New Development of Fuzzing-based Vulnerabilities Mining Research

From B.P. Miller firstly introduced the fuzzing in 1990 and found failures in over 25% of UNIX programs, to recent Taint Scope system presented by Peking University and the discovery of 27 0day vulnerabilities in several popular software including Adobe Acrobat, the practical experiences and results have illuminated that fuzzing are effective for vulnerability mining. In this paper, fuzzing are studied and surveyed. First, new features of fuzzing is analyzed. And then, current test case generation techniques of fuzzing is divided into four categories. This paper also indicates new research directions for improving fuzzing.