Improving Fuzz Testing Using Game Theory

Authors:
Sheila Becker;Humberto Abdelnur;Jorge Lucangeli Obes;Radu State;Olivier Festor
Affiliations:
-;-;-;-;-
Venue:
NSS '10 Proceedings of the 2010 Fourth International Conference on Network and System Security
Year:
2010

Citing 0
Cited 2

Semi-valid input coverage for fuzz testing

Proceedings of the 2013 International Symposium on Software Testing and Analysis
A novel vulnerability detection method for ZigBee MAC layer

International Journal of Grid and Utility Computing

Quantified Score

Hi-index	0.00

Visualization

Abstract

We propose a game theoretical model for fuzz testing, consisting in generating unexpected input to search for software vulnerabilities. As of today, no performance guarantees or assessment frameworks for fizzing exist. Our paper addresses these issues and describes a simple model that can be used to assess and identify optimal fizzing strategies, by leveraging game theory. In this context, payoff functions are obtained using a tainted data analysis and instrumentation of a target application to assess the impact of different fizzing strategies.