IDEAS home Printed from https://ideas.repec.org/a/gam/jmathe/v9y2021i3p205-d483804.html
   My bibliography  Save this article

MooFuzz: Many-Objective Optimization Seed Schedule for Fuzzer

Author

Listed:
  • Xiaoqi Zhao

    (College of Information Science and Engineering, Ocean University of China, Qingdao 266100, China)

  • Haipeng Qu

    (College of Information Science and Engineering, Ocean University of China, Qingdao 266100, China)

  • Wenjie Lv

    (College of Information Science and Engineering, Ocean University of China, Qingdao 266100, China)

  • Shuo Li

    (College of Information Science and Engineering, Ocean University of China, Qingdao 266100, China)

  • Jianliang Xu

    (College of Information Science and Engineering, Ocean University of China, Qingdao 266100, China)

Abstract

Coverage-based Greybox Fuzzing (CGF) is a practical and effective solution for finding bugs and vulnerabilities in software. A key challenge of CGF is how to select conducive seeds and allocate accurate energy. To address this problem, we propose a novel many-objective optimization solution, MooFuzz, which can identify different states of the seed pool and continuously gather different information about seeds to guide seed schedule and energy allocation. First, MooFuzz conducts risk marking in dangerous positions of the source code. Second, it can automatically update the collected information, including the path risk, the path frequency, and the mutation information. Next, MooFuzz classifies seed pool into three states and adopts different objectives to select seeds. Finally, we design an energy recovery mechanism to monitor energy usage in the fuzzing process and reduce energy consumption. We implement our fuzzing framework and evaluate it on seven real-world programs. The experimental results show that MooFuzz outperforms other state-of-the-art fuzzers, including AFL, AFLFast, FairFuzz, and PerfFuzz, in terms of path discovery and bug detection.

Suggested Citation

  • Xiaoqi Zhao & Haipeng Qu & Wenjie Lv & Shuo Li & Jianliang Xu, 2021. "MooFuzz: Many-Objective Optimization Seed Schedule for Fuzzer," Mathematics, MDPI, vol. 9(3), pages 1-19, January.
    • Handle: RePEc:gam:jmathe:v:9:y:2021:i:3:p:205-:d:483804
    as

    Download full text from publisher

    File URL: https://www.mdpi.com/2227-7390/9/3/205/pdf
    Download Restriction: no
    File URL: https://www.mdpi.com/2227-7390/9/3/205/
    Download Restriction: no
    ---><---

    References listed on IDEAS

    as
    1. Hong Duan & Wei Zhao & Gaige Wang & Xuehua Feng, 2012. "Test-Sheet Composition Using Analytic Hierarchy Process and Hybrid Metaheuristic Algorithm TS/BBO," Mathematical Problems in Engineering, Hindawi, vol. 2012, pages 1-22, November.
    2. Hong-Yan Sang & Quan-Ke Pan & Pei-Yong Duan & Jun-Qing Li, 2018. "An effective discrete invasive weed optimization algorithm for lot-streaming flowshop scheduling problems," Journal of Intelligent Manufacturing, Springer, vol. 29(6), pages 1337-1349, August.
    Full references (including those not matched with items on IDEAS)

    Most related items

    These are the items that most often cite the same works as this one and are cited by the same works as this one.
    1. Jiang Li & Lihong Guo & Yan Li & Chang Liu, 2019. "Enhancing Elephant Herding Optimization with Novel Individual Updating Strategies for Large-Scale Optimization Problems," Mathematics, MDPI, vol. 7(5), pages 1-35, April.
    2. Gui Li & Gai-Ge Wang & Shan Wang, 2021. "Two-Population Coevolutionary Algorithm with Dynamic Learning Strategy for Many-Objective Optimization," Mathematics, MDPI, vol. 9(4), pages 1-34, February.
    3. Wenjie Wang & Guangdong Tian & Gang Yuan & Duc Truong Pham, 2023. "Energy-time tradeoffs for remanufacturing system scheduling using an invasive weed optimization algorithm," Journal of Intelligent Manufacturing, Springer, vol. 34(3), pages 1065-1083, March.
    4. Cheng-Long Wei & Gai-Ge Wang, 2020. "Hybrid Annealing Krill Herd and Quantum-Behaved Particle Swarm Optimization," Mathematics, MDPI, vol. 8(9), pages 1-23, August.
    5. Juan Li & Dan-dan Xiao & Hong Lei & Ting Zhang & Tian Tian, 2020. "Using Cuckoo Search Algorithm with Q -Learning and Genetic Operation to Solve the Problem of Logistics Distribution Center Location," Mathematics, MDPI, vol. 8(2), pages 1-32, January.
    6. Zheng, Zhi-xin & Li, Jun-qing & Duan, Pei-yong, 2019. "Optimal chiller loading by improved artificial fish swarm algorithm for energy saving," Mathematics and Computers in Simulation (MATCOM), Elsevier, vol. 155(C), pages 227-243.

    Corrections

    All material on this site has been provided by the respective publishers and authors. You can help correct errors and omissions. When requesting a correction, please mention this item's handle: RePEc:gam:jmathe:v:9:y:2021:i:3:p:205-:d:483804. See general information about how to correct material in RePEc.

    If you have authored this item and are not yet registered with RePEc, we encourage you to do it here. This allows to link your profile to this item. It also allows you to accept potential citations to this item that we are uncertain about.

    If CitEc recognized a bibliographic reference but did not link an item in RePEc to it, you can help with this form .

    If you know of missing items citing this one, you can help us creating those links by adding the relevant references in the same way as above, for each refering item. If you are a registered author of this item, you may also want to check the "citations" tab in your RePEc Author Service profile, as there may be some citations waiting for confirmation.

    For technical questions regarding this item, or to correct its authors, title, abstract, bibliographic or download information, contact: MDPI Indexing Manager (email available below). General contact details of provider: https://www.mdpi.com .

    Please note that corrections may take a couple of weeks to filter through the various RePEc services.

    IDEAS is a RePEc service. RePEc uses bibliographic data supplied by the respective publishers.