Fuzzers vs. AI: Comparing Fuzzilli and BigSleep on JavaScript Engines
// AI summary
Project Zero compared Fuzzilli and BigSleep, an LLM-based bug finder, on Chrome's V8 JavaScript engine: BigSleep found 45 vulnerabilities in six months versus Fuzzilli's 37, with 25% overlap.
// from the source
Summary Project Zero compared two automated tools used by Google to find vulnerabilities in Chrome’s JavaScript engine, V8, on a regular basis. Fuzzilli is a generative JavaScript engine fuzzer and BigSleep is an LLM-based bug finding system. In the past six months, BigSleep found more vulnerabilities than Fuzzilli (45 versus 37) with a 25% overlap in the specific bugs reported. Since this comparison methodology has a tendency to underestimate overlap, we also performed dedicated experiments to