Angora: Efficient Fuzzing by Principled Search

Understand

Fuzzing is a popular technique for finding software bugs.

• However, the performance of the state-of-the-art fuzzers leaves a lot to be desired.
• Fuzzers based on symbolic execution produce quality inputs but run slow, while fuzzers based on random mutation run fast but have difficulty producing quality inputs.
• We propose Angora, a new mutation-based fuzzer that outperforms the state-of-the-art fuzzers by a wide margin.