MobFuzz: Adaptive Multi-objective Optimization in Gray-box Fuzzing
NDSS(2024)
摘要
Coverage-guided gray-box fuzzing (CGF) is an efficient software testing
technique. There are usually multiple objectives to optimize in CGF. However,
existing CGF meth- ods cannot successfully find the optimal values for multiple
objectives simultaneously. In this paper, we propose a gray-box fuzzer for
multi-objective optimization (MOO) called MobFuzz. We model the multi-objective
optimization process as a multi- player multi-armed bandit (MPMAB). First, it
adaptively selects the objective combination that contains the most appropriate
objectives for the current situation. Second, our model deals with the power
schedule, which adaptively allocates energy to the seeds under the chosen
objective combination. In MobFuzz, we propose an evolutionary algorithm called
NIC to optimize our chosen objectives simultaneously without incurring
additional performance overhead. To prove the effectiveness of MobFuzz, we
conduct experiments on 12 real-world programs and the MAGMA data set.
Experiment results show that multi-objective optimization in MobFuzz
outperforms single-objective fuzzing in the baseline fuzzers. In contrast to
them, MobFuzz can select the optimal objective combination and increase the
values of multiple objectives up to 107
energy consumption. Moreover, MobFuzz has up to 6
finds 3x more unique bugs than the baseline fuzzers. The NIC algorithm has at
least a 2x improvement with a performance overhead of approximately 3
更多查看译文
AI 理解论文
溯源树
样例
生成溯源树,研究论文发展脉络
Chat Paper
正在生成论文摘要