A Qualitative Usability Evaluation of the Clang Static Analyzer and libFuzzer with CS
summary
The paper evaluates usability of two bug-finding tools: the Clang Static Analyzer (static analysis) and libFuzzer (coverage-guided fuzzing). Researchers ran a mixed factorial usability study with 32 CS master students and six competitive CTF players and found many participants had severe problems getting libFuzzer to run, while most could run the Clang Static Analyzer without major issues; the paper offers suggestions to improve libFuzzer and compares the tools' usability.
AI-written summary · about
related talks
24mWhy you should be using automated fuzzing to test for security issues in your code
39mMaking Fuzzing Part of Your Software Development Lifecycle
52mStructure aware fuzzing
53mFuzzing 101
05mWhy Can't Johnny Fix Vulnerabilities: A Usability Evaluation of Static Analysis Tools
25mGoing Beyond Coverage-Guided Fuzzing with Structured Fuzzing
01h 15mMake your programs more reliable with Fuzzing
59mBeyond Sanitizers...