An Empirical Study on the Distance Metric in Guiding Directed Grey-box Fuzzing
Tingke Wen, Yuwei Li, Lu Zhang, Huimin Ma, Zulie Pan

TL;DR
This study empirically evaluates how different distance metrics influence directed grey-box fuzzing performance, revealing limited impact of metric choice and highlighting the need for better mutation strategies.
Contribution
First empirical analysis of various distance metrics in guiding directed grey-box fuzzing, providing insights into their limited effectiveness and limitations of current mutation strategies.
Findings
Different distance metrics show minimal performance variation.
Distance metrics do not effectively measure vulnerability triggering difficulty.
Current mutation strategies have inherent limitations in generating high-quality testcases.
Abstract
Directed grey-box fuzzing (DGF) aims to discover vulnerabilities in specific code areas efficiently. Distance metric, which is used to measure the quality of seed in DGF, is a crucial factor in affecting the fuzzing performance. Despite distance metrics being widely applied in existing DGF frameworks, it remains opaque about how different distance metrics guide the fuzzing process and affect the fuzzing result in practice. In this paper, we conduct the first empirical study to explore how different distance metrics perform in guiding DGFs. Specifically, we systematically discuss different distance metrics in the aspect of calculation method and granularity. Then, we implement different distance metrics based on AFLGo. On this basis, we conduct comprehensive experiments to evaluate the performance of these distance metrics on the benchmarks widely used in existing DGF-related work. The…
Peer Reviews
No public reviews on file for this paper yet. If you reviewed it on a platform where reviews are public (OpenReview, ICLR, NeurIPS, ICML), you can paste yours below so the community can read it here.
Code & Models
Videos
No videos yet. Explain this paper in a talk, walkthrough, or lecture? Add one.
Taxonomy
TopicsIndustrial Vision Systems and Defect Detection
