---
格式版本: 2
标题: "AdaRare: Telemetry-Guided Joint Profile Control for Greybox Fuzzing"
原文链接: "https://arxiv.org/abs/2608.18187"
发布日期: "2026-08-18"
发布时间校准状态: "found"
发布时间需复核: "否"
发布时间来源: "rule:local:strict_original_body"
发布时间证据: "**\\[v1\\]** Tue, 18 Aug 2026 09:33:33 UTC (978 KB)"
发布时间校准原因: "规则确认唯一严格发布时间，来源 local:strict_original_body"
发布时间校准置信度: "high"
发布时间候选数量: 18
发布时间严格候选数量: 6
发布时间原页读取状态: "source template page reused from URL open"
发布时间未找到原因: ""
发布时间校准时间: "2026-08-20T15:36:39+08:00"
发布时间仲裁状态: "skipped"
发布时间仲裁尝试次数: 0
发布时间仲裁耗时毫秒: 0
发现时间: "2026-08-20T15:33:55+08:00"
入库时间: "2026-08-20T07:36:39.266Z"
来源平台: "arXiv 学术论文搜索"
搜索渠道: "source_template"
搜索词: "https://arxiv.org/search/?query=latency&searchtype=all"
匹配关键词:
  - "latency"
相关厂家:
  []
相关专家:
  []
内容类型: "网页"
抓取工具: "Free Fetch + Defuddle"
清洗工具: "Defuddle Markdown + Defuddle/Readability 正文提取"
原始附件:
  []
AI优质: "否"
AI打分: 5
AI分档: "非优质"
AI质检状态: "不通过"
AI打分理由: "arXiv论文为灰盒模糊测试研究，与超节点/AI Rack、机柜级AI基础设施及核心部件完全无关，仅命中无关搜索词latency。"
AI质检模型: "ali-deepseek-v4-flash"
AI质检时间: "2026-08-20T15:39:33+08:00"
AI主题相关性: 0
AI来源权威性: 5
AI新颖性: 0
AI技术细节: 0
AI商业部署信号: 0
AI完整性: 0
AI摘要: "AdaRare 是面向灰盒模糊测试的 AFL++ 扩展，通过每 5 秒更新的遥测引导profile协调五种内部机制，提升边覆盖率；在多目标实验中中位覆盖率高于原生 AFL++，并在固件案例中发现 5 个内存破坏漏洞且均获 CVE 编号。"
AI摘要模型: "ali-deepseek-v4-flash"
AI摘要时间: "2026-09-07T03:21:03.918Z"
采集批次: "2026年8月20日14点19分32秒"
采集批次ID: "20260820-141932-079"
去重键: "https://arxiv.org/abs/2608.18187"
---

## Computer Science > Cryptography and Security

## Title:AdaRare: Telemetry-Guided Joint Profile Control for Greybox Fuzzing

Authors:[Jingchuan Ma](https://arxiv.org/search/cs?searchtype=author&query=Ma,+J), [Tongan Liu](https://arxiv.org/search/cs?searchtype=author&query=Liu,+T), [Yanhua Liu](https://arxiv.org/search/cs?searchtype=author&query=Liu,+Y), [Qiaoyun Huang](https://arxiv.org/search/cs?searchtype=author&query=Huang,+Q)

[View PDF](https://arxiv.org/pdf/2608.18187) [HTML (experimental)](https://arxiv.org/html/2608.18187v1)

> Abstract:Greybox fuzzers combine interacting queue, mutation, dictionary, energy, and comparison-solving control surfaces, while prior adaptive systems typically optimize other decision objects or control layers. We present AdaRare, an AFL++ extension that coordinates five internal actuation mechanisms as one bounded in-process profile updated every 5,000 ms. Completed-window, action-induced telemetry feeds an arm-local recency-weighted linear scorer and a profile-conditioned controller target. The scorer borrows the algebraic structure of disjoint LinUCB, but serves as a closed-loop profile-ranking mechanism rather than a calibrated contextual-bandit action-value estimator or statistical confidence bound.  
> Across three sequential repeated-trial phases, Main provides broad integrated-system evidence: AdaRare has higher median edge coverage than vanilla AFL++ on all eight targets, with five Holm-significant comparisons. In the strongest matched result, Full AdaRare has higher median edge coverage than CmpLog-matched AFL++ on all five follow-up targets, with four Holm-significant comparisons. Batch A finds higher medians for telemetry-guided selection than fixed-context, random, and round-robin schedules in all 15 target-control comparisons, with 13 Holm-significant comparisons. The experiments do not establish independent No-A6-versus-Shadow or scarcity-bundle effects; A6 evidence is target-dependent and weakens under batch-wide correction. In an unmatched firmware case study, AdaRare-generated inputs exposed five distinct memory-corruption findings, each reproduced in a separate environment and later assigned a CVE identifier. Controller-boundary compute P99 medians are below 6.5 ms for a five-second window; complete-boundary P99 medians including synchronous logging are below 14.7 ms. These measurements characterize boundary latency, not total system overhead.

| Comments: |  |
| --- | --- |
| Subjects: | Cryptography and Security (cs.CR) |
| Cite as: | [arXiv:2608.18187](https://arxiv.org/abs/2608.18187) \[cs.CR\] |
|  | (or [arXiv:2608.18187v1](https://arxiv.org/abs/2608.18187v1) \[cs.CR\] for this version) |
|  | [https://doi.org/10.48550/arXiv.2608.18187](https://doi.org/10.48550/arXiv.2608.18187) |

## Submission history

From: Jingchuan Ma \[[view email](https://arxiv.org/show-email/f54b7ef8/2608.18187)\]  
**\[v1\]** Tue, 18 Aug 2026 09:33:33 UTC (978 KB)

[Which authors of this paper are endorsers?](https://arxiv.org/auth/show-endorsers/2608.18187) | Disable MathJax ([What is MathJax?](https://info.arxiv.org/help/mathjax.html))