{"id":"https://openalex.org/W1506510492","doi":null,"title":"Dynamic test generation to find integer bugs in x86 binary linux programs","display_name":"Dynamic test generation to find integer bugs in x86 binary linux programs","publication_year":2009,"publication_date":"2009-08-10","ids":{"openalex":"https://openalex.org/W1506510492","mag":"1506510492"},"language":"en","primary_location":{"id":"pmh:oai:CiteSeerX.psu:10.1.1.153.3657","doi":null,"is_oa":false,"landing_page_url":"http://citeseerx.ist.psu.edu/viewdoc/summary?doi=10.1.1.153.3657","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":"http://www.cs.berkeley.edu/~daw/papers/smartfuzz-use09.pdf","raw_type":"text"},"volume":null,"type":"article","is_traditional":true,"indexed_in":[],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5101905586","display_name":"D\u00e1vid Moln\u00e1r","orcid":"https://orcid.org/0000-0002-2398-4984","observed_orcids":["https://orcid.org/0000-0002-2398-4984"]},"institutions":[{"id":"https://openalex.org/I95457486","display_name":"University of California, Berkeley","ror":"https://ror.org/01an7q238","country_code":"US","type":"education","lineage":["https://openalex.org/I95457486"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"D\u00e1vid Moln\u00e1r","raw_affiliation_strings":["UC BERKELEY"],"raw_orcid":"https://orcid.org/0000-0002-2398-4984","affiliations":[{"raw_affiliation_string":"UC BERKELEY","institution_ids":["https://openalex.org/I95457486"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5040662189","display_name":"Xue Cong Li","orcid":null,"observed_orcids":[]},"institutions":[{"id":"https://openalex.org/I95457486","display_name":"University of California, Berkeley","ror":"https://ror.org/01an7q238","country_code":"US","type":"education","lineage":["https://openalex.org/I95457486"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Xue Cong Li","raw_affiliation_strings":["UC BERKELEY"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"UC BERKELEY","institution_ids":["https://openalex.org/I95457486"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5101823734","display_name":"David A. Wagner","orcid":"https://orcid.org/0000-0002-9933-518X","observed_orcids":["https://orcid.org/0000-0002-9933-518X"]},"institutions":[{"id":"https://openalex.org/I95457486","display_name":"University of California, Berkeley","ror":"https://ror.org/01an7q238","country_code":"US","type":"education","lineage":["https://openalex.org/I95457486"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"David Wagner","raw_affiliation_strings":["UC BERKELEY"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"UC BERKELEY","institution_ids":["https://openalex.org/I95457486"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":1,"corresponding_author_ids":[],"corresponding_institution_ids":["https://openalex.org/I95457486"],"apc_list":null,"apc_paid":null,"fwci":30.1529,"has_fulltext":false,"cited_by_count":195,"citation_normalized_percentile":{"value":0.99677009,"is_in_top_1_percent":true,"is_in_top_10_percent":true},"cited_by_percentile_year":{"min":88,"max":100},"biblio":{"volume":null,"issue":null,"first_page":"67","last_page":"82"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10743","display_name":"Software Testing and Debugging Techniques","score":1.0,"subfield":{"id":"https://openalex.org/subfields/1712","display_name":"Software"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T10743","display_name":"Software Testing and Debugging Techniques","score":1.0,"subfield":{"id":"https://openalex.org/subfields/1712","display_name":"Software"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11424","display_name":"Security and Verification in Computing","score":9.999999747378752e-05,"subfield":{"id":"https://openalex.org/subfields/1708","display_name":"Hardware and Architecture"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":0.0,"subfield":{"id":"https://openalex.org/subfields/1712","display_name":"Software"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/integer-overflow","display_name":"integer