{"id":"https://openalex.org/W7014535676","doi":null,"title":"Protocol Fuzzing- A Comparison between LLM-Assisted and Mutation-Based Fuzzers","display_name":"Protocol Fuzzing- A Comparison between LLM-Assisted and Mutation-Based Fuzzers","publication_year":2025,"publication_date":"2025-01-01","ids":{"openalex":"https://openalex.org/W7014535676"},"language":"en","primary_location":{"id":"pmh:oai:lup-student-papers.lub.lu.se:9202449","doi":null,"is_oa":true,"landing_page_url":"http://lup.lub.lu.se/student-papers/record/9202449","pdf_url":"http://lup.lub.lu.se/student-papers/record/9202449/file/9202465.pdf","source":{"id":"https://openalex.org/S4306402420","display_name":"Lund University Publications Student Papers (Lund University)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"listed_in":[],"host_organization":"https://openalex.org/I187531555","host_organization_name":"Lund University","host_organization_lineage":["https://openalex.org/I187531555"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"H2"},"volume":null,"type":"dissertation","is_traditional":true,"indexed_in":[],"open_access":{"is_oa":true,"oa_status":"green","oa_url":"http://lup.lub.lu.se/student-papers/record/9202449/file/9202465.pdf","any_repository_has_fulltext":true},"authorships":[{"author_position":"first","author":{"id":null,"display_name":"Eberhardt, Moa","orcid":null,"observed_orcids":[]},"institutions":[{"id":"https://openalex.org/I187531555","display_name":"Lund University","ror":"https://ror.org/012a77v79","country_code":"SE","type":"education","lineage":["https://openalex.org/I187531555"]}],"countries":["SE"],"is_corresponding":false,"raw_author_name":"Eberhardt, Moa","raw_affiliation_strings":["Department of Electrical and Information Technology Lund University"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Department of Electrical and Information Technology Lund University","institution_ids":["https://openalex.org/I187531555"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5009189336","display_name":"Lucas Karlsson","orcid":null,"observed_orcids":[]},"institutions":[{"id":"https://openalex.org/I187531555","display_name":"Lund University","ror":"https://ror.org/012a77v79","country_code":"SE","type":"education","lineage":["https://openalex.org/I187531555"]}],"countries":["SE"],"is_corresponding":false,"raw_author_name":"Karlsson, Lucas","raw_affiliation_strings":["Department of Electrical and Information Technology Lund University"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Department of Electrical and Information Technology Lund University","institution_ids":["https://openalex.org/I187531555"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":1,"corresponding_author_ids":[],"corresponding_institution_ids":["https://openalex.org/I187531555"],"apc_list":null,"apc_paid":null,"fwci":null,"has_fulltext":true,"cited_by_count":0,"citation_normalized_percentile":null,"cited_by_percentile_year":null,"biblio":{"volume":null,"issue":null,"first_page":null,"last_page":null},"is_retracted":false,"is_paratext":false,"is_xpac":true,"primary_topic":{"id":"https://openalex.org/T10743","display_name":"Software Testing and Debugging Techniques","score":0.9970999956130981,"subfield":{"id":"https://openalex.org/subfields/1712","display_name":"Software"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T10743","display_name":"Software Testing and Debugging Techniques","score":0.9970999956130981,"subfield":{"id":"https://openalex.org/subfields/1712","display_name":"Software"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":0.0008999999845400453,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T12479","display_name":"Web Application Security Vulnerabilities","score":0.00039999998989515007,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/protocol-fuzzing","display_name":"protocol fuzzing","score":0.8679999709129333},{"id":"https://openalex.org/keywords/mutation-based-fuzzing","display_name":"mutation-based fuzzing","score":0.9259999990463257},{"id":"https://openalex.org/keywords/black-box-fuzzing","display_name":"black-box fuzzing","score":0.8479999899864197},{"id":"https://openalex.org/keywords/large-language-models","display_name":"large language models","score":0.7910000085830688},{"id":"https://openalex.org/keywords/gpt-4","display_name":"GPT-4","score":0.9290000200271606},{"id":"https://openalex.org/keywords/router-security","display_name":"router