A Novel Seed Generation Approach for Vulnerability Mining Based on Generative Adversarial Networks and Attention Mechanisms

Chunlai Du, Guizhi Xu, Yanhui Guo (), Zhongru Wang and Weiqiang Yu
Additional contact information
Chunlai Du: School of Information Science and Technology, North China University of Technology, Beijing 100144, China
Guizhi Xu: School of Information Science and Technology, North China University of Technology, Beijing 100144, China
Yanhui Guo: Department of Computer Science, University of Illinois Springfield, Springfield, IL 62703, USA
Zhongru Wang: School of Information Science and Technology, North China University of Technology, Beijing 100144, China
Weiqiang Yu: Beijing DigApis Technology Co., Ltd., Beijing 100081, China

Mathematics, 2024, vol. 12, issue 5, 1-16

Abstract: Coverage-guided fuzzing has been widely applied in software error and security vulnerability detection. The fuzzing technique based on AFL (American Fuzzy Loop) is a common coverage-guided fuzzing method. The code coverage during AFL fuzzing is highly dependent on the quality of the initial seeds. If the selected seeds’ quality is poor, the AFL may not be able to detect program paths in a targeted manner, resulting in wasted time and computational resources. To solve the problems that the seed selection strategy in traditional AFL fuzzing cannot quickly and effectively generate high-quality seed sets and the mutated test cases cannot reach deeper paths and trigger security vulnerabilities, this paper proposes an attention mechanism-based generative adversarial network (GAN) seed generation approach for vulnerability mining, which can learn the characteristics and distribution of high-quality test samples during the testing process and generate high-quality seeds for fuzzing. The proposed method improves the GAN by introducing fully connected neural networks to balance the competitive adversarial process between discriminators and generators and incorporating attention mechanisms, greatly improving the quality of generated seeds. Our experimental results show that the seeds generated by the proposed method have significant improvements in coverage, triggering unique crashes and other indicators and improving the efficiency of AFL fuzzing.

Keywords: security vulnerabilities; fuzzing; seed generation; generative adversarial network; attention mechanism (search for similar items in EconPapers)
JEL-codes: C (search for similar items in EconPapers)
Date: 2024
References: View complete reference list from CitEc
Citations:

Downloads: (external link)
https://www.mdpi.com/2227-7390/12/5/745/pdf (application/pdf)
https://www.mdpi.com/2227-7390/12/5/745/ (text/html)

Related works:
This item may be available elsewhere in EconPapers: Search for items with the same title.

Export reference: BibTeX RIS (EndNote, ProCite, RefMan) HTML/Text

Persistent link: https://EconPapers.repec.org/RePEc:gam:jmathe:v:12:y:2024:i:5:p:745-:d:1349609

Access Statistics for this article

Mathematics is currently edited by Ms. Emma He

More articles in Mathematics from MDPI
Bibliographic data for series maintained by MDPI Indexing Manager ().