This report outlines the objectives, methodology, challenges, and results of the first Fuzzing Competition held at SBFT 2023. The competition utilized FuzzBench to assess the code-coverage performance and bug-finding efficacy of eight participating fuzzers over 23 hours. The competition was organized in three phases. In the first phase, participants were asked to integrate their fuzzers into FuzzBench and allowed them to privately run local experiments against the publicly available benchmarks. In the second phase, we publicly ran all submitted fuzzers on the publicly available benchmarks and allowed participants to fix any remaining bugs in their fuzzers. In the third phase, we publicly ran all submitted fuzzers plus three widely-used baseline fuzzers on a hidden set and the publicly available set of benchmark programs to establish the final results.
翻译:本篇报告概述了在 SBFT 2023 上举办的首个 Fuzzing 竞赛的目标、方法、挑战和结果。竞赛利用 FuzzBench 在 23 小时内评估了八个参赛 fuzzers 的代码覆盖率性能和漏洞发现能力。竞赛分三个阶段组织。在第一个阶段中,参赛者被要求将他们的 fuzzers 集成到 FuzzBench 中,并允许他们针对公开可用的基准进行本地私人实验。在第二个阶段中,我们公开运行了所有提交的 fuzzers 在公开可用基准上,并允许参赛者修复其fuzzers中仍存在的任何漏洞。在第三个阶段中,我们在一个隐藏集和公开可用的基准程序集上公开运行了所有提交的 fuzzers 加上三个广泛使用的基准 fuzzers,以确定最终结果。