overflow","score":0.8709999918937683},{"id":"https://openalex.org/keywords/dynamic-test-generation","display_name":"dynamic test generation","score":0.8930000066757202},{"id":"https://openalex.org/keywords/symbolic-execution","display_name":"symbolic execution","score":0.8019999861717224},{"id":"https://openalex.org/keywords/bug-triage","display_name":"bug triage","score":0.6140000224113464},{"id":"https://openalex.org/keywords/security-vulnerabilities","display_name":"security vulnerabilities","score":0.7379999756813049},{"id":"https://openalex.org/keywords/cloud-based-testing","display_name":"cloud-based testing","score":0.4099999964237213},{"id":"https://openalex.org/keywords/amazon-ec2","display_name":"Amazon EC2","score":0.6729999780654907}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.7639365196228027},{"id":"https://openalex.org/C2779639559","wikidata":"https://www.wikidata.org/wiki/Q7661178","display_name":"Symbolic execution","level":3,"score":0.7449404001235962},{"id":"https://openalex.org/C160145156","wikidata":"https://www.wikidata.org/wiki/Q778586","display_name":"Executable","level":2,"score":0.7310090661048889},{"id":"https://openalex.org/C111065885","wikidata":"https://www.wikidata.org/wiki/Q1189053","display_name":"Fuzz testing","level":3,"score":0.728657066822052},{"id":"https://openalex.org/C170723468","wikidata":"https://www.wikidata.org/wiki/Q182933","display_name":"x86","level":3,"score":0.6407724022865295},{"id":"https://openalex.org/C1009929","wikidata":"https://www.wikidata.org/wiki/Q179550","display_name":"Software bug","level":3,"score":0.5654189586639404},{"id":"https://openalex.org/C111919701","wikidata":"https://www.wikidata.org/wiki/Q9135","display_name":"Operating system","level":1,"score":0.4919438064098358},{"id":"https://openalex.org/C97137487","wikidata":"https://www.wikidata.org/wiki/Q729138","display_name":"Integer (computer science)","level":2,"score":0.47019729018211365},{"id":"https://openalex.org/C2777904410","wikidata":"https://www.wikidata.org/wiki/Q7397","display_name":"Software","level":2,"score":0.4238210618495941},{"id":"https://openalex.org/C128942645","wikidata":"https://www.wikidata.org/wiki/Q1568346","display_name":"Test case","level":3,"score":0.41263508796691895},{"id":"https://openalex.org/C199360897","wikidata":"https://www.wikidata.org/wiki/Q9143","display_name":"Programming language","level":1,"score":0.3524646759033203},{"id":"https://openalex.org/C119857082","wikidata":"https://www.wikidata.org/wiki/Q2539","display_name":"Machine learning","level":1,"score":0.09631428122520447},{"id":"https://openalex.org/C152877465","wikidata":"https://www.wikidata.org/wiki/Q208042","display_name":"Regression analysis","level":2,"score":0.0}],"mesh":[],"locations_count":3,"locations":[{"id":"pmh:oai:CiteSeerX.psu:10.1.1.153.3657","doi":null,"is_oa":false,"landing_page_url":"http://citeseerx.ist.psu.edu/viewdoc/summary?doi=10.1.1.153.3657","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":"http://www.cs.berkeley.edu/~daw/papers/smartfuzz-use09.pdf","raw_type":"text"},{"id":"pmh:oai:CiteSeerX.psu:10.1.1.218.2421","doi":null,"is_oa":false,"landing_page_url":"http://citeseerx.ist.psu.edu/viewdoc/summary?doi=10.1.1.218.2421","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":"http://www.cs.berkeley.edu/~dmolnar/metafuzz-tr-draft.pdf","raw_type":"text"},{"id":"mag:1506510492","doi":null,"is_oa":false,"landing_page_url":"https://db.usenix.org/events/sec09/tech/full_papers/molnar.pdf","pdf_url":null,"source":{"id":"https://openalex.org/S4306421123","display_name":"USENIX Security Symposium","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"listed_in":[],"host_organization":null,"host_organization_name":null,"host_organization_lineage":[],"host_organization_lineage_names":[],"type":"conference"},"license":null,"license_id":null,"version":null,"is_accepted":false,"is_published":false,"raw_source_name":"USENIX Security