Repository logo

Infoscience

  • English
  • French
Log In
Logo EPFL, École polytechnique fédérale de Lausanne

Infoscience

  • English
  • French
Log In
  1. Home
  2. Academic and Research Output
  3. Conferences, Workshops, Symposiums, and Seminars
  4. VIDEZZO: Dependency-aware Virtual Device Fuzzing
 
conference paper

VIDEZZO: Dependency-aware Virtual Device Fuzzing

Liu, Qiang
•
Toffalini, Flavio  
•
Zhou, Yajin
Show more
January 1, 2023
Proceedings - IEEE Symposium on Security and Privacy
44th IEEE Symposium on Security and Privacy (SP)

A virtual machine interacts with its host environment through virtual devices, driven by virtual device messages, e.g., I/O operations. By issuing crafted messages, an adversary can exploit a vulnerability in a virtual device to escape the virtual machine, gaining host access. Even though hundreds of bugs in virtual devices have been discovered, coverage-based virtual device fuzzers hardly consider intra-message dependencies (a field in a virtual device message may be dependent on another field) and inter-message dependencies (a message may depend on a previously issued message), thus resulting in limited scalability or efficiency. ViDeZZo, our new dependency-aware fuzzing framework for virtual devices, overcomes the limitations of existing virtual device fuzzers by annotating intra-message dependencies with a lightweight grammar, and by self-learning inter-message dependencies with new mutation rules. Specifically, ViDeZZo annotates message dependencies and applies three categories of message mutators. This approach avoids heavy manual effort to analyze specifications and speeds up the slow exploration by satisfying dependencies, resulting in a scalable and efficient fuzzer that boosts bug discovery in virtual devices.In our evaluation, ViDeZZo covers two hypervisors, four architectures, five device categories, and 28 virtual devices, and reaches competitive coverage faster. Moreover, ViDeZZo successfully finds 24 existing and 28 new bugs across diverse bug types. We are actively engaging with the community with 7 of our submitted patches already accepted.

  • Details
  • Metrics
Type
conference paper
DOI
10.1109/SP46215.2023.10179354
Web of Science ID

WOS:001035501503017

Scopus ID

2-s2.0-85166479024

Author(s)
Liu, Qiang
Toffalini, Flavio  
Zhou, Yajin
Payer, Mathias  
Date Issued

2023-01-01

Publisher

Institute of Electrical and Electronics Engineers Inc.

Publisher place

Los Alamitos

Published in
Proceedings - IEEE Symposium on Security and Privacy
ISBN of the book

978-1-6654-9336-9

Series title/Series vol.

IEEE Symposium on Security and Privacy

ISSN (of the series)

1081-6011

Start page

3228

End page

3245

Subjects

Fuzzing

•

Hypervisor

•

Virtual-device

Editorial or Peer reviewed

REVIEWED

Written at

EPFL

EPFL units
HEXHIVE  
Event nameEvent acronymEvent placeEvent date
44th IEEE Symposium on Security and Privacy (SP)

Hybrid, San Francisco, United States

2023-05-22 - 2023-05-25

Available on Infoscience
September 11, 2023
Use this identifier to reference this record
https://infoscience.epfl.ch/handle/20.500.14299/200514
Logo EPFL, École polytechnique fédérale de Lausanne
  • Contact
  • infoscience@epfl.ch

  • Follow us on Facebook
  • Follow us on Instagram
  • Follow us on LinkedIn
  • Follow us on X
  • Follow us on Youtube
AccessibilityLegal noticePrivacy policyCookie settingsEnd User AgreementGet helpFeedback

Infoscience is a service managed and provided by the Library and IT Services of EPFL. © EPFL, tous droits réservés