Publication

Arvin: Greybox Fuzzing Using Approximate Dynamic CFG Analysis

Related publications (39)

Graph Chatbot

Chat with Graph Search

Ask any question about EPFL courses, lectures, exercises, research, news, etc. or try the example questions below.

DISCLAIMER: The Graph Chatbot is not programmed to provide explicit or categorical answers to your questions. Rather, it transforms your questions into API requests that are distributed across the various IT services officially administered by EPFL. Its purpose is solely to collect and recommend relevant references to content that you can explore to help you answer your questions.

Striking a New Balance Between Program Instrumentation and Debugging Time

Willy Zwaenepoel, Ricardo Bianchini, Olivier Crameri

Although they are helpful in many cases, state-of-the-art bug reporting systems may impose excessive overhead on users, leak private information, or provide little help to the developer in locating the problem. In this paper, we explore a new approach to b ...

Acm Order Department, P O Box 64145, Baltimore, Md 21264 Usa2011

Proving memory safety of floating-point computations by combining static and dynamic program analysis

Johannes Kinder

Whitebox fuzzing is a novel form of security testing based on dynamic symbolic execution and constraint solving. Over the last couple of years, whitebox fuzzers have found many new security vulnerabilities (buffer overflows) in Windows and Linux applicatio ...

ACM Press2010

Automated Software Testing as a Service (TaaS)

George Candea, Cristian Zamfir, Stefan Bucur

This paper makes the case for TaaS - automated software testing as a cloud-based service. We present three kinds of TaaS: (1) a public certification service, akin to Underwriters Labs, that independently assesses the reliability, safety, and security of so ...

2010

An Extensible Technique for High-Precision Testing of Recovery Code

George Candea, Paul Dan Marinescu, Radu Banabic

Thorough testing of software systems requires ways to productively employ fault injection. We describe a technique for automatically identifying the errors exposed by shared libraries, finding good injection targets in program binaries, and producing corre ...

2010

Querypoint Debugging

Claude Petitpierre, Salman Mirghasemi

To fix a bug, software developers have to examine the bug-gy execution to locate defects. They employ different ap-proaches (e.g., setting breakpoints, inserting printing statements in the code) to navigate over buggy execution and inspect program state at ...

2010

Proving Memory Safety of Floating-Point Computations by Combining Static and Dynamic Program Analysis

Johannes Kinder

Whitebox fuzzing is a novel form of security testing based on runtime symbolic execution and constraint solving. Over the last couple of years, whitebox fuzzers have found dozens of new security vulnerabilities (buffer overflows) in Windows and Linux appli ...

Microsoft Research2009

PathScore-Relevance: A Metric for Improving Test Quality

George Candea, Silviu Andrica

Reliability of today's software systems hinges on developers writing test cases that exercise as much of a program as possible. Writing and running such tests is inevitably subject to a time budget. This paper addresses the question of how to maximize qual ...

2009

Aseba Meets D-Bus: From the Depths of a Low-Level Event-

Francesco Mondada, Stéphane Magnenat

The robotics research community has clearly acknowledged the need of open and standard software stacks to promote reuse of code and developments. However, to date no particular project has prevailed. We suggest that one possible reason for this is that mos ...

2009

Model-Based Debugging

Salman Mirghasemi

Software Debugging is still one of the most challenging and time consuming aspects of software development. Monitoring the software behavior and finding the causes of this behavior are located at the center of debugging process. Although many tools and tec ...

2009

LFI: A Practical and General Library-Level Fault Injector

George Candea, Paul Dan Marinescu

Fault injection, a critical aspect of testing robust systems, is often overlooked in the development of general-purpose software. We believe this is due to the absence of easy-to-use tools and to the extensive manual labor required to perform fault injecti ...

2009