{"id":"https://openalex.org/W2029329147","doi":"https://doi.org/10.1109/icoia.2013.6650258","title":"GramFuzz: Fuzzing testing of web browsers based on grammar analysis and structural mutation","display_name":"GramFuzz: Fuzzing testing of web browsers based on grammar analysis and structural mutation","publication_year":2013,"publication_date":"2013-09-01","ids":{"openalex":"https://openalex.org/W2029329147","doi":"https://doi.org/10.1109/icoia.2013.6650258","mag":"2029329147"},"language":"en","primary_location":{"id":"doi:10.1109/icoia.2013.6650258","doi":"https://doi.org/10.1109/icoia.2013.6650258","is_oa":false,"landing_page_url":"https://doi.org/10.1109/icoia.2013.6650258","pdf_url":null,"source":{"id":"https://openalex.org/S7407107342","display_name":"International Conference on Informatics & Applications (ICIA)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"listed_in":[],"host_organization":"https://openalex.org/P4310319808","host_organization_name":"Institute of Electrical and Electronics Engineers","host_organization_lineage":["https://openalex.org/P4310319808"],"host_organization_lineage_names":["Institute of Electrical and Electronics Engineers"],"type":"conference"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"2013 Second International Conference on Informatics & Applications (ICIA)","raw_type":"proceedings-article"},"volume":null,"type":"conference-paper","is_traditional":true,"indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5100786389","display_name":"Tao Guo","orcid":"https://orcid.org/0000-0002-4262-5848","observed_orcids":["https://orcid.org/0000-0002-4262-5848"]},"institutions":[{"id":"https://openalex.org/I4210160629","display_name":"China Information Technology Security Evaluation Center","ror":"https://ror.org/053cexp66","country_code":"CN","type":"government","lineage":["https://openalex.org/I4210160629"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Tao Guo","raw_affiliation_strings":["China Information Technology Security valuation Center, Beijing, China","China Inf. Technol. Security valuation Center Beijing, Beijing, China"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"China Information Technology Security valuation Center, Beijing, China","institution_ids":["https://openalex.org/I4210160629"]},{"raw_affiliation_string":"China Inf. Technol. Security valuation Center Beijing, Beijing, China","institution_ids":["https://openalex.org/I4210160629"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5046845324","display_name":"Puhan Zhang","orcid":"https://orcid.org/0000-0001-7229-9409","observed_orcids":["https://orcid.org/0000-0001-7229-9409"]},"institutions":[{"id":"https://openalex.org/I4210160629","display_name":"China Information Technology Security Evaluation Center","ror":"https://ror.org/053cexp66","country_code":"CN","type":"government","lineage":["https://openalex.org/I4210160629"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Puhan Zhang","raw_affiliation_strings":["China Information Technology Security valuation Center, Beijing, China","China Inf. Technol. Security valuation Center Beijing, Beijing, China"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"China Information Technology Security valuation Center, Beijing, China","institution_ids":["https://openalex.org/I4210160629"]},{"raw_affiliation_string":"China Inf. Technol. Security valuation Center Beijing, Beijing, China","institution_ids":["https://openalex.org/I4210160629"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5100328117","display_name":"Xin Wang","orcid":"https://orcid.org/0000-0003-3352-6829","observed_orcids":["https://orcid.org/0000-0003-3352-6829"]},"institutions":[{"id":"https://openalex.org/I4210160629","display_name":"China Information Technology Security Evaluation Center","ror":"https://ror.org/053cexp66","country_code":"CN","type":"government","lineage":["https://openalex.org/I4210160629"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Xin Wang","raw_affiliation_strings":["China Information Technology Security valuation Center, Beijing, China","China Inf. Technol. Security valuation Center Beijing, Beijing, China"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"China Information Technology Security valuation Center, Beijing, China","institution_ids":["https://openalex.org/I4210160629"]},{"raw_affiliation_string":"China Inf. Technol. Security valuation Center Beijing, Beijing, China","institution_ids":["https://openalex.org/I4210160629"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5101913363","display_name":"Qiang Wei","orcid":"https://orcid.org/0000-0002-0288-0086","observed_orcids":["https://orcid.org/0000-0002-0288-0086","https://orcid.org/0000-0003-4891-8657"]},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Qiang Wei","raw_affiliation_strings":["State Key Laboratory of Mathematical Engineerning