arXiv subjects

Yuxuan Xie

Publications and source records attributed to Yuxuan Xie.

22 records · Page 2Linked to original sources

arXiv2024

Prompt Fuzzing for Fuzz Driver Generation

Crafting high-quality fuzz drivers not only is time-consuming but also requires a deep understanding of the library. However, the state-of-the-art automatic fuzz driver generation techniques fall short of expectations. While fuzz drivers derived from consumer code can reach deep states, they have limited coverage. Conversely, interpretative fuzzing can explore most API calls but requires numerous attempts within a large search space. We propose PromptFuzz, a coverage-guided fuzzer for prompt fuzzing that iteratively generates fuzz drivers to explore undiscovered library code. To explore API usage in fuzz drivers during prompt fuzzing, we propose several key techniques: instructive program generation, erroneous program validation, coverage-guided prompt mutation, and constrained fuzzer scheduling. We implemented PromptFuzz and evaluated it on 14 real-world libraries. Compared with OSS-Fuzz and Hopper (the state-of-the-art fuzz driver generation tool), fuzz drivers generated by PromptFuzz achieved 1.61 and 1.63 times higher branch coverage than those by OSS-Fuzz and Hopper, respectively. Moreover, the fuzz drivers generated by PromptFuzz detected 33 genuine, new bugs out of a total of 49 crashes, out of which 30 bugs have been confirmed by their respective communities.

cs.CR↗

arXiv2023

HOPPER: Interpretative Fuzzing for Libraries

Despite the fact that the state-of-the-art fuzzers can generate inputs efficiently, existing fuzz drivers still cannot adequately cover entries in libraries. Most of these fuzz drivers are crafted manually by developers, and their quality depends on the developers' understanding of the code. Existing works have attempted to automate the generation of fuzz drivers by learning API usage from code and execution traces. However, the generated fuzz drivers are limited to a few specific call sequences by the code being learned. To address these challenges, we present HOPPER, which can fuzz libraries without requiring any domain knowledge to craft fuzz drivers. It transforms the problem of library fuzzing into the problem of interpreter fuzzing. The interpreters linked against libraries under test can interpret the inputs that describe arbitrary API usage. To generate semantically correct inputs for the interpreter, HOPPER learns the intra- and inter-API constraints in the libraries and mutates the program with grammar awareness. We implemented HOPPER and evaluated its effectiveness on 11 real-world libraries against manually crafted fuzzers and other automatic solutions. Our results show that HOPPER greatly outperformed the other fuzzers in both code coverage and bug finding, having uncovered 25 previously unknown bugs that other fuzzers couldn't. Moreover, we have demonstrated that the proposed intra- and inter-API constraint learning methods can correctly learn constraints implied by the library and, therefore, significantly improve the fuzzing efficiency. The experiment results indicate that HOPPER is able to explore a vast range of API usages for library fuzzing out of the box.

cs.CR↗

arXiv2018

User Association for Offloading in Heterogeneous Network Based on Matern Cluster Process

Future mobile networks are converging toward heterogeneous multi-tier networks, where various classes of base stations (BS) are deployed based on user demand. So it is quite necessary to utilize the BSs resources rationally when BSs are sufficient. In this paper, we develop a more realistic model that fully considering the inter-tier dependence and the dependence between users and BSs, where the macro base stations (MBSs) are distributed according to a homogeneous Poisson point process (PPP) and the small base stations (SBSs) follows a Matern cluster process (MCP) whose parent points are located in the positions of the MBSs in order to offload the users from the over-loaded MBSs. We also assume the users are just randomly located in the circles centered at the MBSs. Under this model, we derive the association probability and the average ergodic rate by stochastic geometry. An interesting result that the density of MBS and the radius of the clusters jointly affect the association probabilities in a joint form is obtained. We also observe that using the clustered SBSs results in aggressive offloading compared with previous cellular networks.

eess.SP↗

arXiv2008

In Vitro Studies of Cells Grown on the Superconductor PrOxFeAs

The recent discovery of arsenic-based high temperature superconductors has reignited interest in the study of superconductor : biological interfaces. However, the new superconductor materials involve the chemistry of arsenic, their toxicity remain unclear [ Nature, 2008, 452(24):922]. In this study the possible adverse effects of this new family of superconductors on cells have been examined. Cell culture studies in conjunction with microscopy and viability assays were employed to examine the influence of arsenic-based superconductor PrOxFeAs (x=0.75) material in vitro. Imaging data revealed that cells were well adhered and spread on the surface of the superconductor. Furthermore, cytotoxicity studies showed that cells were unaffected during the time-course of the experiments, providing support for the biocompatibility aspects of PrOxFeAs-based superconductor material.

cond-mat.supr-con↗