CS 5963/6963: Applied Software Security Testing

This schedule is subject to change. Please check back frequently.

Part 1: Course Intro and Research 101

Monday Meeting	Wednesday Meeting
Jan. 08 Course Introduction (slides)	Jan. 10 Research 101: Ideas (slides)
Jan. 15 No Class (Martin Luther King Jr. Day)	Jan. 17 Research 101: Writing (slides)
Jan. 22 Research 101: Reviewing and Presenting (slides) Sign up for paper presentations by 11:59pm	Jan. 24 Introduction to Fuzzing (slides) Readings: Dissecting American Fuzzy Lop: A FuzzBench Evaluation (FUZZING'22) AFL++: Combining Incremental Steps of Fuzzing Research (WOOT'20) Beginner Fuzzing Lab released

Part 2: Fuzzing Fundamentals

Monday Meeting	Wednesday Meeting
Jan. 29 Input Generation (slides) Readings: DARWIN: Survival of the Fittest Fuzzing Mutators (NDSS'23) CarpetFuzz: Automatic Program Option Constraint Extraction from Documentation for Fuzzing (USENIX'23)	Jan. 31 Runtime Feedback (slides) Readings: The Use of Likely Invariants as Feedback for Fuzzers (USENIX'21) GLeeFuzz: Fuzzing WebGL Through Error Message Guided Mutation (USENIX'23)
Feb. 05 Bugs & Triage I (slides) Readings: SAND: Decoupling Sanitization from Fuzzing for Low Overhead (Oakland'24) Toss a Fault to Your Witcher: Applying Grey-box Coverage-Guided Mutational Fuzzing to Detect SQL and Command Injection Vulnerabilities (Oakland'23) Triage Lab released	Feb. 07 Bugs & Triage II (slides) Readings: AURORA: Statistical Crash Analysis for Automated Root Cause Explanation (USENIX'20) BENZENE: A Practical Root Cause Analysis System with an Under-Constrained State Mutation (Oakland'24) Beginner Fuzzing Lab due by 11:59pm
Feb. 12 Harnessing I (slides) Readings: Auto Off-Target: Enabling Thorough and Scalable Testing for Complex Software Systems (ASE'22) UTopia: Automatic Generation of Fuzz Driver using Unit Tests (Oakland'23) Harnessing Lab released	Feb. 14 Harnessing II (slides) Readings: AFGen: Whole-Function Fuzzing for Applications and Libraries (Oakland'24) Hopper: Interpretative Fuzzing for Libraries (CCS'23) Final Project released Triage Lab due by 11:59pm
Feb. 19 No Class (President's Day)	Feb. 21 Tackling Roadblocks (slides) Readings: Beyond the Coverage Plateau: A Comprehensive Study of Fuzz Blockers (FUZZING'23) Novelty Not Found: Adaptive Fuzzer Restarts to Improve Input Space Coverage (FUZZING'23)
Feb. 26 Fuzzing Science (slides) Readings: On the Reliability of Coverage-Based Fuzzer Benchmarking (ICSE'22) Systematic Assessment of Fuzzers using Mutation Analysis (USENIX'23) Sign up your final project team by 11:59pm	Feb. 28 Proposal Presentations Harnessing Lab due by 11:59pm
Mar. 04 No Class (Spring Break)	Mar. 06 No Class (Spring Break)

Part 3: Fuzzing Enhancements

Monday Meeting	Wednesday Meeting
Mar. 11 Optimization I (slides) Readings: Same Coverage, Less Bloat: Accelerating Binary-only Fuzzing with Coverage-preserving Coverage-guided Tracing (CCS'21) Accelerating Fuzzing through Prefix-Guided Execution (OOPSLA'23)	Mar. 13 Optimization II (slides) Readings: Forming Faster Firmware Fuzzers (USENIX'23) No Linux, No Problem: Fast and Correct Windows Binary Fuzzing via Target-embedded Snapshotting (USENIX'23)
Mar. 18 Hybrid Fuzzing I (slides) Readings: Driller: Augmenting Fuzzing Through Selective Symbolic Execution (NDSS'16) Symbolic execution with SymCC: Don't interpret, compile! (USENIX'20)	Mar. 20 Hybrid Fuzzing II (slides) Readings: Rare Path Guided Fuzzing (ISSTA'23) CONFETTI: Amplifying Concolic Guidance for Fuzzers (ICSE'22)
Mar. 25 Directed Fuzzing (slides) Readings: SELECTFUZZ: Efficient Directed Fuzzing with Selective Path Exploration (Oakland'23) FISHFUZZ: Catch Deeper Bugs by Throwing Larger Nets (USENIX'23)	Mar. 27 In-class Project Workday

Part 4: New Frontiers in Fuzzing

Monday Meeting	Wednesday Meeting
Apr. 01 Fuzzing OS Kernels (slides) Readings: No Grammar, No Problem: Towards Fuzzing the Linux Kernel without System-Call Descriptions (NDSS'23) ACTOR: Action-Guided Kernel Fuzzing (USENIX'23)	Apr. 03 LLM-guided Fuzzing (slides) Readings: Fuzz4All: Universal Fuzzing with Large Language Models (ICSE'24) Prompt Fuzzing for Fuzz Driver Generation (arXiv)
Apr. 08 Fuzzing Compilers (guest lecture by John Regehr) Readings: GrayC: Greybox Fuzzing of Compilers and Analysers for C (ISSTA'23) FuzzJIT: Oracle-Enhanced Fuzzing for JavaScript Engine JIT Compiler (USENIX'23)	Apr. 10 Hardware Testing (slides) Readings: Fuzzing Hardware Like Software (USENIX'22) MorFuzz: Fuzzing Processor via Runtime Instruction Morphing enhanced Synchronizable Co-simulation (USENIX'23)
Apr. 15 Fuzzing Multi-language Software Readings: PolyFuzz: Holistic Greybox Fuzzing of Multi-Language Systems (USENIX'23) PyRTFuzz: Detecting Bugs in Python Runtimes via Two-Level Collaborative Fuzzing (CCS'23)	Apr. 17 Final Presentations I
Apr. 22 Final Presentations II	Apr. 24 No Class (Reading Day)