Collected research

NEZHA: Efficient Domain-Independent Differential Testing

Theofilos Petsios, Adrian Tang, Salvatore Stolfo, Angelos D. Keromytis and Suman Jana · ieee-security.org

NEZHA guides differential testing by delta-diversity, a measure of how differently several programs behave on the same input, instead of code coverage, so mutation heads for inputs that make implementations disagree. It found semantic bugs in X.509 validation across SSL/TLS libraries, in ClamAV versus the Linux ELF loader and in XZ parsing, where one program accepts what another rejects.

Record

Researcher

Theofilos Petsios, Adrian Tang, Salvatore Stolfo, Angelos D. Keromytis and Suman Jana

Published by

ieee-security.org

Format

Whitepaper

Topic

Browser

In the archive

• Collected in the 2016–17 research round

Tags

• parser-differential
• fuzzing
• tls
• filter-bypass
• tooling
• dynamic-analysis
• owasp-a02-2021
• owasp-a05-2021

This page is the archive's own catalogue record. The research is the work of Theofilos Petsios, Adrian Tang, Salvatore Stolfo, Angelos D. Keromytis and Suman Jana, first published at the original source. Preserved copies are kept so the citation survives its host; this one was last captured on 14 August 2026.