A fuzzer and a symbolic executor walk into a cloud

Finding bugs in programs is hard. Automating the process is even harder. We tackled the harder problem and produced two production-quality bug-finding systems: GRR, a high-throughput fuzzer, and PySymEmu (PSE), a binary symbolic executor with support for concrete inputs. From afar, fuzzing is a dumb, brute-force method that works surprisingly well, and symbolic execution is…

Fuzzing: Hack, Art, and Science, February 2020

SAGE: Whitebox Fuzzing for Security Testing - ACM Queue

Fuzzing - an overview

Random ramblings of a security nerd - Security

Java Fuzzing with Jazzer compared to Symflower

Applied Sciences, Free Full-Text

Breaking Obfuscated Programs with Symbolic Execution

PDF) Sydr: Cutting Edge Dynamic Symbolic Execution

Applied Sciences, Free Full-Text

Example of an execution tree. Symbolic execution, then, consists of the

Finding BIOS Vulnerabilities with Symbolic Execution and Virtual

Dr.PathFinder: hybrid fuzzing with deep reinforcement concolic execution toward deeper path-first search

PDF) Checksum-Aware Fuzzing Combined with Dynamic Taint Analysis and Symbolic Execution

PDF] Learning to Fuzz from Symbolic Execution with Application to Smart Contracts