Linear-time Temporal Logic guided Greybox Fuzzing

The LTL-Fuzzer tool, built on top of the AFL fuzzer, is found to be effective in detecting bugs in well-known protocol implementations, such as OpenSSL and Telnet. We use LTL-Fuzzer to reproduce known vulnerabilities (CVEs), to find new or zero-day bugs by checking properties extracted from RFCs (for which CVEs have been assigned), and to find violations of both safety as well as liveness properties in real-world protocol implementations. This package contains the LTL-Fuzzer tool and data-set in our experiments.基于AFL模糊测试器（AFL fuzzer）开发的LTL-Fuzzer工具，经证实可有效检测知名协议实现中的缺陷，例如OpenSSL与Telnet。我们借助该工具复现已披露的通用漏洞与披露（CVE）编号漏洞；针对已分配CVE编号的协议，通过提取其请求评论（Request for Comments，RFC）文档中的属性来发现新型或零日漏洞；同时还可检测真实世界协议实现中违反安全属性与活性属性的问题。本套件包含本研究实验中使用的LTL-Fuzzer工具及配套数据集。