Fraunhofer-Gesellschaft

Publica

Hier finden Sie wissenschaftliche Publikationen aus den Fraunhofer-Instituten.

Hunting bugs with Lévy flight foraging

 
: Böttinger, K.

:

Locasto, M. ; Institute of Electrical and Electronics Engineers -IEEE-; IEEE Computer Society, Technical Committee on Security and Privacy:
IEEE Symposium on Security and Privacy Workshops, SPW 2016 : 23-25 May 2016, San Jose, California, USA; Proceedings
Piscataway, NJ: IEEE, 2016
ISBN: 978-1-5090-3690-5
ISBN: 978-1-5090-3691-2
ISBN: 978-1-5090-0824-7
ISBN: 978-1-5090-0825-4
S.111-117
Symposium on Security and Privacy (SP) <37, 2016, San Jose/Calif.>
Workshop on Bio-Inspired Security, Trust, Assurance and Resilience (BioStar) <2016, San Jose/Calif.>
Englisch
Konferenzbeitrag
Fraunhofer AISEC ()

Abstract
We present a new method for random testing of binary executables inspired by biology. In our approach we introduce the first fuzzer based on a mathematical model for optimal foraging. To minimize search time for possible vulnerabilities we generate test cases with Lévy flights in the input space. In order to dynamically adapt test generation behavior to actual path exploration performance we define a suitable measure for quality evaluation of test cases. This measure takes into account previously discovered code regions and allows us to construct a feedback mechanism. By controlling diffusivity of the test case generating Lévy processes with evaluation feedback from dynamic instrumentation we are able to define a fully self-adaptive fuzzing algorithm.

: http://publica.fraunhofer.de/dokumente/N-434963.html