MooFuzz: Many-Objective Optimization Seed Schedule for Fuzzer

Xiaoqi Zhao, Haipeng Qu, Wenjie Lv, Shuo Li and Jianliang Xu
Additional contact information
Xiaoqi Zhao: College of Information Science and Engineering, Ocean University of China, Qingdao 266100, China
Haipeng Qu: College of Information Science and Engineering, Ocean University of China, Qingdao 266100, China
Wenjie Lv: College of Information Science and Engineering, Ocean University of China, Qingdao 266100, China
Shuo Li: College of Information Science and Engineering, Ocean University of China, Qingdao 266100, China
Jianliang Xu: College of Information Science and Engineering, Ocean University of China, Qingdao 266100, China

Mathematics, 2021, vol. 9, issue 3, 1-19

Abstract: Coverage-based Greybox Fuzzing (CGF) is a practical and effective solution for finding bugs and vulnerabilities in software. A key challenge of CGF is how to select conducive seeds and allocate accurate energy. To address this problem, we propose a novel many-objective optimization solution, MooFuzz, which can identify different states of the seed pool and continuously gather different information about seeds to guide seed schedule and energy allocation. First, MooFuzz conducts risk marking in dangerous positions of the source code. Second, it can automatically update the collected information, including the path risk, the path frequency, and the mutation information. Next, MooFuzz classifies seed pool into three states and adopts different objectives to select seeds. Finally, we design an energy recovery mechanism to monitor energy usage in the fuzzing process and reduce energy consumption. We implement our fuzzing framework and evaluate it on seven real-world programs. The experimental results show that MooFuzz outperforms other state-of-the-art fuzzers, including AFL, AFLFast, FairFuzz, and PerfFuzz, in terms of path discovery and bug detection.

Keywords: seed schedule; many-objective optimization; fuzzing; bug detection; path discovery (search for similar items in EconPapers)
JEL-codes: C (search for similar items in EconPapers)
Date: 2021
References: View references in EconPapers View complete reference list from CitEc
Citations:

Downloads: (external link)
https://www.mdpi.com/2227-7390/9/3/205/pdf (application/pdf)
https://www.mdpi.com/2227-7390/9/3/205/ (text/html)

Related works:
This item may be available elsewhere in EconPapers: Search for items with the same title.

Export reference: BibTeX RIS (EndNote, ProCite, RefMan) HTML/Text

Persistent link: https://EconPapers.repec.org/RePEc:gam:jmathe:v:9:y:2021:i:3:p:205-:d:483804

Access Statistics for this article

Mathematics is currently edited by Ms. Emma He

More articles in Mathematics from MDPI
Bibliographic data for series maintained by MDPI Indexing Manager ().