WINNIE : Fuzzing Windows Applications with Harness Synthesis and Fast Cloning
Jinho Jung, Stephen Tong, Hong Hu, Jungwon Lim, Yonghwi Jin, Taesoo Kim
Abstract
Fuzzing is an emerging technique to automatically validate programs and uncover bugs. It has been widely used to test many programs and has found thousands of security vulnerabilities. However, existing fuzzing efforts are mainly centered around Unix-like systems, as Windows imposes unique challenges for fuzzing: a closed-source ecosystem, the heavy use of graphical interfaces and the lack of fast process cloning machinery.
Topics & Concepts
Fuzz testingComputer scienceTaint checkingOperating systemUnixProcess (computing)Fork (system call)Code coverageProgramming languageSoftwareAdvanced Malware Detection TechniquesWeb Data Mining and AnalysisSoftware Testing and Debugging Techniques