@article{Liu_Li_Prajapati_Wu_2019, title={DeepFuzz: Automatic Generation of Syntax Valid C Programs for Fuzz Testing}, volume={33}, url={https://ojs.aaai.org/index.php/AAAI/article/view/3895}, DOI={10.1609/aaai.v33i01.33011044}, abstractNote={<p>Compilers are among the most fundamental programming tools for building software. However, production compilers remain buggy. Fuzz testing is often leveraged with newlygenerated, or mutated inputs in order to find new bugs or security vulnerabilities. In this paper, we propose a grammarbased fuzzing tool called DEEPFUZZ. Based on a generative <em>Sequence-to-Sequence</em> model, DEEPFUZZ automatically and continuously generates well-formed C programs. We use this set of new C programs to fuzz off-the-shelf C compilers, e.g., GCC and Clang/LLVM. We present a detailed case study to analyze the success rate and coverage improvement of the generated C programs for fuzz testing. We analyze the performance of DEEPFUZZ with three types of sampling methods as well as three types of generation strategies. Consequently, DEEPFUZZ improved the testing efficacy in regards to the line, function, and branch coverage. In our preliminary study, we found and reported 8 bugs of GCC, all of which are actively being addressed by developers.</p>}, number={01}, journal={Proceedings of the AAAI Conference on Artificial Intelligence}, author={Liu, Xiao and Li, Xiaoting and Prajapati, Rupesh and Wu, Dinghao}, year={2019}, month={Jul.}, pages={1044-1051} }