OpenSSL

Please carefully read the main README.md, which is stored in the benchmark's root folder, before following this subject-specific guideline.

Fuzzing OpenSSL TLS server with AFLNet and AFLnwe

Please follow the steps below to run and collect experimental results for OpenSSL.

Step-1. Build a docker image

The following commands create a docker image tagged openssh. The image should have everything available for fuzzing and code coverage calculation.

cd $PFBENCH
cd subjects/TLS/OpenSSL
docker build . -t openssl

Step-2. Run fuzzing

The following commands run 4 instances of AFLNet and 4 instances of AFLnwe to simultaenously fuzz OpenSSL in 60 minutes.

cd $PFBENCH
mkdir results-openssl

profuzzbench_exec_common.sh openssl 4 results-openssl aflnet out-openssl-aflnet "-P TLS -D 10000 -q 3 -s 3 -E -K -R -W 100" 60 5 &
profuzzbench_exec_common.sh openssl 4 results-openssl aflnwe out-openssl-aflnwe "-D 10000 -K -W 100" 3600 5

Step-3. Collect the results

The following commands collect the code coverage results produced by AFLNet and AFLnwe and save them to results.csv.

cd $PFBENCH/results-openssl

profuzzbench_generate_csv.sh openssl 4 aflnet results.csv 0
profuzzbench_generate_csv.sh openssl 4 aflnwe results.csv 1

Step-4. Analyze the results

The results collected in step 3 (i.e., results.csv) can be used for plotting. Use the following command to plot the coverage over time and save it to a file.

cd $PFBENCH/results-openssl

profuzzbench_plot.py -i results.csv -p openssl -r 4 -c 60 -s 1 -o cov_over_time.png