Closure: Transforming Source Code for Faster Fuzzing
| dc.contributor.author | Paterson, Ian G. | en |
| dc.contributor.committeechair | Hicks, Matthew | en |
| dc.contributor.committeemember | Tilevich, Eli | en |
| dc.contributor.committeemember | Cameron, Kirk W. | en |
| dc.contributor.department | Computer Science | en |
| dc.date.accessioned | 2022-05-28T08:00:21Z | en |
| dc.date.available | 2022-05-28T08:00:21Z | en |
| dc.date.issued | 2022-05-27 | en |
| dc.description.abstract | Fuzzing, the method of generating inputs to run on a target program while monitoring its execution, is a widely adopted and pragmatic methodology for bug hunting as a means of software hardening. Technical improvements in throughput have shown to be critical to increasing the rate at which new bugs can be discovered time and time again. Persistent fuzzing, which keeps the fuzz target alive via looping, provides increased throughput at the cost for manual development of harnesses to account for invalid states and coverage of the programs code base, while relying on forking to reset the state accrued by looping over the same piece of code multiple times. Stale state can lead to wasted fuzzing efforts as certain areas of code may be conditionally ignored due to a stale global. I propose Closure, a toolset which enables programs to run at persistent speeds while avoiding the downsides of stale state and other bottlenecks associated with persistent fuzzing. | en |
| dc.description.abstractgeneral | The process of program testing to find bugs is becoming increasingly automated. A current method called "Fuzzing", is a widely adopted means for finding bugs and is required in the life cycle of program development by major companies and the US Government. I look at current improvements in fuzzing, and expand the use case of the cutting edge method called persistent fuzzing to a wider array of applications with my tool Closure. With Closure, fuzzing practitioners can experience faster fuzzing performance with less manual effort. | en |
| dc.description.degree | Master of Science | en |
| dc.format.medium | ETD | en |
| dc.identifier.other | vt_gsexam:35021 | en |
| dc.identifier.uri | http://hdl.handle.net/10919/110361 | en |
| dc.language.iso | en | en |
| dc.publisher | Virginia Tech | en |
| dc.rights | In Copyright | en |
| dc.rights.uri | http://rightsstatements.org/vocab/InC/1.0/ | en |
| dc.subject | Fuzzing | en |
| dc.subject | AFL | en |
| dc.subject | LLVM | en |
| dc.subject | Code Modification | en |
| dc.title | Closure: Transforming Source Code for Faster Fuzzing | en |
| dc.type | Thesis | en |
| thesis.degree.discipline | Computer Science and Applications | en |
| thesis.degree.grantor | Virginia Polytechnic Institute and State University | en |
| thesis.degree.level | masters | en |
| thesis.degree.name | Master of Science | en |
Files
Original bundle
1 - 1 of 1