Can I read RegFuzz: A Linear Regression-Based Approach for Seed Scheduling in Directed Fuzzing on EtoBox?

RegFuzz: A Linear Regression-Based Approach for Seed Scheduling in Directed Fuzzing by Mingmin Lin; Yingpei Zeng; Yang Li is a Engineering article available to read on EtoBox.

What is RegFuzz: A Linear Regression-Based Approach for Seed Scheduling in Directed Fuzzing about?

Directed fuzzing aims to focus on fuzzing specific locations within a target program to enhance the efficiency of vulnerability discovery. However, directed fuzzing may yield fewer vulnerabilities and obtain lower code coverage when the specified locations have little to no vulnerabilities. Additionally, the existing directed fuzzing approaches often overlook the differences in variable values when calculating distances between seeds and specific locations. In order to address these issues, this paper introduces RegFuzz, a method that improves seed scheduling in directed fuzzing. RegFuzz utilizes a linear regression model to predict the effectiveness of a seed and allocates more fuzzing opportunities to efficient seeds. Specifically, first, RegFuzz defines several labels with the corresponding trainable weights for each seed. These labels encompass seed coverage, crash efficiency, seed distance, and more. In the calculation of seed distance, RegFuzz takes into account not only the basic block distance but also the variable distance contained within those basic blocks. Second, the linear regression model continually optimizes the label weights during fuzzing, and these optimized wei

Who reads RegFuzz: A Linear Regression-Based Approach for Seed Scheduling in Directed Fuzzing?

Author

Mingmin Lin; Yingpei Zeng; Yang Li

Publisher

MDPI AG

Published

2023

Language

EN

Field

Engineering (Physical Sciences)