notesum.ai

Published at November 27

TransferFuzz: Fuzzing with Historical Trace for Verifying Propagated Vulnerability Code

cs.SE

Released Date: November 27, 2024

Authors: Siyuan Li¹, Yuekang Li², Zuxin Chen¹, Chaopeng Dong¹, Yongpan Wang¹, Hong Li¹, Yongle Chen³, Hongsong Zhu¹

Aff.: ¹Institute of Information Engineering, Chinese Academy of Sciences, Beijing, China; School of Cyber Security, University of Chinese Academy of Sciences, Beijing, China; ²School of Computer Science and Engineering, The University of New South Wales, Sydney, Australia; ³College of Computer Science and Technology, Taiyuan University of Technology, Shanxi, China

Arxiv: http://arxiv.org/abs/2411.18347v1

Model	TP	FP	TN	FN	Precision	Recall
LibAM	38	108	0	0	0.260	1.0
OCTOPOCs	15	0	108	23	1.0	0.395
AFLGo	27	0	108	11	1.0	0.711
Windranger	29	0	108	10	1.0	0.763
SelectFuzz	29	0	108	10	1.0	0.763
DAFL	20	0	108	18	1.0	0.526
TransferFuzz	38	0	108	0	1.0	1.0