security","score":0.5979999899864197},{"id":"https://openalex.org/keywords/cve","display_name":"CVE","score":0.5070000290870667},{"id":"https://openalex.org/keywords/energy-consumption","display_name":"energy consumption","score":0.5929999947547913},{"id":"https://openalex.org/keywords/vulnerability-detection","display_name":"vulnerability detection","score":0.48100000619888306}],"concepts":[{"id":"https://openalex.org/C111065885","wikidata":"https://www.wikidata.org/wiki/Q1189053","display_name":"Fuzz testing","level":3,"score":0.9789000153541565},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.8205999732017517},{"id":"https://openalex.org/C185798385","wikidata":"https://www.wikidata.org/wiki/Q1161707","display_name":"Benchmark (surveying)","level":2,"score":0.6539999842643738},{"id":"https://openalex.org/C2777904410","wikidata":"https://www.wikidata.org/wiki/Q7397","display_name":"Software","level":2,"score":0.4325000047683716},{"id":"https://openalex.org/C2780385302","wikidata":"https://www.wikidata.org/wiki/Q367158","display_name":"Protocol (science)","level":3,"score":0.4262000024318695},{"id":"https://openalex.org/C172173386","wikidata":"https://www.wikidata.org/wiki/Q79984","display_name":"Ethernet","level":2,"score":0.36980000138282776},{"id":"https://openalex.org/C16910744","wikidata":"https://www.wikidata.org/wiki/Q7705759","display_name":"Test data","level":2,"score":0.36649999022483826},{"id":"https://openalex.org/C158379750","wikidata":"https://www.wikidata.org/wiki/Q214111","display_name":"Network packet","level":2,"score":0.365200012922287},{"id":"https://openalex.org/C119857082","wikidata":"https://www.wikidata.org/wiki/Q2539","display_name":"Machine learning","level":1,"score":0.32850000262260437},{"id":"https://openalex.org/C124101348","wikidata":"https://www.wikidata.org/wiki/Q172491","display_name":"Data mining","level":1,"score":0.32820001244544983},{"id":"https://openalex.org/C1009929","wikidata":"https://www.wikidata.org/wiki/Q179550","display_name":"Software bug","level":3,"score":0.3111000061035156},{"id":"https://openalex.org/C128942645","wikidata":"https://www.wikidata.org/wiki/Q1568346","display_name":"Test case","level":3,"score":0.2922999858856201},{"id":"https://openalex.org/C43364308","wikidata":"https://www.wikidata.org/wiki/Q8799","display_name":"Byte","level":2,"score":0.28949999809265137},{"id":"https://openalex.org/C53942775","wikidata":"https://www.wikidata.org/wiki/Q1211721","display_name":"Code coverage","level":3,"score":0.2786000072956085},{"id":"https://openalex.org/C149635348","wikidata":"https://www.wikidata.org/wiki/Q193040","display_name":"Embedded system","level":1,"score":0.27570000290870667},{"id":"https://openalex.org/C45235069","wikidata":"https://www.wikidata.org/wiki/Q278425","display_name":"Table (database)","level":2,"score":0.2750999927520752},{"id":"https://openalex.org/C113775141","wikidata":"https://www.wikidata.org/wiki/Q428691","display_name":"Computer engineering","level":1,"score":0.2671999931335449},{"id":"https://openalex.org/C195518309","wikidata":"https://www.wikidata.org/wiki/Q13424265","display_name":"Security testing","level":5,"score":0.2556999921798706},{"id":"https://openalex.org/C168065819","wikidata":"https://www.wikidata.org/wiki/Q845566","display_name":"Debugging","level":2,"score":0.2556000053882599},{"id":"https://openalex.org/C79403827","wikidata":"https://www.wikidata.org/wiki/Q3988","display_name":"Real-time computing","level":1,"score":0.2535000145435333}],"mesh":[],"locations_count":1,"locations":[{"id":"pmh:oai:lup-student-papers.lub.lu.se:9202449","doi":null,"is_oa":true,"landing_page_url":"http://lup.lub.lu.se/student-papers/record/9202449","pdf_url":"http://lup.lub.lu.se/student-papers/record/9202449/file/9202465.pdf","source":{"id":"https://openalex.org/S4306402420","display_name":"Lund University Publications Student Papers (Lund University)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"listed_in":[],"host_organization":"https://openalex.org/I187531555","host_organization_name":"Lund University","host_organization_lineage":["https://openalex.org/I187531555"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"H2"}],"best_oa_location":{"id":"pmh:oai:lup-student-papers.lub.lu.se:9202449","doi":null,"is_oa":true,"landing_page_url":"http://lup.lub.lu.se/student-papers/record/9202449","pdf_url":"http://lup.lub.lu.se/student-papers/record/9202449/file/9202465.pdf","source":{"id":"https://openalex.org/S4306402420","display_name":"Lund University Publications Student Papers (Lund