AFLGopher: Accelerating Directed Fuzzing via Feasibility-Aware Guidance

• URL: http://arxiv.org/abs/2511.10828v1
• Date: Thu, 13 Nov 2025 22:02:05 GMT
• Title: AFLGopher: Accelerating Directed Fuzzing via Feasibility-Aware Guidance
• Abstract summary: directed fuzzing aims to efficiently reach target code sites in a program.<n>General guiding mechanism is to calculate the control-flow distance between the current progress and the target.<n>We propose feasibility-aware directed fuzzing named AFLGopher.
• Score: 13.604566905251149
• License: http://creativecommons.org/licenses/by/4.0/
• Abstract: Directed fuzzing is a useful testing technique that aims to efficiently reach target code sites in a program. The core of directed fuzzing is the guiding mechanism that directs the fuzzing to the specified target. A general guiding mechanism adopted in existing directed fuzzers is to calculate the control-flow distance between the current progress and the target, and use that as feedback to guide the directed fuzzing. A fundamental problem with the existing guiding mechanism is that the distance calculation is \emph{feasibility-unaware}. In this work, we propose feasibility-aware directed fuzzing named AFLGopher. Our new feasibility-aware distance calculation provides pragmatic feedback to guide directed fuzzing to reach targets efficiently. We propose new techniques to address the challenges of feasibility prediction. Our new classification method allows us to predict the feasibility of all branches based on limited traces, and our runtime feasibility-updating mechanism gradually and efficiently improves the prediction precision. We implemented AFLGopher and compared AFLGopher with state-of-the-art directed fuzzers including AFLGo, enhanced AFLGo, WindRanger, BEACON and SelectFuzz. AFLGopher is 3.76x, 2.57x, 3.30x, 2.52x and 2.86x faster than AFLGo, BEACON, WindRanger, SelectFuzz and enhanced AFLGo, respectively, in reaching targets. AFLGopher is 5.60x, 5.20x, 4.98x, 4.52x, and 5.07x faster than AFLGo, BEACON, WindRanger, SelectFuzz and enhanced AFLGo, respectively, in triggering known vulnerabilities.

Related papers

• Attention Distance: A Novel Metric for Directed Fuzzing with Large Language Models [23.471848775985364]
  We introduce textbfattention distance, a novel metric that computes attention scores between code elements and reveal their intrinsic connections.<n>Compared to state-of-the-art directed fuzzers DAFL and WindRanger, our approach achieves textbf2.89$times$ and textbf7.13$times$ improvements, respectively.
  arXiv  Detail & Related papers  (2025-12-19T17:03:50Z)
• Hybrid Approach to Directed Fuzzing [0.0]
  We propose a hybrid approach to directed fuzzing with novel seed scheduling algorithm.<n>We implement our approach in Sydr-Fuzz tool using LibAFL-DiFuzz as directed fuzzer and Sydr as dynamic symbolic executor.
  arXiv  Detail & Related papers  (2025-07-07T10:29:16Z)
• HF-DGF: Hybrid Feedback Guided Directed Grey-box Fuzzing [2.5274064055508174]
  Directed Grey-box Fuzzing (DGF) has emerged as a widely adopted technique for crash reproduction and patch testing.<n>This study presents HF-DGF, a novel directed grey-box fuzzing framework.<n>Its seed scheduling is guided by a hybrid feedback mechanism integrating control-flow distance, value-flow influence score, and slice coverage.
  arXiv  Detail & Related papers  (2025-06-29T02:36:40Z)
• LibAFL-DiFuzz: Advanced Architecture Enabling Directed Fuzzing [0.0]
  We construct flexible tool for directed fuzzing with components able to be easily combined with other techniques.<n>We evaluate our fuzzer in comparison with AFLGo and BEACON, and reveal speedup in time to exposure on several benchmarks.
  arXiv  Detail & Related papers  (2024-12-26T09:54:57Z)
• PrescientFuzz: A more effective exploration approach for grey-box fuzzing [0.45053464397400894]
  We produce an augmented version of LibAFL's fuzzbench' fuzzer, called PrescientFuzz, that makes use of semantic information from the target program's control flow graph (CFG)<n>We develop an input corpus scheduler that prioritises the selection of inputs for mutation based on the proximity of their execution path to uncovered edges.
  arXiv  Detail & Related papers  (2024-04-29T17:21:18Z)
• Griffin: Mixing Gated Linear Recurrences with Local Attention for Efficient Language Models [101.70220733111164]
  We propose Hawk, an RNN with gated linear recurrences, and Griffin, a hybrid model that mixes gated linear recurrences with local attention. Hawk exceeds the reported performance of Mamba on downstream tasks, while Griffin matches the performance of Llama-2 despite being trained on over 6 times fewer tokens. We scale Griffin up to 14B parameters, and explain how to shard our models for efficient distributed training.
  arXiv  Detail & Related papers  (2024-02-29T18:24:46Z)
• SpirDet: Towards Efficient, Accurate and Lightweight Infrared Small Target Detector [60.42293239557962]
  We propose SpirDet, a novel approach for efficient detection of infrared small targets. We employ a new dual-branch sparse decoder to restore the feature map. Extensive experiments show that the proposed SpirDet significantly outperforms state-of-the-art models.
  arXiv  Detail & Related papers  (2024-02-08T05:06:14Z)
• Improving Dual-Encoder Training through Dynamic Indexes for Negative Mining [61.09807522366773]
  We introduce an algorithm that approximates the softmax with provable bounds and that dynamically maintains the tree. In our study on datasets with over twenty million targets, our approach cuts error by half in relation to oracle brute-force negative mining.
  arXiv  Detail & Related papers  (2023-03-27T15:18:32Z)
• Lane Detection with Versatile AtrousFormer and Local Semantic Guidance [92.83267435275802]
  Lane detection is one of the core functions in autonomous driving. Most existing methods tend to resort to CNN-based techniques. We propose Atrous Transformer (AtrousFormer) to solve the problem.
  arXiv  Detail & Related papers  (2022-03-08T13:25:35Z)
• DeFuzz: Deep Learning Guided Directed Fuzzing [41.61500799890691]
  We propose a deep learning (DL) guided directed fuzzing for software vulnerability detection, named DeFuzz. DeFuzz includes two main schemes: (1) we employ a pre-trained DL prediction model to identify the potentially vulnerable functions and the locations (i.e., vulnerable addresses) Precisely, we employ Bidirectional-LSTM (BiLSTM) to identify attention words, and the vulnerabilities are associated with these attention words in functions.
  arXiv  Detail & Related papers  (2020-10-23T03:44:03Z)
• FastLR: Non-Autoregressive Lipreading Model with Integrate-and-Fire [74.04394069262108]
  We propose FastLR, a non-autoregressive (NAR) lipreading model which generates all target tokens simultaneously. FastLR achieves the speedup up to 10.97$times$ compared with state-of-the-art lipreading model.
  arXiv  Detail & Related papers  (2020-08-06T08:28:56Z)

This list is automatically generated from the titles and abstracts of the papers in this site.

This site does not guarantee the quality of this site (including all information) and is not responsible for any consequences.