Demystify the Fuzzing Methods: A Comprehensive Survey

• Published in: ACM computing surveys Vol. 56; no. 3; pp. 1 - 38
• Main Authors: Mallissery, Sanoop, Wu, Yu-Sung
• Format: Journal Article
• Language: English
• Published: New York, NY ACM 31.03.2024; Association for Computing Machinery
• Subjects: Applications programs; Computer science; Cybersecurity; Data structures; Distributed programming languages; Distributed systems security; Information flow control; Parsers; Security and privacy; Semantics; Software; Software and its engineering; Software reverse engineering; Software security engineering; Software testing; State (computer science); fuzzing; vulnerability discovery; code inspection; Automated testing

Massive software applications possess complex data structures or parse complex data structures; in such cases, vulnerabilities in the software become inevitable. The vulnerabilities are the source of cyber-security threats, and discovering this before the software deployment is challenging. Fuzzing...