UTopia

Introduzione UTopia è uno strumento per generare automaticamente fuzz driver a partire da unit test. UTopia consente agli sviluppatori di eseguire fuzz testing senza conoscenze specifiche su come scrivere fuzzer. Anche gli sviluppatori esperti di fuzzing possono risparmiare tempo significativo...

FalseCrashReducer: Mitigating False Positive Crashes in OSS-Fuzz-Gen Using Agentic AI

Fuzz testing has become a cornerstone technique for identifying software bugs and security vulnerabilities, with broad adoption in both industry and open-source communities. Directly fuzzing a function requires fuzz drivers, which translate random fuzzer inputs into valid arguments for the target...

Poster: Machine Learning for Vulnerability Detection As Target Oracle in Automated Fuzz Driver Generation

In vulnerability detection, machine learning has been used as an effective static analysis technique, although it suffers from a significant rate of false positives. Contextually, in vulnerability discovery, fuzzing has been used as an effective dynamic analysis technique, although it requires...