{"id":"https://openalex.org/W7207791692","doi":"https://doi.org/10.31577/cai_2026_3_698","title":"SyzPrime: Enhancing Linux Kernel Security for Edge Intelligence Applications via Automatic Discovery of Heap Layout Manipulation Primitives","display_name":"SyzPrime: Enhancing Linux Kernel Security for Edge Intelligence Applications via Automatic Discovery of Heap Layout Manipulation Primitives","publication_year":2026,"publication_date":"2026-01-01","ids":{"openalex":"https://openalex.org/W7207791692","doi":"https://doi.org/10.31577/cai_2026_3_698"},"language":"en","primary_location":{"id":"doi:10.31577/cai_2026_3_698","doi":"https://doi.org/10.31577/cai_2026_3_698","is_oa":true,"landing_page_url":"https://doi.org/10.31577/cai_2026_3_698","pdf_url":"https://www.cai.sk/ojs/index.php/cai/article/download/2026_3_698/1420","source":{"id":"https://openalex.org/S6236348","display_name":"Computing and Informatics","issn_l":"1335-9150","issn":["1335-9150","2585-8807"],"is_oa":true,"is_in_doaj":false,"is_core":true,"listed_in":["cwts-core","dongbi-c","jufo-1","norway-1","poland-20","russia-white-list-3","vabb-shw"],"host_organization":"https://openalex.org/P4360969452","host_organization_name":"Institute of Informatics","host_organization_lineage":["https://openalex.org/P4360969452","https://openalex.org/P4310314449"],"host_organization_lineage_names":["Institute of Informatics","Slovak Academy of Sciences"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Computing and Informatics","raw_type":"journal-article"},"volume":null,"type":"article","is_traditional":true,"indexed_in":["crossref"],"open_access":{"is_oa":true,"oa_status":"diamond","oa_url":"https://www.cai.sk/ojs/index.php/cai/article/download/2026_3_698/1420","any_repository_has_fulltext":true},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5149953111","display_name":"Xingwei Li","orcid":null,"observed_orcids":[]},"institutions":[{"id":"https://openalex.org/I169689159","display_name":"PLA Information Engineering University","ror":"https://ror.org/00mm1qk40","country_code":"CN","type":"education","lineage":["https://openalex.org/I169689159"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Xingwei Li","raw_affiliation_strings":["Information Engineering University, Zhengzhou, 450001, China"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Information Engineering University, Zhengzhou, 450001, China","institution_ids":["https://openalex.org/I169689159"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5149729361","display_name":"Yunchao Wang","orcid":null,"observed_orcids":[]},"institutions":[{"id":"https://openalex.org/I169689159","display_name":"PLA Information Engineering University","ror":"https://ror.org/00mm1qk40","country_code":"CN","type":"education","lineage":["https://openalex.org/I169689159"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Yunchao Wang","raw_affiliation_strings":["Information Engineering University, Zhengzhou, 450001, China"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Information Engineering University, Zhengzhou, 450001, China","institution_ids":["https://openalex.org/I169689159"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5147470713","display_name":"Jianzhou Zhao","orcid":"https://orcid.org/0009-0009-5741-4283","observed_orcids":["https://orcid.org/0009-0009-5741-4283"]},"institutions":[{"id":"https://openalex.org/I169689159","display_name":"PLA Information Engineering University","ror":"https://ror.org/00mm1qk40","country_code":"CN","type":"education","lineage":["https://openalex.org/I169689159"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Jianzhou Zhao","raw_affiliation_strings":["Information Engineering University, Zhengzhou, 450001, China"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Information Engineering University, Zhengzhou, 450001, China","institution_ids":["https://openalex.org/I169689159"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5034408353","display_name":"Yunchao Guan","orcid":null,"observed_orcids":[]},"institutions":[{"id":"https://openalex.org/I99065089","display_name":"Tsinghua University","ror":"https://ror.org/03cve4549","country_code":"CN","type":"education","lineage":["https://openalex.org/I99065089"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Yunchao