Advanced Fuzzing Techniques Andreas Zeller + Rahul Gopinath + Rafael Dutra

News

02.07.2020

Presentation Schedule

Hi, all!

Since most of the students wouldn't have everything ready to present next week, we are delaying the presentations for one more week.

So the presentations should happen on 15 July and 22 July (possibly also 23 July if there is any overflow).

If... Read more

Hi, all!

Since most of the students wouldn't have everything ready to present next week, we are delaying the presentations for one more week.

So the presentations should happen on 15 July and 22 July (possibly also 23 July if there is any overflow).

If anyone wants to volunteer to present on the first day (15 July), just let us know. Otherwise we will choose next week who presents on which date.

You should try to finish as many experiments as possible by 15 July so you can be ready to present.

Presentations should be kept under 10 minutes so we have more time for discussion.

17.06.2020

Todays presentations

Hello,

As we discussed previously, we are scheduling these project proposal presentations today:

Mortiz : Reducer
David: Grammar Mining
Joshua: Symbolic & Concolic fuzzer
Matthias: Grammar based GUI fuzzing

These should be simple 10 min. presentation +... Read more

Hello,

As we discussed previously, we are scheduling these project proposal presentations today:

Mortiz : Reducer
David: Grammar Mining
Joshua: Symbolic & Concolic fuzzer
Matthias: Grammar based GUI fuzzing

These should be simple 10 min. presentation + 5 min. discussion about what you're planning to do for the project.

See you there!

16.06.2020

Talk by Andreas Zeller "Learning the Language of Failure" on Thursday

Dear all,

as we have talked a lot about current research in fuzzing and testing, let me announce one of my own talks taking place this Thursday at 13:30:

    https://casa.rub.de/en/news/distinguished-lectures

The talk is all about automated testing and... Read more

Dear all,

as we have talked a lot about current research in fuzzing and testing, let me announce one of my own talks taking place this Thursday at 13:30:

    https://casa.rub.de/en/news/distinguished-lectures

The talk is all about automated testing and debugging techniques, and gives a nice overview on our latest and greatest recent research. And you may even see a few presentation ideas you haven't seen before. Enjoy!

Andreas Zeller

09.06.2020

Project Proposal Presentations Tomorrow

Hello,

We're scheduling these project proposal presentations tomorrow:

Florian Bauckholt: Lang Fuzzer

Bachir Bendrissou: Parser Directed Test Generation

Niklas Kempf: Concolic vs. Grammar Fuzzing

Tobias Lorig: Combining Generational and Mutational... Read more

Hello,

We're scheduling these project proposal presentations tomorrow:

Florian Bauckholt: Lang Fuzzer

Bachir Bendrissou: Parser Directed Test Generation

Niklas Kempf: Concolic vs. Grammar Fuzzing

Tobias Lorig: Combining Generational and Mutational Fuzzing

 

These should be simple 10 min. presentation + 5 min. discussion about what you're planning to do for the project.

 

See you there!

27.05.2020

Next seminar meeting (with talk on empirical work): Friday 17:00

Subject says it all – this is a replacement date for today's canceled meeting. See you on Friday!

19.05.2020

Project Assignments

Dear students,

   We have assigned topics based on your preferences (more than half of students got their first choice).
   Please find your topic assignments below.

1. Reducer : Moritz
2. Parser-Directed Test Generation (PDTG) vs uninstrumented : Bachir
3.... Read more

Dear students,

   We have assigned topics based on your preferences (more than half of students got their first choice).
   Please find your topic assignments below.

