We propose a tool, called FuzzingDriver, to generate dictionary tokens for coverage-based greybox fuzzers (CGF) from the codebase of any target program. FuzzingDriver does not add any overhead to the fuzzing job as it is run beforehand. We compared FuzzingDriver to Google dictionaries by fuzzing six open-source targets, and we found that FuzzingDriver consistently achieves higher code coverage in all tests. We also executed eight benchmarks on FuzzBench to demonstrate how utilizing FuzzingDriver's dictionaries can outperform six widely-used CGF fuzzers. In future work, investigating the impact of FuzzingDriver's dictionaries on improving bug coverage might prove important. Video demonstration: https://www.youtube.com/watch?v=Y8j_KvfRrI8
翻译:我们提议了一个名为 Fuzzing Driver 的工具, 用于从任何目标程序的代码库生成基于覆盖的灰箱模糊器( CGF) 字典符号。 Fuzzing Driver 并不给先前运行的模糊工作增加任何间接费用。 我们通过模糊六个开放源目标,将 Fuzzing Driver 与 Google 字典进行比较,我们发现 Fuzzing Driver 在所有测试中总是能达到更高的代码覆盖。 我们还在 FuzzBench 上执行了八个基准, 以显示 Fuzzing Driver 字典如何能超过六个广泛使用的 CFFF F fuzzers。 在今后的工作中, 调查 Fuzzing Driver 字典对改进错误覆盖的影响可能很重要 。 视频演示 : https://www.youtube.com/ watch? v=Y8j_ KvRrI8