Toward Unbiased Multiple-Target Fuzzing with Path Diversity

arXiv:2310.12419v2 Announce Type: replace
Abstract: In this paper, we propose a novel directed fuzzing solution named AFLRun, which features target path-diversity metric and unbiased energy assignment. Firstly, we develop a new coverage metric by maintaining extra virgin map for each covered target to track the coverage status of seeds that hit the target. This approach enables the storage of waypoints into the corpus that hit a target through interesting path, thus enriching the path diversity for each target. Additionally, we …

arxiv cs.cr diversity energy features fuzzing map metric novel path solution target track virgin