Hier finden Sie wissenschaftliche Publikationen aus den Fraunhofer-Instituten.

Hunting bugs with Lévy flight foraging

: Böttinger, K.


Locasto, M. ; Institute of Electrical and Electronics Engineers -IEEE-; IEEE Computer Society, Technical Committee on Security and Privacy:
IEEE Symposium on Security and Privacy Workshops, SPW 2016 : 23-25 May 2016, San Jose, California, USA; Proceedings
Piscataway, NJ: IEEE, 2016
ISBN: 978-1-5090-3690-5
ISBN: 978-1-5090-3691-2
ISBN: 978-1-5090-0824-7
ISBN: 978-1-5090-0825-4
Symposium on Security and Privacy (SP) <37, 2016, San Jose/Calif.>
Workshop on Bio-Inspired Security, Trust, Assurance and Resilience (BioStar) <2016, San Jose/Calif.>
Fraunhofer AISEC ()

We present a new method for random testing of binary executables inspired by biology. In our approach we introduce the first fuzzer based on a mathematical model for optimal foraging. To minimize search time for possible vulnerabilities we generate test cases with Lévy flights in the input space. In order to dynamically adapt test generation behavior to actual path exploration performance we define a suitable measure for quality evaluation of test cases. This measure takes into account previously discovered code regions and allows us to construct a feedback mechanism. By controlling diffusivity of the test case generating Lévy processes with evaluation feedback from dynamic instrumentation we are able to define a fully self-adaptive fuzzing algorithm.