Enhanced Grey Box Fuzzing for Intel Media Driver

Enhanced Grey Box Fuzzing for Intel Media Driver

Authors

Linlin Zhang and Ning Luo, Intel Asia-Pacific Research & Development Ltd, China

Abstract

Grey box fuzzing is one of the most successful methods for automatic vulnerability detection. However, conventional Grey box Fuzzers like AFL can open perform fuzzing against the whole input and spend more time on smaller seeds with lower execution time, which significantly impact fuzzing efficiency for complicated input types. In this work, we introduce one intelligent grey box fuzzing for Intel Media driver, MediaFuzzer, which can perform effective fuzzing based on selective fields of complicated input. Also, with one novel calling depth-based power schedule biased toward seed corpus which can lead to deeper calling chain, it dramatically improves the vulnerability exposures (~6.6 times more issues exposed) and fuzzing efficiency (~2.7 times more efficient) against the baseline AFL for Intel media driver with almost negligible overhead.

Keywords

vulnerability detection, automated testing, fuzzing, Grey box fuzzer.

Full Text : https://aircconline.com/csit/papers/v...
Abstract URL : https://aircconline.com/csit/abstract...
Volume URL : https://airccse.org/csit/V12N06.html

#vulnerabilitydetection #automatedtesting #fuzzing #Greyboxfuzzer

00:00 Objective
00:18 Background
02:09 Media Fuzzer
11:13 Test Results
13:01 Summary