Home > Research > Publications & Outputs > Towards Effective Performance Fuzzing

Electronic data

  • fa_cr

    Rights statement: ©2022 IEEE. Personal use of this material is permitted. However, permission to reprint/republish this material for advertising or promotional purposes or for creating new collective works for resale or redistribution to servers or lists, or to reuse any copyrighted component of this work in other works must be obtained from the IEEE.

    Accepted author manuscript, 986 KB, PDF document

    Available under license: CC BY: Creative Commons Attribution 4.0 International License

Links

Text available via DOI:

View graph of relations

Towards Effective Performance Fuzzing

Research output: Contribution in Book/Report/Proceedings - With ISBN/ISSNConference contribution/Paperpeer-review

Published
Publication date26/12/2022
Host publication2022 IEEE International Symposium on Software Reliability Engineering Workshops (ISSREW)
PublisherIEEE
Pages128-129
Number of pages2
ISBN (electronic)9781665476799
ISBN (print)9781665476799
<mark>Original language</mark>English
Event2022 IEEE International Symposium on Software Reliability Engineering Workshops (ISSREW) - UNC Charlotte Marriott Hotel & Conference Center, Charlotte, United States
Duration: 31/10/20223/11/2022
https://issre2022.github.io/

Workshop

Workshop2022 IEEE International Symposium on Software Reliability Engineering Workshops (ISSREW)
Country/TerritoryUnited States
CityCharlotte
Period31/10/223/11/22
Internet address

Publication series

NameProceedings - 2022 IEEE International Symposium on Software Reliability Engineering Workshops, ISSREW 2022

Workshop

Workshop2022 IEEE International Symposium on Software Reliability Engineering Workshops (ISSREW)
Country/TerritoryUnited States
CityCharlotte
Period31/10/223/11/22
Internet address

Abstract

Fuzzing is an automated testing technique that utilizes injection of random inputs in a target program to help uncover vulnerabilities. Performance fuzzing extends the classic fuzzing approach and generates inputs that trigger poor performance. During our evaluation of performance fuzzing tools, we have identified certain conventionally used assumptions that do not always hold true. Our research (re)evaluates PERFFUZZ [1] in order to identify the limitations of current techniques, and guide the direction of future work for improvements to performance fuzzing. Our experimental results highlight two specific limitations. Firstly, we identify the assumption that the length of execution paths correlate to program performance is not always the case, and thus cannot reflect the quality of test cases generated by performance fuzzing. Secondly, the default testing parameters by the fuzzing process (timeouts and size limits) overly confine the input search space. Based on these observations, we suggest further investigation on performance fuzzing guidance, as well as controlled fuzzing and testing parameters.

Bibliographic note

©2022 IEEE. Personal use of this material is permitted. However, permission to reprint/republish this material for advertising or promotional purposes or for creating new collective works for resale or redistribution to servers or lists, or to reuse any copyrighted component of this work in other works must be obtained from the IEEE.