Guan","raw_affiliation_strings":["Tsinghua University, Beijing, 650001, China"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Tsinghua University, Beijing, 650001, China","institution_ids":["https://openalex.org/I99065089"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5073803603","display_name":"Danjun Liu","orcid":"https://orcid.org/0000-0002-5375-7598","observed_orcids":["https://orcid.org/0000-0002-5375-7598"]},"institutions":[{"id":"https://openalex.org/I170215575","display_name":"National University of Defense Technology","ror":"https://ror.org/05d2yfz11","country_code":"CN","type":"education","lineage":["https://openalex.org/I170215575"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Danjun Liu","raw_affiliation_strings":["National University of Defense Technology, Changsha, 336017, China"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"National University of Defense Technology, Changsha, 336017, China","institution_ids":["https://openalex.org/I170215575"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5149633283","display_name":"Zhe Yang","orcid":null,"observed_orcids":[]},"institutions":[{"id":"https://openalex.org/I82880672","display_name":"Beihang University","ror":"https://ror.org/00wk2mp56","country_code":"CN","type":"education","lineage":["https://openalex.org/I82880672"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Zhe Yang","raw_affiliation_strings":["Beijing University of Aeronautics and Astronautics, Beijing, 650001, China"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Beijing University of Aeronautics and Astronautics, Beijing, 650001, China","institution_ids":["https://openalex.org/I82880672"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5100710814","display_name":"Wenbin Zhang","orcid":"https://orcid.org/0000-0003-3024-5415","observed_orcids":["https://orcid.org/0000-0003-3024-5415"]},"institutions":[{"id":"https://openalex.org/I169689159","display_name":"PLA Information Engineering University","ror":"https://ror.org/00mm1qk40","country_code":"CN","type":"education","lineage":["https://openalex.org/I169689159"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Wenbin Zhang","raw_affiliation_strings":["Information Engineering University, Zhengzhou, 450001, China"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Information Engineering University, Zhengzhou, 450001, China","institution_ids":["https://openalex.org/I169689159"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5149961174","display_name":"Zehui Wu","orcid":null,"observed_orcids":[]},"institutions":[{"id":"https://openalex.org/I169689159","display_name":"PLA Information Engineering University","ror":"https://ror.org/00mm1qk40","country_code":"CN","type":"education","lineage":["https://openalex.org/I169689159"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Zehui Wu","raw_affiliation_strings":["Information Engineering University, Zhengzhou, 450001, China"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Information Engineering University, Zhengzhou, 450001, China","institution_ids":["https://openalex.org/I169689159"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5056524306","display_name":"Rongkuan Ma","orcid":"https://orcid.org/0000-0002-4791-6847","observed_orcids":["https://orcid.org/0000-0002-4791-6847"]},"institutions":[{"id":"https://openalex.org/I169689159","display_name":"PLA Information Engineering University","ror":"https://ror.org/00mm1qk40","country_code":"CN","type":"education","lineage":["https://openalex.org/I169689159"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Rongkuan Ma","raw_affiliation_strings":["Information Engineering University, Zhengzhou, 450001, China"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Information Engineering University, Zhengzhou, 450001, China","institution_ids":["https://openalex.org/I169689159"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5011313793","display_name":"Xixing Li","orcid":"https://orcid.org/0000-0002-8309-8001","observed_orcids":["https://orcid.org/0000-0002-8309-8001"]},"institutions":[{"id":"https://openalex.org/I169689159","display_name":"PLA Information Engineering University","ror":"https://ror.org/00mm1qk40","country_code":"CN","type":"education","lineage":["https://openalex.org/I169689159"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Xixing