FuzzSlice: Pruning False Positives in Static Analysis Warnings through Function-Level Fuzzing

Abstract

We present FuzzSlice, a technique that uses function-level fuzzing to prune false positives from static analysis warnings, helping developers focus on findings that are more likely to represent real vulnerabilities. FuzzSlice was integrated by the security company Chainguard into their toolchain.