and Advanced Computing, Zhenzhou, China","State Key Lab. of Math. Engineerning & Adv. Comput., Zhenzhou, China"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"State Key Laboratory of Mathematical Engineerning and Advanced Computing, Zhenzhou, China","institution_ids":[]},{"raw_affiliation_string":"State Key Lab. of Math. Engineerning & Adv. Comput., Zhenzhou, China","institution_ids":[]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":1,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":0.3555,"has_fulltext":false,"cited_by_count":27,"citation_normalized_percentile":{"value":0.44795539,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":{"min":88,"max":99},"biblio":{"volume":null,"issue":null,"first_page":"212","last_page":"215"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10743","display_name":"Software Testing and Debugging Techniques","score":0.9955999851226807,"subfield":{"id":"https://openalex.org/subfields/1712","display_name":"Software"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T10743","display_name":"Software Testing and Debugging Techniques","score":0.9955999851226807,"subfield":{"id":"https://openalex.org/subfields/1712","display_name":"Software"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T12479","display_name":"Web Application Security Vulnerabilities","score":0.0038999998942017555,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11424","display_name":"Security and Verification in Computing","score":9.999999747378752e-05,"subfield":{"id":"https://openalex.org/subfields/1708","display_name":"Hardware and Architecture"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/fuzzing","display_name":"fuzzing","score":0.953000009059906},{"id":"https://openalex.org/keywords/browser-security","display_name":"browser security","score":0.7419999837875366},{"id":"https://openalex.org/keywords/structural-mutations","display_name":"structural mutations","score":0.9120000004768372},{"id":"https://openalex.org/keywords/javascript","display_name":"JavaScript","score":0.3490000069141388},{"id":"https://openalex.org/keywords/html","display_name":"HTML","score":0.6039999723434448},{"id":"https://openalex.org/keywords/css","display_name":"CSS","score":0.9440000057220459},{"id":"https://openalex.org/keywords/vulnerability-detection","display_name":"vulnerability detection","score":0.7089999914169312},{"id":"https://openalex.org/keywords/mozilla","display_name":"Mozilla","score":0.6890000104904175},{"id":"https://openalex.org/keywords/internet-explorer","display_name":"Internet Explorer","score":0.9629999995231628}],"concepts":[{"id":"https://openalex.org/C111065885","wikidata":"https://www.wikidata.org/wiki/Q1189053","display_name":"Fuzz testing","level":3,"score":0.9886666536331177},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.8048318028450012},{"id":"https://openalex.org/C544833334","wikidata":"https://www.wikidata.org/wiki/Q2005","display_name":"JavaScript","level":2,"score":0.7498267889022827},{"id":"https://openalex.org/C2984328558","wikidata":"https://www.wikidata.org/wiki/Q188522","display_name":"Software testing","level":3,"score":0.5133901834487915},{"id":"https://openalex.org/C128942645","wikidata":"https://www.wikidata.org/wiki/Q1568346","display_name":"Test case","level":3,"score":0.49074018001556396},{"id":"https://openalex.org/C26022165","wikidata":"https://www.wikidata.org/wiki/Q8091","display_name":"Grammar","level":2,"score":0.4463287889957428},{"id":"https://openalex.org/C163565370","wikidata":"https://www.wikidata.org/wiki/Q4308623","display_name":"Mutation testing","level":4,"score":0.4415862262248993},{"id":"https://openalex.org/C501734568","wikidata":"https://www.wikidata.org/wiki/Q42918","display_name":"Mutation","level":3,"score":0.4294183850288391},{"id":"https://openalex.org/C118643609","wikidata":"https://www.wikidata.org/wiki/Q189210","display_name":"Web application","level":2,"score":0.4259568452835083},{"id":"https://openalex.org/C106159264","wikidata":"https://www.wikidata.org/wiki/Q17146789","display_name":"Random testing","level":4,"score":0.4200553894042969},{"id":"https://openalex.org/C1009929","wikidata":"https://www.wikidata.org/wiki/Q179550","display_name":"Software bug","level":3,"score":0.41020888090133667},{"id":"https://openalex.org/C199360897","wikidata":"https://www.wikidata.org/wiki/Q9143","display_name":"Programming language","level":1,"score":0.39655187726020813},{"id":"https://openalex.org/C2777904410","wikidata":"https://www.wikidata.org/wiki/Q7397","display_name":"Software","level":2,"score":0.32478269934654236},{"id":"https://openalex.org/C136764020","wikidata":"https://www.wikidata.org/wiki/Q466","display_name":"World Wide Web","level":1,"score":0.32426488399505615},{"id":"https://openalex.org/C119857082","wikidata":"https://www.wikidata.org/wiki/Q2539","display_name":"Machine