Learn&Fuzz: Machine learning for input fuzzing

  title={Learn&Fuzz: Machine learning for input fuzzing},
  author={Patrice Godefroid and Hila Peleg and Rishabh Singh},
  journal={2017 32nd IEEE/ACM International Conference on Automated Software Engineering (ASE)},
Fuzzing consists of repeatedly testing an application with modified, or fuzzed, inputs with the goal of finding security vulnerabilities in input-parsing code. In this paper, we show how to automate the generation of an input grammar suitable for input fuzzing using sample inputs and neural-network-based statistical machine-learning techniques. We present a detailed case study with a complex input format, namely PDF, and a large complex security-critical parser for this format, namely, the PDF… CONTINUE READING

8 Figures & Tables



Citations per Year

Citation Velocity: 18

Averaging 18 citations per year over the last 2 years.

Learn more about how we calculate this metric in our FAQ.
  • GitHub repos referencing this paper

  • Presentations referencing similar topics