{"id":"https://openalex.org/W2551594732","doi":"https://doi.org/10.1002/sec.1681","title":"A smart fuzzing method for detecting heap\u2010based vulnerabilities in executable codes","display_name":"A smart fuzzing method for detecting heap\u2010based vulnerabilities in executable codes","publication_year":2016,"publication_date":"2016-11-16","ids":{"openalex":"https://openalex.org/W2551594732","doi":"https://doi.org/10.1002/sec.1681","mag":"2551594732"},"language":"en","primary_location":{"id":"doi:10.1002/sec.1681","doi":"https://doi.org/10.1002/sec.1681","is_oa":false,"landing_page_url":"https://doi.org/10.1002/sec.1681","pdf_url":null,"source":{"id":"https://openalex.org/S120683614","display_name":"Security and Communication Networks","issn_l":"1939-0114","issn":["1939-0114","1939-0122"],"is_oa":false,"is_in_doaj":false,"is_core":true,"listed_in":["ccf-c","cwts-core","poland-20"],"host_organization":"https://openalex.org/P4310319869","host_organization_name":"Hindawi Publishing Corporation","host_organization_lineage":["https://openalex.org/P4310319869","https://openalex.org/P4310320595"],"host_organization_lineage_names":["Hindawi Publishing Corporation","Wiley"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Security and Communication Networks","raw_type":"journal-article"},"volume":null,"type":"article","is_traditional":true,"indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5055899546","display_name":"Maryam Mouzarani","orcid":"https://orcid.org/0000-0002-8134-3042","observed_orcids":["https://orcid.org/0000-0002-8134-3042"]},"institutions":[{"id":"https://openalex.org/I158248296","display_name":"Amirkabir University of Technology","ror":"https://ror.org/04gzbav43","country_code":"IR","type":"education","lineage":["https://openalex.org/I158248296"]}],"countries":["IR"],"is_corresponding":false,"raw_author_name":"Maryam Mouzarani","raw_affiliation_strings":["Amirkabir University of Technology (Tehran Polytechnic) Tehran Iran"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Amirkabir University of Technology (Tehran Polytechnic) Tehran Iran","institution_ids":["https://openalex.org/I158248296"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5101811727","display_name":"Babak Sadeghiyan","orcid":"https://orcid.org/0000-0002-5947-7570","observed_orcids":["https://orcid.org/0000-0002-5947-7570","https://orcid.org/0000-0002-5316-8005"]},"institutions":[{"id":"https://openalex.org/I158248296","display_name":"Amirkabir University of Technology","ror":"https://ror.org/04gzbav43","country_code":"IR","type":"education","lineage":["https://openalex.org/I158248296"]}],"countries":["IR"],"is_corresponding":true,"raw_author_name":"Babak Sadeghiyan","raw_affiliation_strings":["Amirkabir University of Technology (Tehran Polytechnic) Tehran Iran"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Amirkabir University of Technology (Tehran Polytechnic) Tehran Iran","institution_ids":["https://openalex.org/I158248296"]}]},{"author_position":"last","author":{"id":null,"display_name":"Mohammad Zolfaghari","orcid":null,"observed_orcids":[]},"institutions":[{"id":"https://openalex.org/I158248296","display_name":"Amirkabir University of Technology","ror":"https://ror.org/04gzbav43","country_code":"IR","type":"education","lineage":["https://openalex.org/I158248296"]}],"countries":["IR"],"is_corresponding":false,"raw_author_name":"Mohammad Zolfaghari","raw_affiliation_strings":["Amirkabir University of Technology (Tehran Polytechnic) Tehran Iran"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Amirkabir University of Technology (Tehran Polytechnic) Tehran Iran","institution_ids":["https://openalex.org/I158248296"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":1,"corresponding_author_ids":["https://openalex.org/A5101811727"],"corresponding_institution_ids":["https://openalex.org/I158248296"],"apc_list":{"value":2670,"currency":"USD","value_usd":2670},"apc_paid":null,"fwci":2.2327,"has_fulltext":false,"cited_by_count":9,"citation_normalized_percentile":{"value":0.89826198,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":{"min":87,"max":96},"biblio":{"volume":"9","issue":"18","first_page":"5098","last_page":"5115"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10743","display_name":"Software Testing and Debugging Techniques","score":0.9961000084877014,"subfield":{"id":"https://openalex.org/subfields/1712","display_name":"Software"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T10743","display_name":"Software Testing and Debugging