WingFuzz: Implementing Continuous Fuzzing for Database Management Systems

Explore a conference talk from USENIX ATC '24 that delves into the implementation of continuous fuzzing for Database Management Systems (DBMSs). Learn about WingFuzz, an innovative approach to automated testing for enterprise-level DBMSs like ClickHouse. Discover how the researchers address three main challenges in continuous DBMS fuzzing: diverse SQL grammar in test case generation, ongoing codebase evolution, and noise disturbance during anomaly analysis. Gain insights into the practical application of specification-based mutator generation, corpus-driven evolving code fuzzing, and noise-resilient anomaly assessment. Understand the impact of this research, which uncovered 236 previously unknown bugs in 12 widely-used enterprise-level DBMSs, and its recognition by DBMS vendors, including integration into ClickHouse's development process.

USENIX ATC '24 - WingFuzz: Implementing Continuous Fuzzing for DBMSs