You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
{{ message }}
Repository navigation
Commit a06a56f
Browse filesBrowse the repository at this point in the historyBrowse files
<li><ahref="https://www.ndss-symposium.org/ndss-paper/hypermirage-direct-state-manipulation-in-hybrid-virtual-cpu-fuzzing/">HyperMirage: Direct State Manipulation in Hybrid Virtual CPU Fuzzing, 2026</a> - 针对虚拟机监视器（hypervisor）CPU 仿真接口的 Fuzz 工具，提出"直接状态操纵"自动变异 fuzzing 所消费的 VM 状态，免去手工构造种子的繁琐，在 Xen/KVM 中发现 11 个已确认 bug，<ahref="https://github.com/tum-itsec/hypermirage">HyperMirage 已开源</a>。</li>
387
+
<li><ahref="https://www.ndss-symposium.org/ndss-paper/mutato-enhancing-fuzz-drivers-with-adaptive-api-option-mutation/">MUTATO: Enhancing Fuzz Drivers with Adaptive API Option Mutation, 2026</a> - 一种与具体 Fuzzer 无关的 fuzz driver 增强方法，在变异输入数据的同时，依据覆盖率反馈自适应地变异 C/C++ API 的选项参数，覆盖更多选项组合下的代码路径，暂未见开源。</li>
388
+
<li><ahref="https://www.ndss-symposium.org/ndss-paper/phyfuzz-detecting-sensor-vulnerabilities-with-physical-signal-fuzzing/">PhyFuzz: Detecting Sensor Vulnerabilities with Physical Signal Fuzzing, 2026</a> - 提出"物理信号 Fuzz"新范式，通过注入物理测试信号挖掘传感器漏洞，研究传感器的性能极限、故障与偏置如何被攻击者转化为安全漏洞，暂未见开源。</li>
389
+
<li><ahref="https://www.ndss-symposium.org/ndss-paper/portrush-detect-write-port-contention-side-channel-vulnerabilities-via-hardware-fuzzing/">PortRush: Detect Write Port Contention Side-Channel Vulnerabilities via Hardware Fuzzing, 2026</a> - 在 RTL 层级检测写端口竞争（write port contention）侧信道漏洞的 Fuzz 框架，通过最大化写请求覆盖率的"竞争引导硬件 Fuzz"自动触发写端口竞争，暂未见开源。</li>
390
+
<li><ahref="https://www.ndss-symposium.org/ndss-paper/refuzz-reusing-tests-for-processor-fuzzing-with-contextual-bandits/">ReFuzz: Reusing Tests for Processor Fuzzing with Contextual Bandits, 2026</a> - 自适应的处理器 Fuzz 框架，利用上下文赌博机（contextual bandit）复用先前处理器上高效的测试用例，作为对新处理器进行 Fuzz 的种子，加速处理器设计的测试，暂未见开源。</li>
<li><ahref="https://www.ndss-symposium.org/ndss-paper/sysyphuzz-the-pressure-of-more-coverage/">SYSYPHUZZ: the Pressure of More Coverage, 2026</a> - 一个内核 Fuzz 工具，通过施加"覆盖率压力"有针对性地探索传统 Fuzzer 难以触达的欠测试代码区域，提升内核漏洞挖掘效果，来自 EPFL HexHive 团队，<ahref="https://github.com/HexHive/Sysyphuzz">Sysyphuzz 已开源</a>。</li>
393
+
</ul>
377
394
<h3id="2025">2025</h3>
378
395
<ul>
379
396
<li><ahref="https://www.ndss-symposium.org/ndss-paper/automatic-library-Fuzzing-through-api-relation-evolvement/">Automatic Library Fuzzing through API Relation Evolvement, 2025</a> - 通过 API 列表的组合调用进行测试。为了解决隐式API调用规范的问题提出了<strong>关系学习阶段</strong>，即通过更改 API 调用顺序观察执行状态的变化来推断API 关系。</li>
@@ -770,7 +787,7 @@ <h2 id="license">License</h2>
770
787
771
788
<footer>
772
789
<p>Fuzzing Tutorial - Collection of Papers, Blogs, and Tools Related to Fuzzing</p>
773
-
<p>Last updated: 2026-02-10</p>
790
+
<p>Last updated: 2026-07-08</p>
774
791
</footer>
775
792
</div>
776
793
@@ -779,7 +796,7 @@ <h2 id="license">License</h2>
779
796
<ulclass="toc-list">
780
797
<li><ahref="#recent-papersblogstools-related-to-fuzzing">Recent Papers/Blogs/Tools Related to Fuzzing</a><ulclass="nested-toc">
Copy file name to clipboardExpand all lines: docs/index_en.html
+15-1Lines changed: 15 additions & 1 deletion
Original file line number
Diff line number
Diff line change
@@ -370,6 +370,20 @@ <h3 id="others">Others</h3>
370
370
</ul>
371
371
<h3id="ndss">NDSS</h3>
372
372
<ul>
373
+
<li><ahref="https://www.ndss-symposium.org/ndss-paper/adgfuzz-assignment-dependency-guided-fuzzing-for-robotic-vehicles/">ADGFUZZ: Assignment Dependency-Guided Fuzzing for Robotic Vehicles, 2026</a></li>