University)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"listed_in":[],"host_organization":"https://openalex.org/I187531555","host_organization_name":"Lund University","host_organization_lineage":["https://openalex.org/I187531555"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"H2"},"sustainable_development_goals":[],"study_designs":[],"awards":[],"funders":[],"has_content":{"pdf":true,"grobid_xml":true},"content_urls":{"pdf":"https://content.openalex.org/works/W7014535676.pdf","grobid_xml":"https://content.openalex.org/works/W7014535676.grobid-xml"},"referenced_works_count":5,"referenced_works":["https://openalex.org/W2626778328","https://openalex.org/W3030163527","https://openalex.org/W4386569390","https://openalex.org/W4402696986","https://openalex.org/W4404818165"],"related_works":["https://openalex.org/W4388440586","https://openalex.org/W4224861230","https://openalex.org/W2544622625","https://openalex.org/W4416457592","https://openalex.org/W7204914869","https://openalex.org/W2216041415","https://openalex.org/W7223212293","https://openalex.org/W3158623124","https://openalex.org/W7161258768","https://openalex.org/W7125958560"],"abstract_inverted_index":{"As":[0],"the":[1,15,64,89,126,133,142,152,156,203,207,216,232,254,260,268],"demand":[2],"for":[3,63],"secure":[4],"software":[5],"and":[6,19,38,70,86,171,196,219,242],"hardware":[7],"solutions":[8],"increase":[9],"in":[10,125,267],"our":[11],"modern":[12,55],"digitalized":[13],"society,":[14],"importance":[16],"of":[17,36,151,190,202,253,270],"reliable":[18],"cost-effective":[20],"product":[21],"testing":[22,27],"is":[23,29],"apparent.":[24],"One":[25],"such":[26],"technique":[28],"fuzzing,":[30],"which":[31,168],"involves":[32],"generating":[33],"large":[34],"amounts":[35],"malformed":[37],"randomized":[39],"data":[40,65,91,109,184,238],"to":[41,49,54,140,215,236],"stress":[42],"test":[43,165],"system":[44],"interfaces.":[45],"This":[46],"study":[47],"aimed":[48,111],"compare":[50],"traditional":[51,121,208],"fuzzing":[52,73,122,143],"methods":[53],"approaches":[56],"assisted":[57],"with":[58,108,177,213,234],"Large":[59],"Language":[60],"Models":[61],"(LLMs)":[62],"generation,":[66],"focusing":[67],"on":[68,116],"efficiency":[69],"performance.":[71],"The":[72,98,120,182,200],"targets":[74],"were":[75,175,249],"three":[76],"consumer":[77],"grade":[78],"routers-the":[79],"D-Link":[80],"Eagle":[81],"Pro":[82],"AI":[83],"G416,":[84],"R03":[85],"R15-which":[87],"received":[88],"input":[90],"via":[92],"a":[93,129],"direct":[94],"Ethernet":[95],"LAN":[96],"connection.":[97],"tested":[99],"interface":[100],"was":[101,128,257],"each":[102],"router's":[103],"internal":[104],"HTTP-server,":[105],"being":[106],"fuzzed":[107],"packets":[110],"at":[112],"triggering":[113],"errors":[114,246],"based":[115],"previously":[117],"published":[118,261],"CVEs.":[119],"model":[123],"used":[124],"comparison":[127],"mutation-based":[130],"fuzzer,":[131],"while":[132],"LLM-assisted":[134],"approach":[135],"employed":[136],"OpenAI's":[137],"LLM":[138],"GPT-4.1":[139],"generate":[141],"data.":[144],"Both":[145],"models":[146],"operated":[147],"without":[148],"prior":[149],"knowledge":[150],"target":[153],"systems,":[154],"qualifying":[155],"experiments":[157],"as":[158,229,231],"black-box":[159,271],"fuzzing.":[160,272],"Each":[161],"router":[162],"underwent":[163],"five":[164],"sessions,":[166],"during":[167,251],"HTTP-requests,":[169],"timestamps,":[170],"potential":[172],"error":[173],"states":[174],"logged,":[176],"Wireshark":[178],"capturing":[179],"background":[180],"traffic.":[181],"collected":[183],"included":[185],"benchmark":[186,217],"performance":[187],"metrics,":[188],"counts":[189],"discovered":[191],"vulnerabilities,":[192],"request":[193],"deviation":[194],"matrices,":[195],"energy":[197,220],"usage":[198],"estimates.":[199],"outcome":[201],"project":[204],"showcased":[205],"that":[206,259],"fuzzer":[209],"performed":[210],"quantitively":[211],"better":[212],"regards":[214,235],"metrics":[218],"cost":[221],"per":[222],"generated":[223],"byte,":[224],"but":[225],"did":[226,263],"not":[227,264],"perform":[228],"well":[230],"LLM-fuzzer":[233],"fuzz":[237],"variation,":[239],"alteration":[240],"dispersion":[241],"complexity.":[243],"Since":[244],"no":[245],"or":[247],"vulnerabilities":[248],"found":[250],"any":[252],"tests,":[255],"it":[256],"concluded":[258],"CVEs":[262],"aid":[265],"enough":[266],"context":[269]},"counts_by_year":[],"updated_date":"2026-11-07T11:25:07.637180","created_date":"2025-10-10T00:00:00"}