{"id":"https://openalex.org/W4413680010","doi":"https://doi.org/10.1109/csr64739.2025.11130030","title":"A Machine Learning Approach to Automate Greybox Testing","display_name":"A Machine Learning Approach to Automate Greybox Testing","publication_year":2025,"publication_date":"2025-08-04","ids":{"openalex":"https://openalex.org/W4413680010","doi":"https://doi.org/10.1109/csr64739.2025.11130030"},"language":"en","primary_location":{"id":"doi:10.1109/csr64739.2025.11130030","doi":"https://doi.org/10.1109/csr64739.2025.11130030","is_oa":false,"landing_page_url":"https://doi.org/10.1109/csr64739.2025.11130030","pdf_url":null,"source":{"id":"https://openalex.org/S7407087864","display_name":"IEEE International Conference on Cyber Security and Resilience (CSR)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"listed_in":[],"host_organization":null,"host_organization_name":null,"host_organization_lineage":[],"host_organization_lineage_names":[],"type":"conference"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"2025 IEEE International Conference on Cyber Security and Resilience (CSR)","raw_type":"proceedings-article"},"volume":null,"type":"conference-paper","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":null,"display_name":"Alaa Hijazi","orcid":null,"observed_orcids":[]},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Alaa Hijazi","raw_affiliation_strings":["Cyber Intelligence Unit Potech Consulting,Beirut,Lebanon"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Cyber Intelligence Unit Potech Consulting,Beirut,Lebanon","institution_ids":[]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5061464931","display_name":"Dany Mezher","orcid":null,"observed_orcids":[]},"institutions":[{"id":"https://openalex.org/I184679254","display_name":"Saint Joseph University","ror":"https://ror.org/044fxjq88","country_code":"LB","type":"education","lineage":["https://openalex.org/I184679254"]}],"countries":["LB"],"is_corresponding":false,"raw_author_name":"Dany Mezher","raw_affiliation_strings":["Saint Joseph University of Beirut,Faculty of Engineering,Beirut,Lebanon"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Saint Joseph University of Beirut,Faculty of Engineering,Beirut,Lebanon","institution_ids":["https://openalex.org/I184679254"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5119444263","display_name":"Elie Zeidan","orcid":null,"observed_orcids":[]},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Elie Zeidan","raw_affiliation_strings":["Thidesoft Potech Global,Beirut,Lebanon"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Thidesoft Potech Global,Beirut,Lebanon","institution_ids":[]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5024522221","display_name":"Carole Bassil","orcid":"https://orcid.org/0000-0002-7628-5191","observed_orcids":["https://orcid.org/0000-0002-7628-5191"]},"institutions":[{"id":"https://openalex.org/I160368002","display_name":"Lebanese University","ror":"https://ror.org/05x6qnc69","country_code":"LB","type":"education","lineage":["https://openalex.org/I160368002"]}],"countries":["LB"],"is_corresponding":false,"raw_author_name":"Carole Bassil","raw_affiliation_strings":["LaRRIS - Lebanese University,Research and Development Potech Global,Beirut,Lebanon"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"LaRRIS - Lebanese University,Research and Development Potech Global,Beirut,Lebanon","institution_ids":["https://openalex.org/I160368002"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":2,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":0.0,"has_fulltext":false,"cited_by_count":0,"citation_normalized_percentile":{"value":0.20856896,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":null,"biblio":{"volume":null,"issue":null,"first_page":"29","last_page":"35"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T12479","display_name":"Web Application Security Vulnerabilities","score":0.8798999786376953,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T12479","display_name":"Web Application Security Vulnerabilities","score":0.8798999786376953,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10743","display_name":"Software Testing and Debugging Techniques","score":0.11349999904632568,"subfield":{"id":"https://openalex.org/subfields/1712","display_name":"Software"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":0.00279999990016222,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/automated-vulnerability-detection","display_name":"automated