Table 1 Fuzzer comparison table.
Fuzzer | Platform | Fitness metrics | Key features | Target Programs |
---|---|---|---|---|
WinDGF | Windows | Path Distance, Key-block coverage | Hybrid Synergistic Analysis, Dual-mode Quantitative Assessment, GUI Idle-state Bypass | XnView, IrfanView, 7-Zip, etc. |
WinAFL5 | Windows | Code coverage | Windows Port of AFL Framework | XnView, IrfanView, 7-Zip, etc. |
Winnie6 | Windows | Code coverage | Harness Synthesis, Fork-like Process Cloning | XnView, 7-Zip, etc. |
WinFuzz14 | Windows | Code coverage | Target-embedded Snapshot Restoration | Tar, IrfanView, etc. |
SpotFuzzer12 | Windows | Code coverage | SpotInstr Static Instrumentation Engine | 7-Zip, Notepad++, etc. |
SiCsFuzzer13 | Windows | Code coverage | Sparse Code Sampling, Warm-up Phase Optimization | XnView, IrfanView, 7-Zip, etc. |
BuzzFuzz7 | Unix-like | Input Byte Influence coverage | Taint-guided Mutation Strategy | Swfdec, MuPDF |
FishFuzz8 | Unix-like | Multi-distance metric | Sanitizer-guided Vulnerability Prioritization | Tcpdump, Tiff2pdf, etc. |
DeFuzz9 | Unix-like | Path distance | Deep Learning- based Target Prediction | LibMing |
UAFL11 | Unix-like | State transition coverage | Typestate-guided Fuzzing, Specialized Memory Error Detection | Readelf, Lrzip, etc. |
AFLGo2 | Unix-like | Path distance | AFL-based Directed Fuzzing | LibXML2, LibMing, Binutils, etc. |
WAFLGO15 | Unix-like | Critical code coverage, Multi-targets dstance | Critical Code-guided Input Generation, Lightweight Multi- target Optimization | Libjpeg, Libtiff, etc. |
FunFuzz16 | Unix-like | Function significance (FS) | FS-aware Energy Scheduling, Lazy FS Computation | Magma Test Set |
RegionFuzz17 | Unix-like | Sensitive/Complex/ Deep/Rare-reach Code Metrics | Vulnerability Region Awareness Mechanism | LAVA-M, libxml2, etc. |