Techniques","score":0.9961000084877014,"subfield":{"id":"https://openalex.org/subfields/1712","display_name":"Software"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11424","display_name":"Security and Verification in Computing","score":0.0035000001080334187,"subfield":{"id":"https://openalex.org/subfields/1708","display_name":"Hardware and Architecture"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":9.999999747378752e-05,"subfield":{"id":"https://openalex.org/subfields/1712","display_name":"Software"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/concolic-execution","display_name":"concolic execution","score":0.8859999775886536},{"id":"https://openalex.org/keywords/symbolic-execution","display_name":"symbolic execution","score":0.628000020980835},{"id":"https://openalex.org/keywords/buffer-overflow","display_name":"buffer overflow","score":0.7009999752044678},{"id":"https://openalex.org/keywords/double-free","display_name":"double free","score":0.8550000190734863},{"id":"https://openalex.org/keywords/use-after-free","display_name":"use-after-free","score":0.9990000128746033},{"id":"https://openalex.org/keywords/valgrind","display_name":"Valgrind","score":0.6790000200271606}],"concepts":[{"id":"https://openalex.org/C111065885","wikidata":"https://www.wikidata.org/wiki/Q1189053","display_name":"Fuzz testing","level":3,"score":0.9680190086364746},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.8999046087265015},{"id":"https://openalex.org/C40842320","wikidata":"https://www.wikidata.org/wiki/Q19423","display_name":"Buffer overflow","level":2,"score":0.8813864588737488},{"id":"https://openalex.org/C160145156","wikidata":"https://www.wikidata.org/wiki/Q778586","display_name":"Executable","level":2,"score":0.851057231426239},{"id":"https://openalex.org/C134757568","wikidata":"https://www.wikidata.org/wiki/Q274089","display_name":"Heap (data structure)","level":2,"score":0.7946334481239319},{"id":"https://openalex.org/C2779639559","wikidata":"https://www.wikidata.org/wiki/Q7661178","display_name":"Symbolic execution","level":3,"score":0.6207385659217834},{"id":"https://openalex.org/C95713431","wikidata":"https://www.wikidata.org/wiki/Q631425","display_name":"Vulnerability (computing)","level":2,"score":0.5559223890304565},{"id":"https://openalex.org/C2777735758","wikidata":"https://www.wikidata.org/wiki/Q817765","display_name":"Path (computing)","level":2,"score":0.5178849697113037},{"id":"https://openalex.org/C11219265","wikidata":"https://www.wikidata.org/wiki/Q5158734","display_name":"Concolic testing","level":4,"score":0.4958361089229584},{"id":"https://openalex.org/C185798385","wikidata":"https://www.wikidata.org/wiki/Q1161707","display_name":"Benchmark (surveying)","level":2,"score":0.47654181718826294},{"id":"https://openalex.org/C199360897","wikidata":"https://www.wikidata.org/wiki/Q9143","display_name":"Programming language","level":1,"score":0.4373414218425751},{"id":"https://openalex.org/C98183937","wikidata":"https://www.wikidata.org/wiki/Q2112188","display_name":"Program analysis","level":2,"score":0.4265235960483551},{"id":"https://openalex.org/C2776760102","wikidata":"https://www.wikidata.org/wiki/Q5139990","display_name":"Code (set theory)","level":3,"score":0.4134168028831482},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.27744948863983154},{"id":"https://openalex.org/C2777904410","wikidata":"https://www.wikidata.org/wiki/Q7397","display_name":"Software","level":2,"score":0.16823628544807434},{"id":"https://openalex.org/C205649164","wikidata":"https://www.wikidata.org/wiki/Q1071","display_name":"Geography","level":0,"score":0.0},{"id":"https://openalex.org/C177264268","wikidata":"https://www.wikidata.org/wiki/Q1514741","display_name":"Set (abstract data type)","level":2,"score":0.0},{"id":"https://openalex.org/C13280743","wikidata":"https://www.wikidata.org/wiki/Q131089","display_name":"Geodesy","level":1,"score":0.0}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1002/sec.1681","doi":"https://doi.org/10.1002/sec.1681","is_oa":false,"landing_page_url":"https://doi.org/10.1002/sec.1681","pdf_url":null,"source":{"id":"https://openalex.org/S120683614","display_name":"Security and Communication Networks","issn_l":"1939-0114","issn":["1939-0114","1939-0122"],"is_oa":false,"is_in_doaj":false,"is_core":true,"listed_in":["ccf-c","cwts-core","poland-20"],"host_organization":"https://openalex.org/P4310319869","host_organization_name":"Hindawi Publishing Corporation","host_organization_lineage":["https://openalex.org/P4310319869","https://openalex.org/P4310320595"],"host_organization_lineage_names":["Hindawi Publishing Corporation","Wiley"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Security