Research Article
Comprehensive Commits Security Testing with Enhanced Multi-target Directed Fuzzing
@INPROCEEDINGS{10.1007/978-3-032-23453-7_3, author={Xiaolei Wang and Chao Feng and Ruilin Li}, title={Comprehensive Commits Security Testing with Enhanced Multi-target Directed Fuzzing}, proceedings={Security and Privacy in Communication Networks. 21st EAI International Conference, SecureComm 2025, Xiangtan, China, July 4--6, 2025, Proceedings, Part III}, proceedings_a={SECURECOMM}, year={2026}, month={11}, keywords={Commits Directed Fuzzing Multi-Target Data Suffix Path Prefix}, doi={10.1007/978-3-032-23453-7_3} }- Xiaolei Wang
Chao Feng
Ruilin Li
Year: 2026
Comprehensive Commits Security Testing with Enhanced Multi-target Directed Fuzzing
SECURECOMM
Springer
DOI: 10.1007/978-3-032-23453-7_3
Abstract
Securing software commits is critical because code changes often introduce vulnerabilities in both direct and dependent regions. Directed greybox fuzzers (DGF) aim to address this by targeting commit changes, but existing tools struggle with commit testing. They focus too much on hitting single target and ignore how changes affect other code. In multi-target scenarios, they lack the ability to trigger targets in the right order. Since data-suffix code execution depends on path-prefix code setup, skipping this order leads to flawed security checks, missed bugs, and wasted testing time. This weakness in handling sequential triggering seriously limits current DGF-based commit testing.
Copyright © 2025–2026 ICST