SNPSFuzzer: A Fast Greybox Fuzzer for Stateful Network Protocols Using Snapshots

Greybox fuzzing has been widely used in stateless programs and achieved great success. However, most stateof- the-art greybox fuzzers have slow speed shallow state depth coverage stateful network protocol programs, which are able to remember store the details of interactions. The existing for first send a series well-defined prefix sequences input messages then mutated test target protocol. This process leads high time cost. In this paper, we propose SNPSFuzzer, fast fuzzer protocols using snapshots. SNPSFuzzer dumps context information when program is specific restores it needs be fuzzed. Furthermore, design message chain analysis algorithm explore more deeper states. Our evaluation shows that compared with state-of-the-art AFLNET, improves processing by 70.7% increases path 20.9% on average within 24 hours. Moreover, exposes previously unreported vulnerability Tinydtls.