Abstract <p>A systematic analysis of methods for evaluating the effectiveness of fuzzers is conducted. A&#xa0;minimal but complete set of metrics is identified: branch coverage, number of unique crashes, and time to first crash. A normalized integral indicator is proposed that allows post hoc comparison of the results of different tools without reruns.</p>

错误:搜索内容不能为空,请输入英文关键词
错误:关键词超出字数限制,请精简
高级检索

Generalized Method for Comparative Analysis of Fuzz-Testing Tools

  • R. A. Ognev,
  • D. P. Zegzhda

摘要

Abstract

A systematic analysis of methods for evaluating the effectiveness of fuzzers is conducted. A minimal but complete set of metrics is identified: branch coverage, number of unique crashes, and time to first crash. A normalized integral indicator is proposed that allows post hoc comparison of the results of different tools without reruns.