374
+
<li><ahref="https://www.ndss-symposium.org/ndss-paper/an-llm-driven-fuzzing-framework-for-detecting-logic-instruction-bugs-in-plcs/">An LLM-Driven Fuzzing Framework for Detecting Logic Instruction Bugs in PLCs, 2026</a></li>
375
+
<li><ahref="https://www.ndss-symposium.org/ndss-paper/bsfuzzer-context-aware-semantic-fuzzing-for-ble-logic-flaw-detection/">BSFuzzer: Context-Aware Semantic Fuzzing for BLE Logic Flaw Detection, 2026</a></li>
376
+
<li><ahref="https://www.ndss-symposium.org/ndss-paper/dom-xss-detection-via-webpage-interaction-fuzzing-and-url-component-synthesis/">DOM-XSS Detection via Webpage Interaction Fuzzing and URL Component Synthesis, 2026</a></li>
377
+
<li><ahref="https://www.ndss-symposium.org/ndss-paper/firmagent-leveraging-fuzzing-to-assist-llm-agents-with-iot-firmware-vulnerability-discovery/">FirmAgent: Leveraging Fuzzing to Assist LLM Agents with IoT Firmware Vulnerability Discovery, 2026</a></li>
378
+
<li><ahref="https://www.ndss-symposium.org/ndss-paper/fuzzilicon-a-post-silicon-microcode-guided-x86-cpu-fuzzer/">Fuzzilicon: A Post-Silicon Microcode-Guided x86 CPU Fuzzer, 2026</a></li>
379
+
<li><ahref="https://www.ndss-symposium.org/ndss-paper/goldenfuzz-generative-golden-reference-hardware-fuzzing/">GoldenFuzz: Generative Golden Reference Hardware Fuzzing, 2026</a></li>
380
+
<li><ahref="https://www.ndss-symposium.org/ndss-paper/hypermirage-direct-state-manipulation-in-hybrid-virtual-cpu-fuzzing/">HyperMirage: Direct State Manipulation in Hybrid Virtual CPU Fuzzing, 2026</a></li>
381
+
<li><ahref="https://www.ndss-symposium.org/ndss-paper/mutato-enhancing-fuzz-drivers-with-adaptive-api-option-mutation/">MUTATO: Enhancing Fuzz Drivers with Adaptive API Option Mutation, 2026</a></li>
382
+
<li><ahref="https://www.ndss-symposium.org/ndss-paper/phyfuzz-detecting-sensor-vulnerabilities-with-physical-signal-fuzzing/">PhyFuzz: Detecting Sensor Vulnerabilities with Physical Signal Fuzzing, 2026</a></li>
383
+
<li><ahref="https://www.ndss-symposium.org/ndss-paper/portrush-detect-write-port-contention-side-channel-vulnerabilities-via-hardware-fuzzing/">PortRush: Detect Write Port Contention Side-Channel Vulnerabilities via Hardware Fuzzing, 2026</a></li>
384
+
<li><ahref="https://www.ndss-symposium.org/ndss-paper/refuzz-reusing-tests-for-processor-fuzzing-with-contextual-bandits/">ReFuzz: Reusing Tests for Processor Fuzzing with Contextual Bandits, 2026</a></li>
385
+
<li><ahref="https://www.ndss-symposium.org/ndss-paper/rtcon-context-adaptive-function-level-fuzzing-for-rtos-kernels/">RTCON: Context-Adaptive Function-Level Fuzzing for RTOS Kernels, 2026</a></li>
386
+
<li><ahref="https://www.ndss-symposium.org/ndss-paper/sysyphuzz-the-pressure-of-more-coverage/">SYSYPHUZZ: the Pressure of More Coverage, 2026</a></li>
373
387
<li><ahref="https://www.ndss-symposium.org/ndss-paper/automatic-library-fuzzing-through-api-relation-evolvement/">Automatic Library Fuzzing through API Relation Evolvement, 2025</a></li>
374
388
<li><ahref="https://www.ndss-symposium.org/ndss-paper/blackbox-fuzzing-of-distributed-systems-with-multi-dimensional-inputs-and-symmetry-based-feedback-pruning/">Blackbox Fuzzing of Distributed Systems with Multi-Dimensional Inputs and Symmetry-Based Feedback Pruning, 2025</a></li>
0 commit comments