12 citations · 14 across the 5 of their papers we have counts for
7 papers
BACFuzz: Exposing the Silence on Broken Access Control Vulnerabilities in Web Applications
I Putu Arya Dharmaadi, Mohannad Alhanahnah, Van-Thuan Pham +2
Broken Access Control (BAC) remains one of the most critical and widespread vulnerabilities in web applications, allowing attackers to access unauthorized resources or perform priv…
AFLNet Five Years Later: On Coverage-Guided Protocol Fuzzing
Ruijie Meng, Van-Thuan Pham, Marcel Böhme +1
Protocol implementations are stateful which makes them difficult to test: Sending the same test input message twice might yield a different response every time. Our proposal to con…
EDEFuzz: A Web API Fuzzer for Excessive Data Exposures
Lianglu Pan, Shaanan Cohney, Toby Murray +1
APIs often transmit far more data to client applications than they need, and in the context of web applications, often do so over public channels. This issue, termed Excessive Data…
State Selection Algorithms and Their Impact on The Performance of Stateful Network Protocol Fuzzing
Dongge Liu, Van-Thuan Pham, Gidon Ernst +2
The statefulness property of network protocol implementations poses a unique challenge for testing and verification techniques, including Fuzzing. Stateful fuzzers tackle this chal…
ProFuzzBench: A Benchmark for Stateful Protocol Fuzzing
Roberto Natella, Van-Thuan Pham
We present a new benchmark (ProFuzzBench) for stateful fuzzing of network protocols. The benchmark includes a suite of representative open-source network servers for popular protoc…
Human-In-The-Loop Automatic Program Repair
Marcel Böhme, Charaka Geethal, Van-Thuan Pham
We introduce Learn2fix, the first human-in-the-loop, semi-automatic repair technique when no bug oracle--except for the user who is reporting the bug--is available. Our approach ne…