Program Repair by Fuzzing over Patch and Input Space

Understand

Fuzz testing (fuzzing) is a well-known method for exposing bugs/vulnerabilities in software systems.

• Popular fuzzers, such as AFL, use a biased random search over the domain of program inputs, where 100s or 1000s of inputs (test cases) are executed per second in order to expose bugs.
• If a bug is discovered, it can either be fixed manually by the developer or fixed automatically using an Automated Program Repair (APR) tool.
• Like fuzzing, many existing APR tools are search-based, but over the domain of patches rather than inputs.