fuzzbench

FuzzBench：模糊测试基准测试即服务 FuzzBench 是一项免费服务，可以在 Google 规模上对各种真实世界的基准测试进行评估。FuzzBench 的目标是让严格评估模糊测试研究变得轻松，并使研究更容易被社区采用。我们邀请研究社区的成员贡献他们的模糊测试工具，并给我们反馈以改进我们的评估技术。 FuzzBench 提供： 一个易于集成的 API。 来自真实项目的基准测试。FuzzBench 可以使用任何 OSS-Fuzz 项目作为基准。 一个报告库，生成带有图表和统计测试的报告，帮助您理解结果的重要性。 要参与，请按照我们的简单指南提交您的模糊测试工具在 FuzzBench...

clusterfuzz

ClusterFuzz ClusterFuzz is a scalable fuzzing infrastructure that finds security and stability issues in software. Google uses ClusterFuzz to fuzz all Google products and as the fuzzing backend for OSS-Fuzz. ClusterFuzz provides many features which help seamlessly integrate fuzzing into a softwar...

RandSet: Randomized Corpus Reduction for Fuzzing Seed Scheduling

Seed explosion is a fundamental problem in fuzzing seed scheduling, where a fuzzer maintains a huge corpus and fails to choose promising seeds. Existing works focus on seed prioritization but still suffer from seed explosion since corpus size remains huge. We tackle this from a new perspective:...