Skip to main content

Trabalho em anais de eventoOpen Access

FuSeBMC: A White-Box Fuzzer for Finding Security Vulnerabilities in C Programs (Competition Contribution)

ALSHMRANY, K.; MENEZES, R.; GADELHA, M. Y. R.; CORDEIRO, L. C

2021 • In 24th International Conference on Fundamental Approaches to Software Engineering • 13 citações

Resumo

Resumo

We describe and evaluate a novel white-box fuzzer for C programs named FuSeBMC, which combines fuzzing and symbolic execution, and applies Bounded Model Checking (BMC) to find security vulnerabilities in C programs. FuSeBMC explores and analyzes C programs (1) to find execution paths that lead to property violations and (2) to incrementally inject labels to guide the fuzzer and the BMC engine to produce test-cases for code coverage. FuSeBMC successfully participates in Test-Comp’21 and achieves first place in the Cover-Error category and second place in the Overall category.

palavras-chave

Palavras-chave

C programssecurity vulnerabilitiessymbolic executionbounded model checkingcode coveragetest case generationvulnerability detection

Status

Published

links

Trabalho em anais de evento