2025/02/17 by Kun Hu, Hu, Kun, Qicai Chen +22 · 1 voice
Computer Science · Decision Sciences · #Cryptography and Security (cs.CR) #Distributed and Parallel Computing Systems #FOS: Computer and information sciences #Operating Systems (cs.OS) #Scientific Computing and Data Management #Software Engineering (cs.SE) #Software Testing and Debugging Techniques #cs.CR #cs.OS #cs.SE
paper · pdf · doi:10.48550/arxiv.2502.13163
openalex publication_date 2025/02/17 · arxiv published 2025/02/17 · openalex created_date 2025/10/10 · arxiv updated 2026/01/19 · openalex updated_date 2026/07/28
Vulnerabilities in open-source operating systems (OSs) pose substantial security risks to software systems, making their detection crucial. While fuzzing has been an effective vulnerability detection technique in various domains, OS fuzzing (OSF) faces unique challenges due to OS complexity and multi-layered interaction, and has not been comprehensively reviewed. Therefore, this work systematically surveys the state-of-the-art OSF techniques, categorizes them based on the general fuzzing process, and investigates challenges specific to kernel, file system, driver, and hypervisor fuzzing. Finally, future research directions for OSF are discussed.