most citedSoK: Prudent Evaluation Practices for Fuzzing

58 citations · 72 across the 7 of their papers we have counts for

collaborators

7 papers

cs.CR2025★ 3 cited

Protocol-Aware Firmware Rehosting for Effective Fuzzing of Embedded Network Stacks

Moritz Bley, Tobias Scharnowski, Simon Wörner +2

One of the biggest attack surfaces of embedded systems is their network interfaces, which enable communication with other devices. Unlike their general-purpose counterparts, embedd…

cs.CR2025

Empirical Security Analysis of Software-based Fault Isolation through Controlled Fault Injection

Nils Bars, Lukas Bernhard, Moritz Schloegel +1

We use browsers daily to access all sorts of information. Because browsers routinely process scripts, media, and executable code from unknown sources, they form a critical security…

cs.CR2025

A Comparative Study of Fuzzers and Static Analysis Tools for Finding Memory Unsafety in C and C++

Keno Hassler, Philipp Görz, Stephan Lipp

Over 70% of security vulnerabilities in critical software systems today result from memory safety violations. To address this challenge, fuzzing and static analysis are widely used…

cs.SE2025★ 1 cited

An Empirical Study of Fuzz Harness Degradation

Philipp Görz, Joschua Schilling, Nicolai Bissantz +1

The purpose of continuous fuzzing platforms is to enable fuzzing for software projects via fuzz harnesses -- but as the projects continue to evolve, are these harnesses updated in…

cs.CR2024★ 4 cited

DarthShader: Fuzzing WebGPU Shader Translators & Compilers

Lukas Bernhard, Nico Schiller, Moritz Schloegel +2

A recent trend towards running more demanding web applications, such as video games or client-side LLMs, in the browser has led to the adoption of the WebGPU standard that provides…

cs.CR2024★ 6 cited

No Peer, no Cry: Network Application Fuzzing via Fault Injection

Nils Bars, Moritz Schloegel, Nico Schiller +2

Network-facing applications are commonly exposed to all kinds of attacks, especially when connected to the internet. As a result, web servers like Nginx or client applications such…

cs.SE2024★ 58 cited

SoK: Prudent Evaluation Practices for Fuzzing

Moritz Schloegel, Nils Bars, Nico Schiller +7

Fuzzing has proven to be a highly effective approach to uncover software bugs over the past decade. After AFL popularized the groundbreaking concept of lightweight coverage feedbac…