Fuzz Driver Generation for Closed-source SDK Libraries
Overview of APICraft
APICraft ( /'eIpIkra:ft/ ) is the first fuzz driver generation tool for shared libraries without the requirement of libraries' source code.
Unlike existing works, APICraft creates the fuzz driver in a bottom-up method called collect-and-combine. It first learns the data and control dependencies from the traces of consumer programs and the static/dynamic analysis results of the libraries, then combines them to generate the fuzz driver using a multi-objective genetic algorithm.
In our evaluation, APICraft outperforms manually written fuzz drivers in both library's coverage and found crashes. This website provides additional materials for evaluating APICraft. The website is continuously updating.
Generated Fuzz Drivers, provides download links for APICraft generated fuzz drivers used in current submission's evaluation
Manually Written Fuzz Drivers, provides download links for manually written fuzz drivers used in current submission's evaluation
Supplementary Files of Appendix Section, provides the full vulnerability list found by using fuzz drivers generated by APICraft
Source code, source code of APICraft