StorFuzz: Using Data Diversity to Overcome Fuzzing Plateaus
Abstract
Fuzzing is widely used to discover software bugs and vulnerabilities. Unfortunately, real-world long-running fuzzing campaigns often plateau and no progress can be made anymore, leaving code areas untested. State-of-the-art fuzzers leverage code coverage to measure progress and reach new areas, but this is insufficient to capture all program behavior, as code coverage may be the same for different behaviors, thus preventing progress and masking bugs.
Publication details
- Journal / source
- Proceedings of the 2026 IEEE/ACM 48th International Conference on Software Engineering
- Publisher
- ACM
- Pages
- 3962–3974
- Publication date
- 12 April 2026