SpotFuzzer: Static Instrument and Fuzzing Windows COTs

The security research on Windows has received little attention in the academic circle. Most of new methods are usually designed for Linux system and difficult to transplant Windows. Fuzzing programs always suffers from its closed source. Therefore, we need find an appropriate way achieve feedback programs. To our knowledge, there no stable scalable static instrumentation tools yet, dynamic tools, such as DynamoRIO, have been criticized their performance. make matters worse, very limited usage scenarios impotent many services or large commercial software. In this paper, proposed SpotInstr, a novel tool instrumenting binaries. It is lightweight can instrument most PE short time. At same time, SpotInstr provides set filters, which be used select points restrict target regions. Based these propose selective method speed up both fuzzing. After that, design called SpotFuzzer, leverages ability fuzz We tested SpotFuzzer multiple dimensions show superior performance stability.