Proj CDeepFuzz Paper Reading: IvySyn: Automated Vulnerability Discovery in Deep Learning Frameworks

Abstract

本文：IvySyn
Task: discover memory error vulnerabilities in DL frameworks
BugType: memory safety errors, fatal runtime errors
Method:

1. 利用native APIs中静态写明的类型信息在low-level kernel code上执行type-aware mutation-based fuzzing
2. synthesize Proof of Vulnerabilities(native DL C/C++ code code snippets that can trigger memory errors)， PoV synthesis

实验：
对象：TensorFlow, PyTorch
Competitors: Atheris++, DocTer
效果：61 bugs fixed, 39 CVEs