A Retrospect on My Master's Research
[essay] 2 min read
Abstract
Reflecting on Topuzz, foundational reasoning proves more critical than performance metrics. Addressing inefficiencies that can only be solved by multi-targeted fuzzing provides a stronger basis for research.
본문
In retrospect, the most effective starting point for multi-targeted fuzzing is establishing a solid reasoning for it, rather than chasing metrics. Existing such tools emphasize speed, yet they lack a fundamental explanation for why multiple targets should be fuzzed together. FishFuzz filters machine-defined targets to prioritize reachable locations. AFLRun adjusts energy of each seed based on target distance, and optimizes number of calculations on multi-target settings. However, both remain optimized forms of single-target fuzzing, failing to address the reason to support a multi-targeted setting.
Therefore, the primary objective of us, who already have a single-directed fuzzing tool, should be on defining the specific inefficiencies inherent in running single-directed fuzzers in isolation. One example is that isolated runs systematically discard seeds that are valuable for other targets. This observation serves as a logical justification for a dedicated scheduler.
To navigate this complexity, adopting a reverse-thinking mindset is powerful when anchored by a clear baseline. In this context, the baseline represents any approach constructed by aligning single-targeted fuzzing instances, potentially incorporating basic seed pool inheritance. Embracing the perspective that “research is the process of gaining knowledge” allows one to tackle unknown variables aggressively. However, this demands a rigorous comparison against every predefined permutation of single-targeted fuzzing. By asking “What must be done to validate the necessity of this idea?”, the research transforms into a structured plan.
Ultimately, this retrospective serves as a strategic framework to systematically prove the inefficiency of the baseline. It lays the solid groundwork for Topuzz to evolve from a tool into a rigorous scientific contribution in future developments.