Fuzzability Testing Framework for Incomplete Firmware Binary

Jang, Jiwon; Son, Gyeongjin; Lee, Hyeonsu; Yun, Heesun; Kim, Deokjin; Lee, Sangwook; Kim, Seongmin; Jang, Daehee

doi:10.1109/access.2023.3297888

IEEE Access

2023

DOI: 10.1109/access.2023.3297888

|View full text |Cite

Fuzzability Testing Framework for Incomplete Firmware Binary

Jiwon Jang,

Gyeongjin Son,

Hyeonsu Lee

et al.

Help me understand this report

Search citation statements

Order By: Relevance

Paper Sections

Select...

Citation Types

Supporting

Mentioning

Contrasting

Year Published

2024

Publication Types

Select...

Article1

Relationship

Self Cite0

Independent1

Authors

Journals

Cited by 1 publication

References 28 publications

Supporting

Mentioning

Contrasting

Order By: Relevance

On the Analysis of Coverage Feedback in a Fuzzing Proprietary System

Jang,

Kim,

Kim

et al. 2024

Applied Sciences

View full text Add to dashboard Cite

Coverage feedback is one of the key mechanisms for improving the effectiveness of fuzzers by measuring and comparing the executed code regions while processing input data. In general, such guidance should always improve the performance of fuzzers to better find unexplored code regions. However, proprietary systems with uncommon I/O interfaces (e.g., UAV system, IoT devices, satellite firmware) require extensive engineering/porting efforts to apply coverage feedback support in developing their fuzzing platform. In this paper, we evaluate the detailed efficacy of coverage feedback in fuzzing based on 44 real-world bugs we found using OSS-Fuzz. Our analysis uncovered when and how code coverage information can be helpful, and our experiment demonstrates that although coverage guidance is always helpful to some extent, its effectiveness depends on various external factors. Therefore, such factors should be carefully considered for optimizing the cost and efficiency in designing the fuzzing architecture of proprietary systems.

show abstract

On the Analysis of Coverage Feedback in a Fuzzing Proprietary System

Jang,

Kim,

Kim

et al. 2024

Applied Sciences

View full text Add to dashboard Cite

show abstract

scite is a Brooklyn-based organization that helps researchers better discover and understand research articles through Smart Citations–citations that display the context of the citation and describe whether the article provides supporting or contrasting evidence. scite is used by students and researchers from around the world and is funded in part by the National Science Foundation and the National Institute on Drug Abuse of the National Institutes of Health.

Contact Info

customersupport@researchsolutions.com

10624 S. Eastern Ave., Ste. A-614

Henderson, NV 89052, USA

This site is protected by reCAPTCHA and the Google Privacy Policy and Terms of Service apply.

Blog Terms and Conditions API Terms Privacy Policy Contact Cookie Preferences Do Not Sell or Share My Personal Information

Made with 💙 for researchers

Part of the Research Solutions Family.

Fuzzability Testing Framework for Incomplete Firmware Binary

Cited by 1 publication

References 28 publications

On the Analysis of Coverage Feedback in a Fuzzing Proprietary System

On the Analysis of Coverage Feedback in a Fuzzing Proprietary System

Contact Info

Product

Resources

About