Proj CDeepFuzz Paper Reading: IvySyn: Automated Vulnerability Discovery in Deep Learning Frameworks

发布时间 2023-09-06 21:40:23作者: 雪溯

Abstract

本文:IvySyn
Task: discover memory error vulnerabilities in DL frameworks
BugType: memory safety errors, fatal runtime errors
Method:

  1. 利用native APIs中静态写明的类型信息在low-level kernel code上执行type-aware mutation-based fuzzing
  2. synthesize Proof of Vulnerabilities(native DL C/C++ code code snippets that can trigger memory errors), PoV synthesis

实验:
对象:TensorFlow, PyTorch
Competitors: Atheris++, DocTer
效果:61 bugs fixed, 39 CVEs