vulnerability detection","score":0.902999997138977},{"id":"https://openalex.org/keywords/access-control-vulnerabilities","display_name":"access control vulnerabilities","score":0.8870000243186951},{"id":"https://openalex.org/keywords/api-security","display_name":"API security","score":0.9369999766349792},{"id":"https://openalex.org/keywords/test-automation","display_name":"test automation","score":0.45399999618530273}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.7169507145881653},{"id":"https://openalex.org/C119857082","wikidata":"https://www.wikidata.org/wiki/Q2539","display_name":"Machine learning","level":1,"score":0.39124488830566406},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.3884811997413635},{"id":"https://openalex.org/C115903868","wikidata":"https://www.wikidata.org/wiki/Q80993","display_name":"Software engineering","level":1,"score":0.34409576654434204}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1109/csr64739.2025.11130030","doi":"https://doi.org/10.1109/csr64739.2025.11130030","is_oa":false,"landing_page_url":"https://doi.org/10.1109/csr64739.2025.11130030","pdf_url":null,"source":{"id":"https://openalex.org/S7407087864","display_name":"IEEE International Conference on Cyber Security and Resilience (CSR)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"listed_in":[],"host_organization":null,"host_organization_name":null,"host_organization_lineage":[],"host_organization_lineage_names":[],"type":"conference"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"2025 IEEE International Conference on Cyber Security and Resilience (CSR)","raw_type":"proceedings-article"}],"best_oa_location":null,"sustainable_development_goals":[{"display_name":"Industry, innovation and infrastructure","id":"https://metadata.un.org/sdg/9","score":0.4943999946117401}],"sustainable_development_goals_aurora":[],"study_designs":[],"awards":[],"funders":[],"has_content":{"pdf":false,"grobid_xml":false},"content_urls":null,"referenced_works_count":5,"referenced_works":["https://openalex.org/W2127456326","https://openalex.org/W3037304544","https://openalex.org/W3132629027","https://openalex.org/W4284967266","https://openalex.org/W4313036393"],"related_works":["https://openalex.org/W2961085424","https://openalex.org/W4306674287","https://openalex.org/W4387369504","https://openalex.org/W4394896187","https://openalex.org/W3170094116","https://openalex.org/W4386462264","https://openalex.org/W3107602296","https://openalex.org/W4364306694","https://openalex.org/W4312192474","https://openalex.org/W4283697347"],"abstract_inverted_index":{"Cybersecurity":[0],"threats":[1,40],"evolve":[2],"continually,":[3],"posing":[4],"ever-growing":[5],"challenges":[6],"to":[7,52,66,86,126],"the":[8],"confidentiality,":[9],"integrity,":[10],"and":[11,21,28,44,80,97,124],"availability":[12],"of":[13,61,110],"digital":[14],"infrastructures.":[15],"This":[16],"is":[17],"critical":[18,39],"for":[19,35],"developers":[20],"testers":[22],"who":[23],"must":[24],"balance,":[25],"with":[26,112],"time":[27,123],"budget":[29],"constraints,":[30],"secure":[31],"development":[32],"practices,":[33],"especially":[34],"APIs":[36],"that":[37,47,92,103],"present":[38],"in":[41],"business":[42,98],"logic,":[43],"access":[45,95],"controls":[46],"standard":[48],"security":[49,68,128],"tools":[50],"fail":[51],"detect.":[53],"A":[54],"gap":[55],"remains":[56],"automatically":[57,93],"detecting":[58],"this":[59],"kind":[60],"vulnerability,":[62],"leaving":[63],"organizations":[64],"exposed":[65],"information":[67,127],"risks.":[69],"By":[70],"using":[71],"a":[72,78,88],"machine":[73],"learning":[74],"engine":[75],"trained":[76],"on":[77],"real-world":[79],"private":[81],"dataset,":[82],"we":[83],"were":[84],"able":[85],"develop":[87],"greybox":[89],"testing":[90,122],"framework":[91],"identifies":[94],"control":[96],"logic":[99],"vulnerabilities.":[100],"We":[101],"showed":[102],"our":[104],"approach":[105],"properly":[106],"detects":[107],"these":[108],"types":[109],"weaknesses":[111],"an":[113],"accuracy":[114],"rate":[115],"exceeding":[116],"$\\mathbf{9":[117],"0":[118],"\\%}$,":[119],"significantly":[120],"reducing":[121],"adapting":[125],"requirements.":[129]},"counts_by_year":[],"updated_date":"2026-10-06T10:28:23.643775","created_date":"2025-10-10T00:00:00"}