1. Reducer : Moritz
2. Parser-Directed Test Generation (PDTG) vs uninstrumented : Bachir
3. Combining generational grammar-based fuzzing with mutational fuzzing : Tobias
4. Symbolic & Concolic fuzzer : Joshua
5. Lang fuzzer and plain grammar fuzzer : Florian
6. Grammar mining (string inclusion, taints, and mimid) : David
7. Concolic Fuzzing vs Grammar Fuzzing: Niklas
8. Grammar based GUI fuzzing : Matthias

13.05.2020

Choose Assignment Preferences

Dear all,

as detailed in today's meeting, we would like to assign a topic to each of you. You can find the list of topics here:

    https://cms.cispa.saarland/fuzzing20/materials/

To express your preferences for an individual topic, please fill out this... Read more

Dear all,

as detailed in today's meeting, we would like to assign a topic to each of you. You can find the list of topics here:

    https://cms.cispa.saarland/fuzzing20/materials/

To express your preferences for an individual topic, please fill out this survey. Please use one "yes" vote (green checkmark) for the topic that interests you most, and up to two "if need be" votes (yellow checkmark in parentheses; tick the checkbox twice for these) for up to two follow-up topics. For your name, initials will suffice. Please use this link to cast your vote:

    https://doodle.com/poll/5izamentcm5xcm3r

Please cast your vote by Monday, May 18. Feel free to ask us any questions anytime!

Stay safe, stay healthy, and see you next Wednesday,

Andreas + Rafael + Rahul

05.05.2020

Initial meeting postponed to next week – please choose best date(s)

Dear all,

Bad news: our co-instructor Rahul has fallen sick, and will be unavailable for the rest of the week. Hence, we cannot have our initial meeting this week as planned. Instead, we will have our first meeting next week. Please take a moment to pick the time... Read more

Dear all,

Bad news: our co-instructor Rahul has fallen sick, and will be unavailable for the rest of the week. Hence, we cannot have our initial meeting this week as planned. Instead, we will have our first meeting next week. Please take a moment to pick the time that works best for you:

    https://doodle.com/poll/shx2g8863gxae48k

The time you indicate your availability will also hold for our recurring meetings in the next weeks, so check with your recurring (course) schedule. Please complete the schedule by Friday May 8 at the latest.

We will send additional instructions on the first meeting together with the format and expectations before the meeting, and on Monday at the latest. We very much look forward working with you!

Our apologies for the inconvenience, and see you next week,

Andreas (+ Rahul)

30.04.2020

Initial meeting

Welcome to the seminar on "Advanced Fuzzing Techniques"!

We will have a first (virtual) seminar meeting on Wednesday May 6 at 16:00.  Invites to the Zoom videoconference will be sent by mail before the meeting.

Looking forward to see you, and best... Read more

Welcome to the seminar on "Advanced Fuzzing Techniques"!

We will have a first (virtual) seminar meeting on Wednesday May 6 at 16:00.  Invites to the Zoom videoconference will be sent by mail before the meeting.

Looking forward to see you, and best wishes,

Rahul + Andreas

31.03.2020

Registration

Please note that to register, you have to use the central system of the CS department.

Show all
 

Advanced Fuzzing Techniques

In this seminar, we explore and evaluate automated test generation techniques (fuzzers) and related techniques for their effectiveness and efficiency. We discuss and design evaluation criteria and apply them on a number of techniques from the "Fuzzing Book" (https://www.fuzzingbook.org). Apart from reporting and presenting your results in the seminar, your evaluation results will be included in the book. If the results or techniques are novel (many of them are), we will also strive to publish them as a scientific paper, with you as co-author.

Group phase:
* Introduction to empirical techniques (all)
* Designing benchmarks (all)
* Defining common evaluation questions (all)
* Presenting empirical results (all)

Individual phase:
* Selecting an individual fuzzing technique for evaluation
* Defining individual evaluation questions and parameters
* Conducting the evaluation
* Producing an evaluation report
* Presenting and discussing evaluation results

The fuzzers are implemented in Python and come as Jupyter Notebooks. You will also use Jupyter Notebooks for conducting the evaluation and presenting the final results, both as report and as presentation.

Requirements: You should have passed the lecture "Generating Software Tests" or have sufficient knowledge from the course.  Knowledge of Python and experience with Jupyter Notebooks is helpful, but can be acquired during the seminar.

Registration: To register, use the central system of the CS department.



Privacy Policy | Legal Notice
If you encounter technical problems, please contact the administrators