Grammar-Based Evolutionary Fuzzing for JSON-RPC APIs

Web Application Programming Interfaces (APIs) allow systems to be addressed programmatically and form the backbone of the internet. RESTful and RPC APIs are among the most common API architectures used. In the last decades, researchers have proposed various techniques for automated testing of RESTful APIs, however, to the best of the authors'...

Guiding Automated Test Case Generation for Transaction-Reverting Statements in Smart Contracts

Transaction-reverting statements are key constructs within Solidity that are extensively used for authority and validity checks. Current state-of-the-art search-based testing and fuzzing approaches do not explicitly handle these statements and therefore can not effectively detect security vulnerabilities. In this paper, we argue that it is...

Domain-Based Fuzzing for Supervised Learning of Anomaly Detection in Cyber-Physical Systems

A novel approach is proposed for constructing models of anomaly detectors using supervised learning from the traces of normal and abnormal operations of an Industrial Control System (ICS). Such detectors are of value in detecting process anomalies in complex critical infrastructure such as power generation and water treatment systems. The traces...

Generating Highly-structured Input Data by Combining Search-based Testing and Grammar-based Fuzzing

Software testing is an important and time-consuming task that is often done manually. In the last decades, researchers have come up with techniques to generate input data (e.g., fuzzing) and automate the process of generating test cases (e.g., search-based testing). However, these techniques are known to have their own limitations: search-based...

Static Program Analysis as a Fuzzing Aid

Molecular dynamics simulations of ballistic He penetration into W fuzz

Results are presented of large-scale Molecular Dynamics simulations of low-energy He bombardment of W nanorods, or so-called 'fuzz' structures. The goal of these simulations is to see if ballistic He penetration through W fuzz offers a more realistic scenario for how He moves through fuzz layers than He diffusion through fuzz nanorods....