and Communication Networks","raw_type":"journal-article"}],"best_oa_location":null,"sustainable_development_goals":[],"study_designs":[],"awards":[],"funders":[{"id":"https://openalex.org/F4320321431","display_name":"Amirkabir University of Technology","ror":"https://ror.org/04gzbav43"}],"has_content":{"pdf":false,"grobid_xml":false},"content_urls":null,"referenced_works_count":40,"referenced_works":["https://openalex.org/W167216241","https://openalex.org/W1480909796","https://openalex.org/W1496704300","https://openalex.org/W1504976174","https://openalex.org/W1506510492","https://openalex.org/W1507845365","https://openalex.org/W1579850852","https://openalex.org/W1600965014","https://openalex.org/W1649260624","https://openalex.org/W1710734607","https://openalex.org/W1975057653","https://openalex.org/W2000441200","https://openalex.org/W2030906223","https://openalex.org/W2059278087","https://openalex.org/W2079050903","https://openalex.org/W2090044595","https://openalex.org/W2090633024","https://openalex.org/W2091941578","https://openalex.org/W2097444001","https://openalex.org/W2100666033","https://openalex.org/W2107593769","https://openalex.org/W2114030344","https://openalex.org/W2117798902","https://openalex.org/W2119029078","https://openalex.org/W2129482816","https://openalex.org/W2129487583","https://openalex.org/W2136651729","https://openalex.org/W2137726309","https://openalex.org/W2138538192","https://openalex.org/W2145071552","https://openalex.org/W2146455667","https://openalex.org/W2156858199","https://openalex.org/W2158248180","https://openalex.org/W2168264487","https://openalex.org/W3016326598","https://openalex.org/W3160978791","https://openalex.org/W4234542549","https://openalex.org/W4239035626","https://openalex.org/W4239342816","https://openalex.org/W4253350893"],"related_works":["https://openalex.org/W2241224198","https://openalex.org/W2316974788","https://openalex.org/W4400606632","https://openalex.org/W4251273449","https://openalex.org/W4323046691","https://openalex.org/W4412610510","https://openalex.org/W4400796952","https://openalex.org/W4285104766","https://openalex.org/W2123129867","https://openalex.org/W4313563693"],"abstract_inverted_index":{"Abstract":[0],"In":[1,35],"this":[2],"paper,":[3],"we":[4,97],"present":[5],"a":[6,60,66,127,189],"smart":[7,123],"fuzzing":[8,124],"method":[9,125,185],"for":[10,58,129],"detecting":[11],"six":[12],"classes":[13],"of":[14,68,75,138],"heap\u2010based":[15,22],"vulnerabilities":[16,81,113,159],"in":[17,82,93,107,114,160,183],"executable":[18,40],"codes,":[19],"that":[20,71,78,103,144],"is,":[21],"buffer":[23,25,27,29],"overflow,":[24],"underwrite,":[26],"over\u2010read,":[28],"under\u2010read,":[30],"double\u2010free,":[31],"and":[32,51,90,110,132,151,174,180],"use\u2010after\u2010free":[33],"vulnerabilities.":[34],"the":[36,39,53,73,108,112,115,121,145,158,167,178],"proposed":[37,122],"method,":[38],"code":[41],"is":[42,154],"instrumented":[43],"to":[44,156,187],"perform":[45],"concolic":[46],"(concrete":[47],"+":[48],"symbolic)":[49],"execution":[50,84],"calculate":[52],"constraints":[54,70,92,148,182],"on":[55,135],"input":[56,76,101],"data":[57,77,102],"executing":[59],"specific":[61,80],"path.":[62,85],"We":[63,118,163],"also":[64,165],"define":[65],"number":[67],"vulnerability":[69,91,147,181],"determine":[72],"characteristics":[74],"activate":[79],"an":[83],"By":[86],"calculating":[87,177],"symbolic":[88],"path":[89,179],"each":[94],"executed":[95,116],"path,":[96],"generate":[98],"appropriate":[99],"concrete":[100],"traverse":[104],"other":[105,172],"paths":[106],"program":[109,190],"detect":[111,157],"paths.":[117],"have":[119,164],"implemented":[120,168],"as":[126],"plug\u2010in":[128],"Valgrind":[130],"framework":[131],"tested":[133],"it":[134],"different":[136],"groups":[137],"benchmark":[139],"programs.":[140,162],"The":[141],"results":[142],"demonstrate":[143],"calculated":[146],"are":[149],"accurate,":[150],"our":[152,184],"fuzzer":[153,169],"able":[155],"these":[161],"compared":[166],"with":[170],"three":[171],"fuzzers":[173],"demonstrated":[175],"how":[176],"helps":[186],"fuzz":[188],"more":[191],"efficiently.":[192],"Copyright":[193],"\u00a9":[194],"2016":[195],"John":[196],"Wiley":[197],"&":[198],"Sons,":[199],"Ltd.":[200]},"counts_by_year":[{"year":2026,"cited_by_count":1},{"year":2025,"cited_by_count":1},{"year":2024,"cited_by_count":2},{"year":2023,"cited_by_count":1},{"year":2021,"cited_by_count":1},{"year":2019,"cited_by_count":1},{"year":2018,"cited_by_count":2}],"updated_date":"2026-11-07T11:25:07.637180","created_date":"2016-11-30T00:00:00"}