Symposium","raw_type":null}],"best_oa_location":null,"sustainable_development_goals":[],"study_designs":[],"awards":[],"funders":[],"has_content":{"pdf":false,"grobid_xml":false},"content_urls":null,"referenced_works_count":17,"referenced_works":["https://openalex.org/W127238549","https://openalex.org/W145355838","https://openalex.org/W157156687","https://openalex.org/W1512013758","https://openalex.org/W1565952674","https://openalex.org/W1600776630","https://openalex.org/W1710734607","https://openalex.org/W2000181257","https://openalex.org/W2002934700","https://openalex.org/W2096449544","https://openalex.org/W2100583963","https://openalex.org/W2107445402","https://openalex.org/W2123129867","https://openalex.org/W2129487583","https://openalex.org/W2132897303","https://openalex.org/W2156858199","https://openalex.org/W6960022011"],"related_works":["https://openalex.org/W2123129867","https://openalex.org/W2114418805","https://openalex.org/W1530478935","https://openalex.org/W157156687","https://openalex.org/W2963326879","https://openalex.org/W3111557759","https://openalex.org/W2750806491","https://openalex.org/W127238549","https://openalex.org/W2947182139","https://openalex.org/W3164168419"],"abstract_inverted_index":{"Recently,":[0],"integer":[1,4,30],"bugs,":[2],"including":[3,107,207],"overflow,":[5],"width":[6],"conversion,":[7],"and":[8,39,81,87,117,129,197],"signed/unsigned":[9],"conversion":[10],"errors,":[11],"have":[12],"risen":[13],"to":[14,64,77,101,131],"become":[15],"a":[16,57,73,102],"common":[17],"root":[18],"cause":[19],"for":[20,28],"serious":[21],"security":[22],"vulnerabilities.":[23],"We":[24,52,70,94,120,186],"introduce":[25],"new":[26],"methods":[27,55],"discovering":[29],"bugs":[31,83,169,191,203,213],"using":[32,126],"dynamic":[33],"test":[34,154,160],"generation":[35],"on":[36,96,123],"x86":[37,67],"binaries,":[38],"we":[40,62,198],"describe":[41],"key":[42],"design":[43],"choices":[44],"in":[45,56,79,170,190],"efficient":[46],"symbolic":[47],"execution":[48],"of":[49,104,178],"such":[50],"programs.":[51],"implemented":[53],"our":[54,124],"prototype":[58],"tool":[59,92],"SmartFuzz,":[60,127],"which":[61],"use":[63],"analyze":[65],"Linux":[66],"binary":[68],"executables.":[69],"also":[71,121],"created":[72],"reporting":[74,82],"service,":[75],"metafuzz.com,":[76],"aid":[78],"triaging":[80],"found":[84,164,192],"by":[85,193,205],"SmartFuzz":[86,201,211],"the":[88,108,112,137,145,188,194],"black-box":[89],"fuzz":[90],"testing":[91,133],"zzuf.":[93],"report":[95,122],"experiments":[97,163],"applying":[98],"these":[99],"tools":[100],"range":[103],"software":[105],"applications,":[106],"mplayer":[109],"media":[110],"player,":[111],"exiv2":[113],"image":[114],"metadata":[115],"library,":[116],"ImageMagick":[118],"convert.":[119],"experience":[125],"zzuf,":[128,206],"metafuzz.com":[130,146],"perform":[132],"at":[134,182],"scale":[135],"with":[136],"Amazon":[138],"Elastic":[139],"Compute":[140],"Cloud":[141],"(EC2).":[142],"To":[143],"date,":[144],"site":[147],"has":[148],"recorded":[149],"more":[150],"than":[151],"2,":[152,157],"614":[153],"runs,":[155],"comprising":[156],"361,":[158],"595":[159],"cases.":[161],"Our":[162],"approximately":[165],"59":[166],"total":[167],"distinct":[168],"864":[171],"compute":[172],"hours,":[173],"costing":[174],"us":[175],"an":[176],"average":[177],"$2.93":[179],"per":[180],"bug":[181],"current":[183],"EC2":[184],"rates.":[185],"quantify":[187],"overlap":[189],"two":[195],"tools,":[196],"show":[199],"that":[200],"finds":[202,212],"missed":[204],"one":[208],"program":[209],"where":[210],"but":[214],"zzuf":[215],"does":[216],"not.":[217],"1":[218]},"counts_by_year":[{"year":2026,"cited_by_count":1},{"year":2024,"cited_by_count":1},{"year":2023,"cited_by_count":4},{"year":2022,"cited_by_count":3},{"year":2021,"cited_by_count":6},{"year":2020,"cited_by_count":11},{"year":2019,"cited_by_count":17},{"year":2018,"cited_by_count":15},{"year":2017,"cited_by_count":12},{"year":2016,"cited_by_count":18},{"year":2015,"cited_by_count":26},{"year":2014,"cited_by_count":12},{"year":2013,"cited_by_count":22},{"year":2012,"cited_by_count":21}],"updated_date":"2026-11-12T12:28:57.059296","created_date":"2016-06-24T00:00:00"}