Saved in:
| Main Authors: | , , , , |
|---|---|
| Format: | Preprint |
| Published: |
2025
|
| Subjects: | |
| Online Access: | https://arxiv.org/abs/2510.04835 |
| Tags: |
Add Tag
No Tags, Be the first to tag this record!
|
| _version_ | 1866916991349030912 |
|---|---|
| author | Gao, Wentao Borovica-Gajic, Renata Cha, Sang Kil Qiu, Tian Pham, Van-Thuan |
| author_facet | Gao, Wentao Borovica-Gajic, Renata Cha, Sang Kil Qiu, Tian Pham, Van-Thuan |
| contents | Fuzzing is a highly effective automated testing method for uncovering software vulnerabilities. Despite advances in fuzzing techniques, such as coverage-guided greybox fuzzing, many fuzzers struggle with coverage plateaus caused by fuzz blockers, limiting their ability to find deeper vulnerabilities. Human expertise can address these challenges, but analyzing fuzzing results to guide this support remains labor-intensive. To tackle this, we introduce InsightQL, the first human-assisting framework for fuzz blocker analysis. Powered by a unified database and an intuitive parameterized query interface, InsightQL aids developers in systematically extracting insights and efficiently unblocking fuzz blockers. Our experiments on 14 popular real-world libraries from the FuzzBench benchmark demonstrate the effectiveness of InsightQL, leading to the unblocking of many fuzz blockers and considerable improvements in code coverage (up to 13.90%). |
| format | Preprint |
| id |
arxiv_https___arxiv_org_abs_2510_04835 |
| institution | arXiv |
| publishDate | 2025 |
| record_format | arxiv |
| spellingShingle | InsightQL: Advancing Human-Assisted Fuzzing with a Unified Code Database and Parameterized Query Interface Gao, Wentao Borovica-Gajic, Renata Cha, Sang Kil Qiu, Tian Pham, Van-Thuan Software Engineering Fuzzing is a highly effective automated testing method for uncovering software vulnerabilities. Despite advances in fuzzing techniques, such as coverage-guided greybox fuzzing, many fuzzers struggle with coverage plateaus caused by fuzz blockers, limiting their ability to find deeper vulnerabilities. Human expertise can address these challenges, but analyzing fuzzing results to guide this support remains labor-intensive. To tackle this, we introduce InsightQL, the first human-assisting framework for fuzz blocker analysis. Powered by a unified database and an intuitive parameterized query interface, InsightQL aids developers in systematically extracting insights and efficiently unblocking fuzz blockers. Our experiments on 14 popular real-world libraries from the FuzzBench benchmark demonstrate the effectiveness of InsightQL, leading to the unblocking of many fuzz blockers and considerable improvements in code coverage (up to 13.90%). |
| title | InsightQL: Advancing Human-Assisted Fuzzing with a Unified Code Database and Parameterized Query Interface |
| topic | Software Engineering |
| url | https://arxiv.org/abs/2510.04835 |