Improving Fuzz Testing using Game Theory - Inria - Institut national de recherche en sciences et technologies du numérique Access content directly
Conference Papers Year : 2010

Improving Fuzz Testing using Game Theory

Abstract

We propose a game theoretical model for fuzz testing, consisting in generating unexpected input to search for software vulnerabilities. As of today, no performance guarantees or assessment frameworks for fuzzing exist. Our paper addresses these issues and describes a simple model that can be used to assess and identify optimal fuzzing strategies, by leveraging game theory. In this context, payoff functions are obtained using a tainted data analysis and instrumentation of a target application to assess the impact of different fuzzing strategies.
Fichier principal
Vignette du fichier
4159a263.pdf (391.7 Ko) Télécharger le fichier
Origin : Files produced by the author(s)
Loading...

Dates and versions

inria-00546174 , version 1 (13-12-2010)

Identifiers

  • HAL Id : inria-00546174 , version 1

Cite

Sheila Becker, Humberto Abdelnur, Jorge Lucangeli Obes, Radu State, Olivier Festor. Improving Fuzz Testing using Game Theory. 4th International Conference on Network and System Security - NSS'2010, Sep 2010, Mebourne, Australia. ⟨inria-00546174⟩
154 View
661 Download

Share

Gmail Facebook X LinkedIn More