Li","raw_affiliation_strings":["Information Engineering University, Zhengzhou, 450001, China"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Information Engineering University, Zhengzhou, 450001, China","institution_ids":["https://openalex.org/I169689159"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5147458752","display_name":"Qiang Wei","orcid":null,"observed_orcids":[]},"institutions":[{"id":"https://openalex.org/I169689159","display_name":"PLA Information Engineering University","ror":"https://ror.org/00mm1qk40","country_code":"CN","type":"education","lineage":["https://openalex.org/I169689159"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Qiang Wei","raw_affiliation_strings":["Information Engineering University, Zhengzhou, 450001, China"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Information Engineering University, Zhengzhou, 450001, China","institution_ids":["https://openalex.org/I169689159"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":4,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":0.0,"has_fulltext":true,"cited_by_count":0,"citation_normalized_percentile":{"value":0.0,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":null,"biblio":{"volume":"45","issue":"3","first_page":"698","last_page":"725"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11424","display_name":"Security and Verification in Computing","score":0.9872999787330627,"subfield":{"id":"https://openalex.org/subfields/1708","display_name":"Hardware and Architecture"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11424","display_name":"Security and Verification in Computing","score":0.9872999787330627,"subfield":{"id":"https://openalex.org/subfields/1708","display_name":"Hardware and Architecture"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10743","display_name":"Software Testing and Debugging Techniques","score":0.010999999940395355,"subfield":{"id":"https://openalex.org/subfields/1712","display_name":"Software"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":0.00019999999494757503,"subfield":{"id":"https://openalex.org/subfields/1712","display_name":"Software"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/linux-kernel-security","display_name":"Linux kernel security","score":0.9150000214576721},{"id":"https://openalex.org/keywords/fuzzing","display_name":"fuzzing","score":0.7149999737739563},{"id":"https://openalex.org/keywords/edge-computing-security","display_name":"edge computing security","score":0.6209999918937683},{"id":"https://openalex.org/keywords/privilege-escalation","display_name":"privilege escalation","score":0.8399999737739563},{"id":"https://openalex.org/keywords/information-leakage","display_name":"information leakage","score":0.6759999990463257},{"id":"https://openalex.org/keywords/kernel-vulnerabilities","display_name":"kernel vulnerabilities","score":0.4000000059604645}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.836899995803833},{"id":"https://openalex.org/C111065885","wikidata":"https://www.wikidata.org/wiki/Q1189053","display_name":"Fuzz testing","level":3,"score":0.7857000231742859},{"id":"https://openalex.org/C134757568","wikidata":"https://www.wikidata.org/wiki/Q274089","display_name":"Heap (data structure)","level":2,"score":0.7756999731063843},{"id":"https://openalex.org/C553261973","wikidata":"https://www.wikidata.org/wiki/Q14579","display_name":"Linux kernel","level":2,"score":0.47940000891685486},{"id":"https://openalex.org/C170723468","wikidata":"https://www.wikidata.org/wiki/Q182933","display_name":"x86","level":3,"score":0.4456999897956848},{"id":"https://openalex.org/C74193536","wikidata":"https://www.wikidata.org/wiki/Q574844","display_name":"Kernel (algebra)","level":2,"score":0.4348999857902527},{"id":"https://openalex.org/C111919701","wikidata":"https://www.wikidata.org/wiki/Q9135","display_name":"Operating system","level":1,"score":0.426800012588501},{"id":"https://openalex.org/C115537543","wikidata":"https://www.wikidata.org/wiki/Q165596","display_name":"Cache","level":2,"score":0.3564000129699707},{"id":"https://openalex.org/C97686452","wikidata":"https://www.wikidata.org/wiki/Q7604153","display_name":"Static