SoFi: Reflection-augmented fuzzing for JavaScript engines

• Main Authors: HE, Xiaoyu, XIE, Xiaofei, LI, Yuekang, SUN, Jianwen, LI, Feng, ZOU, Wei, LIU, Yang, YU, Lei, ZHOU, Jianhua, SHI, Wenchang, HUO, Wei
• Format: text
• Language: English
• Published: Institutional Knowledge at Singapore Management University 2021
• Subjects: fuzzing; security; vulnerability; OS and Networks; Software Engineering
• Online Access: https://ink.library.smu.edu.sg/sis_research/6939; https://ink.library.smu.edu.sg/context/sis_research/article/7942/viewcontent/3460120.3484823.pdf
• Institution: Singapore Management University

JavaScript engines have been shown prone to security vulnerabilities, which can lead to serious consequences due to their popularity. Fuzzing is an effective testing technique to discover vulnerabilities. The main challenge of fuzzing JavaScript engines is to generate syntactically and semantically...