

ASSOC COMPUTING MACHINERY2023

ACTOR: Action-Guided Kernel Fuzzing

Mathias Josef Payer

Fuzzing reliably and efficiently finds bugs in software, including operating system kernels. In general, higher code coverage leads to the discovery of more bugs. This is why most existing kernel fuzzers adopt strategies to generate a series of inputs that ...

Usenix Assoc2023

FISHFUZZ: Catch Deeper Bugs by Throwing Larger Nets

Mathias Josef Payer, Jiayuan Zhang, Yuqing Zhang, Flavio Toffalini, Han Zheng

Fuzzers effectively explore programs to discover bugs. Greybox fuzzers mutate seed inputs and observe their execution. Whenever a seed reaches new behavior (e.g., new code or higher execution frequency), it is stored for further mutation. Greybox fuzzers d ...

Usenix Assoc2023

MINERVA: Browser API Fuzzing with Dynamic Mod-Ref Analysis

Mathias Josef Payer, Chijin Zhou, Yu Jiang

Browser APIs are essential to the modern web experience. Due to their large number and complexity, they vastly expand the attack surface of browsers. To detect vulnerabilities in these APIs, fuzzers generate test cases with a large amount of random API inv ...

Assoc Computing Machinery2022

Understanding the mechanisms of non-thermal plasma treatments on seeds

Alexandra Waskow

The motivation driving plasma-seed treatment research is the renewed importance of sustainable, eco-friendly agriculture. There is a constant interest in finding alternatives to minimize resource use and environmental degradation, while ensuring healthy se ...

EPFL2022

One Fuzz Doesn’t Fit All: Optimizing Directed Fuzzing via Target-tailored Program State Restriction

Mathias Josef Payer

Fuzzing is the de-facto default technique to discover software flaws, randomly testing programs to discover crashing test cases. Yet, a particular scenario may only care about specific code regions (for, e.g., bug reproduction, patch or regression testing) ...

ASSOC COMPUTING MACHINERY2022

Mechanisms of Plasma-Seed Treatments as a Potential Seed Processing Technology

Alan Howling, Ivo Furno, Alexandra Waskow

Plasma treatments are currently being assessed as a seed processing technology for agricultural purposes where seeds are typically subjected to pre-sowing treatments to improve the likelihood of timely and uniform germination. The aim of this review is to ...

2021

Gramatron: Effective Grammar-Aware Fuzzing

Mathias Josef Payer

Fuzzers aware of the input grammar can explore deeper program states using grammar-aware mutations. Existing grammar-aware fuzzers are ineffective at synthesizing complex bug triggers due to: (i) grammars introducing a sampling bias during input generation ...

ASSOC COMPUTING MACHINERY2021

Phenotypic plasticity versus ecotypic differentiation under recurrent summer drought in two drought-tolerant pine species

Christoph Bachofen

Despite worldwide reports of high tree mortality, growing evidence indicates that many tree species are well adapted to survive repeated dry spells. The drought resilience of trees is related to their phenotypic plasticity and ecotypic differentiation. Whe ...

WILEY2021

Une approche computationnelle du cadastre napoléonien de Venise

Frédéric Kaplan, Raphaël Barman, Isabella Di Lenardo, Federica Pardini

At the beginning of the 19th century, the Napoleonic administration introduced a new standardised description system to give an objective account of the form and functions of the city of Venice. The cadastre, deployed on a European scale, was offering for ...

2021

Entering the plasma agriculture field: An attempt to standardize protocols for plasma treatment of seeds

Alan Howling, Ivo Furno, Fabio Avino, Alexandra Waskow

Plasma treatments are currently being assessed as a seed processing technology for agricultural purposes. There is sufficient information as a proof-of-concept, but a lack of standardization in the methodology prevents a convincing evaluation of plasma tre ...

2022

FuZZan: Efficient Sanitizer Metadata Design for Fuzzing

Mathias Josef Payer

Fuzzing is one of the most popular and effective techniques for finding software bugs. To detect triggered bugs, fuzzers leverage a variety of sanitizers in practice. Unfortunately, sanitizers target long running experiments-e.g., developer test suites-not ...

USENIX ASSOC2020

FuzzGen: Automatic Fuzzer Generation

Mathias Josef Payer

Fuzzing is a testing technique to discover unknown vulnerabilities in software. When applying fuzzing to libraries, the core idea of supplying random input remains unchanged, yet it is non-trivial to achieve good code coverage. Libraries cannot run as stan ...

USENIX ASSOC2020

USBFuzz: A Framework for Fuzzing USB Drivers by Device Emulation

Hui Peng, Mathias Josef Payer

The Universal Serial Bus (USB) connects external devices to a host. This interface exposes the OS kernels and device drivers to attacks by malicious devices. Unfortunately, kernels and drivers were developed under a security model that implicitly trusts co ...

USENIX ASSOC2020

Biogeoinformatics for the management of Farm Animal Genetic Resources (FAnGR)

Solange Catherine Gaillard

In the context of both severe selection in farm animals and potential effects of climate change, it is crucial to implement a sustainable management of the breeding practice, supported by a judicious use of geographic information technologies. Based on thi ...

EPFL2020

Scaling Functional Synthesis and Repair

Emmanouil Koukoutos

Program synthesis was first proposed a few decades ago, but in the last decade it has gained increased momentum in the research community. The increasing complexity of software has dictated the urgent need for improved supporting tools that verify the soft ...

EPFL2019

Adaptive Design of Experiments for Conservative Estimation of Excursion Sets

David Ginsbourger

We consider the problem of estimating the set of all inputs that leads a system to some particular behavior. The system is modeled by an expensive-to-evaluate function, such as a computer experiment, and we are interested in its excursion set, that is, the ...

2021

Discover deeper bugs with dynamic symbolic execution and coverage-based fuzz testing

Vitaly Chipounov, George Candea, Bin Zhang, Chao Feng

Coverage-based fuzz testing and dynamic symbolic execution are both popular program testing techniques. However, on their own, both techniques suffer from scalability problems when considering the complexity of modern software. Hybrid testing methods attem ...

INST ENGINEERING TECHNOLOGY-IET2018

A template for constructing Bayesian networks in forensic biology cases when considering activity level propositions

Christophe Champod, Alex Biedermann

The hierarchy of propositions has been accepted amongst the forensic science community for some time. It is also accepted that the higher up the hierarchy the propositions are, against which the scientist are competent to evaluate their results, the more d ...

2018

Elastic Program Transformations : Automatically Optimizing the Reliability/Performance Trade-off in Systems Software

Jonas Benedict Wagner

Performance and reliability are important yet conflicting properties of systems software. Software today often crashes, has security vulnerabilities and data loss, while many techniques that could address such issues remain unused due to performance concer ...

EPFL2017