Later archive addition

NEZHA: Efficient Domain-Independent Differential Testing

Theofilos Petsios, Adrian Tang, Salvatore Stolfo, Angelos D. Keromytis and Suman Jana

NEZHA guides differential testing by delta-diversity, a measure of how differently several programs behave on the same input, instead of code coverage, so mutation heads for inputs that make implementations disagree. It found semantic bugs in X.509 validation across SSL/TLS libraries, in ClamAV versus the Linux ELF loader and in XZ parsing, where one program accepts what another rejects.

Record

Researcher

Theofilos Petsios, Adrian Tang, Salvatore Stolfo, Angelos D. Keromytis and Suman Jana

Format

Whitepaper

In the archive

• Added to the 2016–17 archive after the original list was published

Tags

• parser-differential
• fuzzing
• tls
• filter-bypass
• tooling
• dynamic-analysis
• owasp-a02-2021
• owasp-a05-2021

This page is the archive's own catalogue record. The research is the work of Theofilos Petsios, Adrian Tang, Salvatore Stolfo, Angelos D. Keromytis and Suman Jana, first published at the original source. Preserved copies are kept so the citation survives its host.