GeMuFuzz: Integrating Generative and Mutational Fuzzing with Deep Learning
Current grey-box protocol fuzzers may not work well with poor-quality initial seeds. That makes it difficult to cover diverse message types and protocol states defined in the protocol specification. To mitigate this issue, we propose GeMuFuzz, which integrates deep learning based seed generation into mutation-based grey-box fuzzing. Moreover, GeMuFuzz considers the high-dimensional information implied in seeds generated during fuzzing. We also evaluated the performance of GeMuFuzz by comparing with the baseline fuzzer AFLNET on 8 typical protocol implementations of ProFuzzBench. GeMuFuzz discovered 5.07% more paths and 6.19% more crashes, as well as 8.57% more states and 10.54% more state transitions than AFLNET. The experimental results highlight that GeMuFuzz could improve the effectiveness of fuzzing.
Authors
- Zheng Zhang (ORCID: https://orcid.org/0000-0003-4201-4286)
- Hongming Chen (ORCID: https://orcid.org/0000-0002-8065-8333)
- Siqi Zhao (ORCID: https://orcid.org/0000-0002-1939-4033)
- Rui Ma (ORCID: https://orcid.org/0000-0003-1728-0056)
- Yuqi Zhai
- Yuche Yang
Institutions
- Beijing Institute of Technology (CN)
- Industrial and Commercial Bank of China (CN)
Publication Details
- Published
- 2024-12-17
- DOI
- https://doi.org/10.1109/trustcom63139.2024.00261
- Primary Topic
- Machine Learning and Data Classification
- Type
- article
- Field-Weighted Citation Impact
- 0.00