EPF: An Evolutionary, Protocol-Aware, and Coverage-Guided Network Fuzzing Framework

Helmke, Rene; Winter, E.; Rademacher, Michael

doi:10.1109/pst52912.2021.9647801

Search citation statements

Order By: Relevance

Paper Sections

Select...

Evolutionary Grammar-based Fuzzers2

Citation Types

Supporting

Mentioning

Contrasting

Year Published

2022

2024

Publication Types

Select...

Article3

Other2

Relationship

Self Cite0

Independent5

Authors

Journals

Cited by 5 publications

(2 citation statements)

References 19 publications

Supporting

Mentioning

Contrasting

Order By: Relevance

“…SPFuzz [42] and EPF [21] observe branch coverage in the style of AFL to get information about coverage (i.e. F2)), whereas RESTler only uses the response of the SUT (i.e.…”

Section: Evolutionary Grammar-based Fuzzersmentioning

confidence: 99%

See 1 more Smart Citation

Fuzzers for stateful systems: Survey and Research Directions

Daniele¹,

Andarzian²,

Poll³

2023

Preprint

View full text Add to dashboard Cite

Fuzzing is a security testing methodology effective in finding bugs. In a nutshell, a fuzzer sends multiple slightly malformed messages to the software under test, hoping for crashes or weird system behaviour. The methodology is relatively simple, although applications that keep internal states are challenging to fuzz. The research community has responded to this challenge by developing fuzzers tailored to stateful systems, but a clear understanding of the variety of strategies is still missing. In this paper, we present the first taxonomy of fuzzers for stateful systems and provide a systematic comparison and classification of these fuzzers.CCS Concepts: • Security and privacy → Software security engineering.

show abstract

“…SPFuzz [42] and EPF [21] observe branch coverage in the style of AFL to get information about coverage (i.e. F2)), whereas RESTler only uses the response of the SUT (i.e.…”

Section: Evolutionary Grammar-based Fuzzersmentioning

confidence: 99%

“…These dependencies, like the ones between requests and responses [5], or the ones between the length field, the content of the message or the data types [21,42], significantly influence the quality of the inputs generated by the fuzzer.…”

Section: Evolutionary Grammar-based Fuzzersmentioning

confidence: 99%