Twitxy Saved

Mathias Payer

@gannimo

Securitatis inquisitor and professor at @EPFL_en leading the #HexHive 🐝 group, focusing on system/software security. @gannimo@infosec.exchange (he/him)
Lausanne, Switzerland nebelwelt.net Joined December 2010
383 Following 8.1K Followers 6.2K Posts

Latest posts 5

Mathias Payer @gannimo
I'd argue the opposite. General purpose grey box fuzzing research is complete as it is no longer feasible to distinguish between optimizations and over-fitting. Per-target optimizations should be left as an engineering exercise.
Are general-purpose fuzzing research dead? Our answer is probably no. Check our new fuzzer work FOX.

The awesome fuzzer @aflplusplus is already super-powerful and quite an effective baseline in academics and industry. But there is still room to improve upon. We introduce FOX (CCS 2024), a new general-purpose fuzzer. We formulate the fuzzing as a scholastic online control problem and advance the performance of AFL++ by up to 26.45% in real-world standalone programs and 6.59% in FuzzBench programs. Check our talk at CCS'24 @acm_ccs, fuzzing session 1, Oct 16th, 1:30 PM – 3:00 PM, at Grand Ballroom Salon F.

Paper: arxiv.org/abs/2406.04517
Code: github.com/FOX-Fuzz/FOX
View quoted post on X
2 replies 6 reposts 28 likes 12K views View on X