Presentation | 2020-01-22 Mutation Fuzzing Based on Type Estimation of Data Items Utilizing Data Writer Yoko Higuchi, Nagisa Ishiura, Namba Noriyuki, |
---|---|
PDF Download Page | PDF download Page Link |
Abstract(in Japanese) | (See Japanese page) |
Abstract(in English) | This article proposes a novel way of acquiring information, which is used for enhancing efficiency of fuzzing for software security, from data generation programs. Although mutation-based fuzzers are generally easier to implement and more applicable than grammar-based fuzzers, they face the challenge of low data quality. Better results may be attained by providing information on data formats or grammars, it requires quite a human effort. Our method runs an appropriate data generation program under a debugger to record the size and the numbers of the data items as well as their values at every call to data output subroutines. Then data items are effectively mutated based on the guess about the data format from the information. A prototype system based on our method has been implemented in Ruby 2.5.2, which demonstrated higher error detection ability than a rundom fuzzer. |
Keyword(in Japanese) | (See Japanese page) |
Keyword(in English) | Fuzzing / Mutation Fuzzing / Data writer |
Paper # | VLD2019-62,CPSY2019-60,RECONF2019-52 |
Date of Issue | 2020-01-15 (VLD, CPSY, RECONF) |
Conference Information | |
Committee | IPSJ-SLDM / RECONF / VLD / CPSY / IPSJ-ARC |
---|---|
Conference Date | 2020/1/22(3days) |
Place (in Japanese) | (See Japanese page) |
Place (in English) | Raiosha, Hiyoshi Campus, Keio University |
Topics (in Japanese) | (See Japanese page) |
Topics (in English) | FPGA Applications, etc. |
Chair | Yutaka Tamiya(Fujitsu Lab.) / Yuichiro Shibata(Nagasaki Univ.) / Nozomu Togawa(Waseda Univ.) / Hidetsugu Irie(Univ. of Tokyo) / Hiroshi Inoue(Kyushu Univ.) |
Vice Chair | / Kentaro Sano(RIKEN) / Yoshiki Yamaguchi(Tsukuba Univ.) / Daisuke Fukuda(Fujitsu Labs.) / Michihiro Koibuchi(NII) / Kota Nakajima(Fujitsu Lab.) |
Secretary | (Univ. Shiga Prefecture) / Kentaro Sano(NTT) / Yoshiki Yamaguchi(Mitsubishi Electric) / Daisuke Fukuda(Hiroshima City Univ.) / Michihiro Koibuchi(e-trees.Japan) / Kota Nakajima(Univ. of Aizu) / (Hitachi) |
Assistant | / Yuuki Kobayashi(NEC) / Hiroki Nakahara(Tokyo Inst. of Tech.) / Kazuki Ikeda(Hitachi) / Eiji Arima(Univ. of Tokyo) / Shugo Ogawa(Hitachi) |
Paper Information | |
Registration To | Special Interest Group on System and LSI Design Methodology / Technical Committee on Reconfigurable Systems / Technical Committee on VLSI Design Technologies / Technical Committee on Computer Systems / Special Interest Group on System Architecture |
---|---|
Language | JPN |
Title (in Japanese) | (See Japanese page) |
Sub Title (in Japanese) | (See Japanese page) |
Title (in English) | Mutation Fuzzing Based on Type Estimation of Data Items Utilizing Data Writer |
Sub Title (in English) | |
Keyword(1) | Fuzzing |
Keyword(2) | Mutation Fuzzing |
Keyword(3) | Data writer |
1st Author's Name | Yoko Higuchi |
1st Author's Affiliation | Kwansei Gakuin University(Kwansei Gakuin Univ.) |
2nd Author's Name | Nagisa Ishiura |
2nd Author's Affiliation | Kwansei Gakuin University(Kwansei Gakuin Univ.) |
3rd Author's Name | Namba Noriyuki |
3rd Author's Affiliation | Kwansei Gakuin University(Kwansei Gakuin Univ.) |
Date | 2020-01-22 |
Paper # | VLD2019-62,CPSY2019-60,RECONF2019-52 |
Volume (vol) | vol.119 |
Number (no) | VLD-371,CPSY-372,RECONF-373 |
Page | pp.pp.49-53(VLD), pp.49-53(CPSY), pp.49-53(RECONF), |
#Pages | 5 |
Date of Issue | 2020-01-15 (VLD, CPSY, RECONF) |