Taint-based directed whitebox fuzzing

Proceedings - International Conference on Software Engineering

Volumn , Issue , 2009, Pages 474-484

  Ganesh, Vijay ^a   Leek, Tim ^b   Rinard, Martin ^a  

^a MASSACHUSETTS INSTITUTE OF TECHNOLOGY   (United States)

^b MIT LINCOLN LABORATORY   (United States)

Author keywords

[No Author keywords available]

Indexed keywords

INPUT FILES; LARGE PROGRAMS; OPEN-SOURCE; PROGRAM ATTACKS; SYNTACTIC STRUCTURE; TEST FILES; TEST INPUTS; TESTING PROGRAMS; WHITE BOX;

COMPUTER SOFTWARE; ERRORS; SYNTACTICS; TESTING;

SEED;

EID: 77949898398     PISSN: 02705257     EISSN: None     Source Type: Conference Proceeding    
DOI: 10.1109/ICSE.2009.5070546     Document Type: Conference Paper

References (24)

1. Adobe macromedia shockwave flash file format. http://en.wikipedia.org/ wiki/Adobe-Flash.
2. Gnome and freedesktop enviroments. http: //en.wikipedia.org/wiki/ Freedesktop.org.
3. Wikipedia entry on fuzzing. http://en.wikipedia.org/wiki/Fuzz-testing.
4. T. Andersson. Mupdf: A pdf viewer. http://ccxvii.net/fitz/.
5. P. Boonstoppel, C. Cadar, and D. R. Engler. Rwset: Attacking path explosion in constraint-based test generation. In TACAS, pages 351-366, 2008.
6. J. Caballero, H. Yin, Z. Liang, and D. Song. Polyglot: automatic extraction of protocol message format using dynamic binary analysis. In CCS '07: Proceedings of the 14th ACM conference on Computer and communications security, pages 317-329, New York, NY, USA, 2007. ACM.
7. C. Cadar, V. Ganesh, P. Pawlowski, D. Dill, and D. Engler. EXE: Automatically generating inputs of death. In Proceedings of the 13th ACM Conference on Computer and Communications Security, October-November 2006.
8. J. DeMott. The evolving art of fuzzing. http://www.vdalabs.com/tools/The- Evolving-Art-of-Fuzzing.pdf, 2006.
9. P. Godefroid, A. Kiezun, and M. Y. Levin. Grammar-based whitebox fuzzing. In PLDI, pages 206-215, 2008.
10. P. Godefroid, N. Klarlund, and K. Sen. Dart: directed automated random testing. In PLDI '05: Proceedings of the 2005 ACM SIGPLAN conference on Programming language design and implementation, pages 213-223, New York, NY, USA, 2005. ACM.
11. P. Godefroid, M. Y. Levin, and D. Molnar. Automated whitebox fuzz testing. In Network and Distributed Systems Security Symposium, 2008.
12. R. Kaksonen. A functional method for assessing protocol implementation security. Technical Report 448, VTT Electronics, 2001.
13. E. Larson and T. Austin. High coverage detection of input-related security facults. In SSYM'03: Proceedings of the 12th conference on USENIX Security Symposium, pages 9-9, Berkeley, CA, USA, 2003. USENIX Association.
14. T. Leek, G. Baker, R. Brown, M. Zhivich, and R. Lippmann. Coverage maximization using dynamic taint tracing. Technical Report TR-1112, MIT Lincoln Laboratory, 2007.
15. Z. Lin and X. Zhang. Deriving input syntactic structure from execution. In Proceedings of the 16th ACM SIGSOFT International Symposium on Foundations of Software Engineering (FSE'08), Atlanta, GA, USA, November 2008.
16. B. Miller. Fuzzing website. http://pages.cs.wisc.edu/~bart/fuzz/fuzz. html, 2008.
17. B. P. Miller, L. Fredriksen, and B. So. An empirical study of the reliability of unix utilities. Commun. ACM, 33(12):32-44, 1990.
18. D. Molnar and D. Wagner. Catchconv: Symbolic execution and run-time type inference for integer conversion errors. Technical Report UCB/EECS-2007-23, University of California, Berkeley, CA, Feb 2007.
19. J. Newsome and D. Song. Dynamic taint analysis for automatic detection, analysis, and signature generation of exploits on comnodity software. In NDSS, 2005.
20. A. Nguyen-Tuong, S. Guarnieri, D. Greene, J. Shirley, and D. Evans. Automatically hardening web applications using precise tainting. In IFIP Security, 2005.
21. B. Otte and D. Schleef. Swfdec: A flash animation player. http://swfdec.freedesktop.org/wiki/.
22. K. Sen, D. Marinov, and G. Agha. Cute: a concolic unit testing engine for c. SIGSOFT Softw. Eng. Notes, 30(5):263-272, 2005.
23. M. Sutton, A. Greene, and P. Amini. Fuzzing: Brute Force Vulnerability Discovery. Addison-Wesley Professional, 1 edition, July 2007.
24. G.Wondracek, P. M. Comparetti, C. Kruegel, and E. Kirda. Automatic network protocol analysis. In Proceedings of the 15th Annual Network and Distributed System Security Symposium (NDSS08, 2008.