On the Reliability of Coverage-Based Fuzzer Benchmarking

Marcel Böhme, László Szekeres, Jonathan Metzman

Abstract

Given a program where none of our fuzzers finds any bugs, how do we know which fuzzer is better? In practice, we often look to code coverage as a proxy measure of fuzzer effectiveness and consider the fuzzer which achieves more coverage as the better one.

BibTeX

@inproceedings{Boehme-al:ICSE22,
  author    = {Marcel B{\"{o}}hme and
               L{\'{a}}szl{\'{o}} Szekeres and
               Jonathan Metzman},
  title     = {On the Reliability of {Coverage-Based} Fuzzer Benchmarking},
  booktitle = {ICSE},
  pages     = {1621--1633},
  publisher = {{ACM}},
  year      = {2022},
}

On the Reliability of Coverage-Based Fuzzer Benchmarking

Abstract

Related papers