A survey of coverage-guided greybox fuzzing with deep neural models
Coverage-guided greybox fuzzing (CGF) has emerged as a powerful technique for software vulnerability detection, yet traditional techniques often struggle with the increasing complexity of modern software systems and the vastness of input spaces. Deep neural networks (DNNs) have begun to fundamentally transform CGF by addressing these limitations through automated feature extraction, adaptive input generation, and intelligent path prioritization. However, despite these advancements, critical gaps persist in understanding the state-of-the-art landscape. Existing studies often lack rigorous benchmarks to evaluate scalability and generalizability, fail to address the interpretability of neural-guided decisions, and overlook the integration of emerging paradigms such as large language models (LLMs) and neurosymbolic reasoning. This survey systematically bridges these gaps by providing a comprehensive taxonomy of DNN-driven CGF techniques, analyzing their strengths and limitations across key fuzzing stages—seed generation, selection, and mutation. We find that although DNNs have significantly improved fuzzing efficiency, challenges such as semantically invalid seeds, high computational overhead, and limited cross-domain adaptability remain unresolved. Most importantly, we identify two transformative directions with the potential to redefine CGF: (1) LLM-powered fuzzing , which combines generative AI with domain-specific fine-tuning to produce context-aware inputs; and (2) neurosymbolic integration , which merges the precision of symbolic execution with the scalability of neural networks to tackle path explosion. By synthesizing these insights, this survey not only clarifies the state-of-the-art but also outlines a roadmap for developing robust, explainable, and widely applicable intelligent fuzzers. The future of CGF lies in hybrid models that integrate data-driven learning with formal methods, paving the way for autonomous vulnerability discovery in an era of increasingly complex software systems.
Authors
- Yupeng Jiang (ORCID: https://orcid.org/0000-0002-6172-2686)
- Lei Pan (ORCID: https://orcid.org/0000-0002-4691-8330)
- Junyang Qiu (ORCID: https://orcid.org/0000-0001-8288-6180)
- Xi Zheng (ORCID: https://orcid.org/0000-0002-2572-2355)
- Wei Luo (ORCID: https://orcid.org/0000-0002-4711-7543)
- Yuantian Miao (ORCID: https://orcid.org/0000-0002-7333-0305)
Institutions
- Deakin University (AU)
- Wuxi Institute of Technology (CN)
- University of Newcastle Australia (AU)
- Macquarie University (AU)
Publication Details
- Journal
- Information and Software Technology
- Published
- 2025-06-02
- DOI
- https://doi.org/10.1016/j.infsof.2025.107797
- Citations
- 1
- Primary Topic
- Visual Attention and Saliency Detection
- Type
- article
- Field-Weighted Citation Impact
- 1.28