learning","level":1,"score":0.1449451744556427},{"id":"https://openalex.org/C152877465","wikidata":"https://www.wikidata.org/wiki/Q208042","display_name":"Regression analysis","level":2,"score":0.0},{"id":"https://openalex.org/C41895202","wikidata":"https://www.wikidata.org/wiki/Q8162","display_name":"Linguistics","level":1,"score":0.0},{"id":"https://openalex.org/C138885662","wikidata":"https://www.wikidata.org/wiki/Q5891","display_name":"Philosophy","level":0,"score":0.0},{"id":"https://openalex.org/C185592680","wikidata":"https://www.wikidata.org/wiki/Q2329","display_name":"Chemistry","level":0,"score":0.0},{"id":"https://openalex.org/C55493867","wikidata":"https://www.wikidata.org/wiki/Q7094","display_name":"Biochemistry","level":1,"score":0.0},{"id":"https://openalex.org/C104317684","wikidata":"https://www.wikidata.org/wiki/Q7187","display_name":"Gene","level":2,"score":0.0}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1109/icoia.2013.6650258","doi":"https://doi.org/10.1109/icoia.2013.6650258","is_oa":false,"landing_page_url":"https://doi.org/10.1109/icoia.2013.6650258","pdf_url":null,"source":{"id":"https://openalex.org/S7407107342","display_name":"International Conference on Informatics & Applications (ICIA)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"listed_in":[],"host_organization":"https://openalex.org/P4310319808","host_organization_name":"Institute of Electrical and Electronics Engineers","host_organization_lineage":["https://openalex.org/P4310319808"],"host_organization_lineage_names":["Institute of Electrical and Electronics Engineers"],"type":"conference"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"2013 Second International Conference on Informatics & Applications (ICIA)","raw_type":"proceedings-article"}],"best_oa_location":null,"sustainable_development_goals":[],"study_designs":[],"awards":[],"funders":[],"has_content":{"grobid_xml":false,"pdf":false},"content_urls":null,"referenced_works_count":12,"referenced_works":["https://openalex.org/W1502951647","https://openalex.org/W1506510492","https://openalex.org/W1531203382","https://openalex.org/W1988524530","https://openalex.org/W2002934700","https://openalex.org/W2016716561","https://openalex.org/W2018951244","https://openalex.org/W2094771270","https://openalex.org/W2166336492","https://openalex.org/W4232884709","https://openalex.org/W4243412374","https://openalex.org/W6630436094"],"related_works":["https://openalex.org/W7097788737","https://openalex.org/W1531203382","https://openalex.org/W2898192927","https://openalex.org/W2152394849","https://openalex.org/W3180202404","https://openalex.org/W3003678351","https://openalex.org/W2142223145","https://openalex.org/W4411730403","https://openalex.org/W4391585498","https://openalex.org/W4387674220"],"abstract_inverted_index":{"Fuzz":[0],"testing":[1,6,88,119],"is":[2],"an":[3],"automated":[4],"black-box":[5],"technique":[7],"providing":[8],"random":[9],"data":[10,98],"as":[11,46,48,51],"input":[12,30,97],"to":[13,20,25,35],"a":[14,85,133],"software":[15],"system":[16],"in":[17,57,116],"the":[18,28,49,72,117,125,144],"hope":[19],"find":[21],"vulnerability.":[22],"In":[23,77],"order":[24],"be":[26,32,55,113],"effective,":[27],"fuzzed":[29],"must":[31,54],"common":[33],"enough":[34],"pass":[36],"elementary":[37],"consistency":[38],"checks.":[39],"Web":[40],"Browser":[41],"accepts":[42],"JavaScript,":[43],"CSS":[44],"files":[45],"well":[47],"html":[50],"input,":[52],"which":[53],"considered":[56],"fuzzing":[58,62,87,118],"testing,":[59],"while":[60],"traditional":[61],"technology":[63],"generates":[64],"test":[65,110],"cases":[66,111],"using":[67],"simple":[68],"mutation":[69,100],"strategies,":[70],"ignoring":[71],"grammar":[73,94],"and":[74,84,99,108,127],"code":[75,102],"structure.":[76,103],"this":[78,151],"article,":[79],"vulnerability":[80],"patterns":[81],"are":[82,90],"summarized":[83],"new":[86,137],"method":[89],"proposed":[91],"based":[92],"on":[93,124],"analysis":[95],"of":[96,101,106,120,135,143],"Combining":[104],"methods":[105],"generation":[107],"mutation,":[109],"will":[112],"more":[114],"effective":[115],"web":[121,129],"browsers.":[122],"Applied":[123],"Mozilla":[126],"IE":[128],"browsers,":[130],"it":[131],"discovered":[132],"total":[134],"36":[136],"severe":[138],"vulnerabilities(and":[139],"thus":[140],"became":[141],"one":[142],"top":[145],"security":[146],"bug":[147],"bounty":[148],"collectors":[149],"within":[150],"period).":[152]},"counts_by_year":[{"year":2026,"cited_by_count":2},{"year":2025,"cited_by_count":1},{"year":2023,"cited_by_count":4},{"year":2021,"cited_by_count":8},{"year":2020,"cited_by_count":3},{"year":2019,"cited_by_count":5},{"year":2018,"cited_by_count":2},{"year":2015,"cited_by_count":1},{"year":2014,"cited_by_count":1}],"updated_date":"2026-11-07T11:25:07.637180","created_date":"2016-06-24T00:00:00"}