Automated method and system for finding vulnerabilities in a program using fuzzing

A system for finding vulnerabilities in a program using fuzzing, the system comprises:

• an input/output interface configured to:
• receive a program under test (PUT) and PUT metadata as input, wherein the PUT is written in a programming language, and
• receive one or more program fuzzers for testing;
• one or more hardware processors;
• and
• a memory in communication with the one or more hardware processors, wherein the one or more first hardware processors are configured to execute programmed instructions stored in the one or more first memories, to:
• generate a first modified program using a fuzz and report driver generator, wherein the first modified program comprises PUT along with a signal handling code and a fuzz driver;
• generate a second modified program using the fuzz and report driver generator, wherein the second modified program comprises PUT along with a corpus triaging code and the report driver;
• generate an intermediate representation (IR) using the first modified program using a LLVM intermediate representation (LLVM IR) generator, wherein the LLVM IR utilizes a language specific LLVM frontend;
• provide the intermediate representation (IR) as an input to the program fuzzer to generate corpus and crashes;
• and
• provide the generated corpus and crashes and the second modified program as input to a profiler to generate a plurality of vulnerability parameters indicative of the vulnerability of the program under test and coverage over time, wherein the plurality of vulnerability parameters comprises stack trace, unique crashes, and a first identification time for each crash.

One or more non-transitory machine-readable information storage mediums comprising one or more instructions which when executed by one or more hardware processors cause:

• receiving a program under test (PUT) and PUT metadata as input, via an input/output interface wherein the PUT is written in a programming language;
• receiving, via the input/output interface, one or more program fuzzers for testing;
• generating, a first modified program using a fuzz and report driver generator, wherein the first modified program comprises PUT along with a signal handling code and a fuzz driver;
• generating, via the one or more hardware processors, a second modified program using the fuzz and report driver generator, wherein the second modified program comprises PUT along with a corpus triaging code and the report driver;
• generating, via the one or more hardware processors, an intermediate representation (IR) using the first modified program using a LLVM intermediate representation (LLVM IR) generator, wherein the LLVM IR utilizes a language specific LLVM frontend;
• providing, via the one or more hardware processors, the intermediate representation (IR) as an input to the program fuzzer to generate corpus and crashes;
• and
• providing, via the one or more hardware processors, the generated corpus and crashes and the second modified program as input to a profiler to generate a plurality of vulnerability parameters indicative of the vulnerability of the program under test and coverage over time, wherein the plurality of vulnerability parameters comprises stack trace, unique crashes, and a first identification time for each crash.