DeepHunter: A Coverage-Guided Fuzz Testing Framework for Deep Neural Networks

被引:273
|
作者
Xie, Xiaofei [1 ]
Ma, Lei [2 ]
Juefei-Xu, Felix [3 ]
Xue, Minhui [4 ]
Chen, Hongxu [1 ]
Liu, Yang [1 ,5 ]
Zhao, Jianjun [2 ]
Li, Bo [6 ]
Yin, Jianxiong [7 ]
See, Simon [7 ]
机构
[1] Nanyang Technol Univ, Singapore, Singapore
[2] Kyushu Univ, Fukuoka, Fukuoka, Japan
[3] Carnegie Mellon Univ, Pittsburgh, PA 15213 USA
[4] Univ Adelaide, Adelaide, SA, Australia
[5] Zhejiang Sci Tech Univ, Hangzhou, Zhejiang, Peoples R China
[6] Univ Illinois, Urbana, IL USA
[7] NVIDIA AI Tech Ctr, Singapore, Singapore
基金
新加坡国家研究基金会;
关键词
Deep learning testing; metamorphic testing; coverage-guided fuzzing;
D O I
10.1145/3293882.3330579
中图分类号
TP31 [计算机软件];
学科分类号
081202 ; 0835 ;
摘要
The past decade has seen the great potential of applying deep neural network (DNN) based software to safety-critical scenarios, such as autonomous driving. Similar to traditional software, DNNs could exhibit incorrect behaviors, caused by hidden defects, leading to severe accidents and losses. In this paper, we propose DeepHunter, a coverage-guided fuzz testing framework for detecting potential defects of general-purpose DNNs. To this end, we first propose a metamorphic mutation strategy to generate new semantically preserved tests, and leverage multiple extensible coverage criteria as feedback to guide the test generation. We further propose a seed selection strategy that combines both diversity-based and recency-based seed selection. We implement and incorporate 5 existing testing criteria and 4 seed selection strategies in DeepHunter. Large-scale experiments demonstrate that (1) our metamorphic mutation strategy is useful to generate new valid tests with the same semantics as the original seed, by up to a 98% validity ratio; (2) the diversity-based seed selection generally weighs more than recency-based seed selection in boosting the coverage and in detecting defects; (3) DeepHunter outperforms the state of the arts by coverage as well as the quantity and diversity of defects identified; (4) guided by corner-region based criteria, DeepHunteris useful to capture defects during the DNN quantization for platform migration.
引用
收藏
页码:146 / 157
页数:12
相关论文
共 50 条
  • [21] Recurrent Neural Networks for Fuzz Testing Web Browsers
    Sablotny, Martin
    Jensen, Bjorn Sand
    Johnson, Chris W.
    INFORMATION SECURITY AND CRYPTOLOGY (ICISC 2018), 2019, 11396 : 354 - 370
  • [22] EPF: An Evolutionary, Protocol-Aware, and Coverage-Guided Network Fuzzing Framework
    Helmke, Rene
    Winter, Eugen
    Rademacher, Michael
    2021 18TH INTERNATIONAL CONFERENCE ON PRIVACY, SECURITY AND TRUST (PST), 2021,
  • [23] Is Neuron Coverage a Meaningful Measure for Testing Deep Neural Networks?
    Harel-Canada, Fabrice
    Wang, Lingxiao
    Gulzar, Muhammad Ali
    Gu, Quanquan
    Kim, Miryung
    PROCEEDINGS OF THE 28TH ACM JOINT MEETING ON EUROPEAN SOFTWARE ENGINEERING CONFERENCE AND SYMPOSIUM ON THE FOUNDATIONS OF SOFTWARE ENGINEERING (ESEC/FSE '20), 2020, : 851 - 862
  • [24] A probabilistic framework for mutation testing in deep neural networks
    Tambon, Florian
    Khomh, Foutse
    Antoniol, Giuliano
    INFORMATION AND SOFTWARE TECHNOLOGY, 2023, 155
  • [25] Distribution Aware Testing Framework for Deep Neural Networks
    Demir, Demet
    Can, Aysu Betin
    Surer, Elif
    IEEE ACCESS, 2023, 11 : 119481 - 119505
  • [26] NDFuzz: a non-intrusive coverage-guided fuzzing framework for virtualized network devices
    Zhang, Yu
    Zhong, Nanyu
    You, Wei
    Zou, Yanyan
    Jian, Kunpeng
    Xu, Jiahuan
    Sun, Jian
    Liu, Baoxu
    Huo, Wei
    CYBERSECURITY, 2022, 5 (01)
  • [27] NDFuzz: a non-intrusive coverage-guided fuzzing framework for virtualized network devices
    Yu Zhang
    Nanyu Zhong
    Wei You
    Yanyan Zou
    Kunpeng Jian
    Jiahuan Xu
    Jian Sun
    Baoxu Liu
    Wei Huo
    Cybersecurity, 5
  • [28] MUTAGEN: Reliable Coverage-Guided, Property-Based Testing using Exhaustive Mutations
    Mista, Agustin
    Russo, Alejandro
    2023 IEEE CONFERENCE ON SOFTWARE TESTING, VERIFICATION AND VALIDATION, ICST, 2023, : 176 - 187
  • [29] MalFuzz: Coverage-guided fuzzing on deep learning-based malware classification model
    Liu, Yuying
    Yang, Pin
    Jia, Peng
    He, Ziheng
    Luo, Hairu
    PLOS ONE, 2022, 17 (09):
  • [30] AGNES: Abstraction-Guided Framework for Deep Neural Networks Security
    Dhonthi, Akshay
    Eiermann, Marcello
    Hahn, Ernst Moritz
    Hashemi, Vahid
    VERIFICATION, MODEL CHECKING, AND ABSTRACT INTERPRETATION, VMCAI 2024, PT II, 2024, 14500 : 124 - 138