Linear-time Temporal Logic guided Greybox Fuzzing

The LTL-Fuzzer tool, built on top of the AFL fuzzer, is found to be effective in detecting bugs in well-known protocol implementations, such as OpenSSL and Telnet. We use LTL-Fuzzer to reproduce known vulnerabilities (CVEs), to find new or zero-day bugs by checking properties extracted from RFCs (for which CVEs have been assigned), and to find violations of both safety as well as liveness properties in real-world protocol implementations. This package contains the LTL-Fuzzer tool and data-set in our experiments.基于AFL模糊测试器（AFL fuzzer）构建的LTL-Fuzzer工具，经证实可有效检测OpenSSL、Telnet等知名协议实现中的漏洞。本研究使用该工具复现已知的通用漏洞披露（Common Vulnerabilities and Exposures，CVEs）漏洞，通过提取互联网工程任务组（IETF）请求评论（Request for Comments，RFC）文档中已分配CVEs的属性，发现新漏洞或零日漏洞，并可检测实际部署的协议实现中安全属性（safety property）与活性属性（liveness property）的违规情况。本软件包包含本实验所用的LTL-Fuzzer工具与实验数据集。