analysis","level":2,"score":0.3472000062465668},{"id":"https://openalex.org/C149635348","wikidata":"https://www.wikidata.org/wiki/Q193040","display_name":"Embedded system","level":1,"score":0.3034000098705292},{"id":"https://openalex.org/C199360897","wikidata":"https://www.wikidata.org/wiki/Q9143","display_name":"Programming language","level":1,"score":0.3001999855041504},{"id":"https://openalex.org/C119024030","wikidata":"https://www.wikidata.org/wiki/Q759899","display_name":"Call stack","level":3,"score":0.2791999876499176},{"id":"https://openalex.org/C120314980","wikidata":"https://www.wikidata.org/wiki/Q180634","display_name":"Distributed computing","level":1,"score":0.27390000224113464},{"id":"https://openalex.org/C188198153","wikidata":"https://www.wikidata.org/wiki/Q1613840","display_name":"Limiting","level":2,"score":0.2709999978542328},{"id":"https://openalex.org/C20574231","wikidata":"https://www.wikidata.org/wiki/Q844605","display_name":"Backward compatibility","level":2,"score":0.26649999618530273},{"id":"https://openalex.org/C150202949","wikidata":"https://www.wikidata.org/wiki/Q107602","display_name":"Pointer (user interface)","level":2,"score":0.2563000023365021},{"id":"https://openalex.org/C80444323","wikidata":"https://www.wikidata.org/wiki/Q2878974","display_name":"Theoretical computer science","level":1,"score":0.2556000053882599}],"mesh":[],"locations_count":2,"locations":[{"id":"doi:10.31577/cai_2026_3_698","doi":"https://doi.org/10.31577/cai_2026_3_698","is_oa":true,"landing_page_url":"https://doi.org/10.31577/cai_2026_3_698","pdf_url":"https://www.cai.sk/ojs/index.php/cai/article/download/2026_3_698/1420","source":{"id":"https://openalex.org/S6236348","display_name":"Computing and Informatics","issn_l":"1335-9150","issn":["1335-9150","2585-8807"],"is_oa":true,"is_in_doaj":false,"is_core":true,"listed_in":["cwts-core","dongbi-c","jufo-1","norway-1","poland-20","russia-white-list-3","vabb-shw"],"host_organization":"https://openalex.org/P4360969452","host_organization_name":"Institute of Informatics","host_organization_lineage":["https://openalex.org/P4360969452","https://openalex.org/P4310314449"],"host_organization_lineage_names":["Institute of Informatics","Slovak Academy of Sciences"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Computing and Informatics","raw_type":"journal-article"},{"id":"pmh:oai:ojs.pkp.sfu.ca:article/7569","doi":null,"is_oa":true,"landing_page_url":"https://www.cai.sk/ojs/index.php/cai/article/view/2026_3_698","pdf_url":null,"source":{"id":"https://openalex.org/S6236348","display_name":"Computing and Informatics","issn_l":"1335-9150","issn":["1335-9150","2585-8807"],"is_oa":true,"is_in_doaj":false,"is_core":true,"listed_in":["cwts-core","dongbi-c","jufo-1","norway-1","poland-20","russia-white-list-3","vabb-shw"],"host_organization":"https://openalex.org/P4360969452","host_organization_name":"Institute of Informatics","host_organization_lineage":["https://openalex.org/P4360969452","https://openalex.org/P4310314449"],"host_organization_lineage_names":["Institute of Informatics","Slovak Academy of Sciences"],"type":"journal"},"license":null,"license_id":null,"version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":"1335-9150","raw_type":"info:eu-repo/semantics/article"}],"best_oa_location":{"id":"doi:10.31577/cai_2026_3_698","doi":"https://doi.org/10.31577/cai_2026_3_698","is_oa":true,"landing_page_url":"https://doi.org/10.31577/cai_2026_3_698","pdf_url":"https://www.cai.sk/ojs/index.php/cai/article/download/2026_3_698/1420","source":{"id":"https://openalex.org/S6236348","display_name":"Computing and Informatics","issn_l":"1335-9150","issn":["1335-9150","2585-8807"],"is_oa":true,"is_in_doaj":false,"is_core":true,"listed_in":["cwts-core","dongbi-c","jufo-1","norway-1","poland-20","russia-white-list-3","vabb-shw"],"host_organization":"https://openalex.org/P4360969452","host_organization_name":"Institute of Informatics","host_organization_lineage":["https://openalex.org/P4360969452","https://openalex.org/P4310314449"],"host_organization_lineage_names":["Institute of Informatics","Slovak Academy of Sciences"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Computing and Informatics","raw_type":"journal-article"},"sustainable_development_goals":[],"study_designs":[],"awards":[],"funders":[],"has_content":{"grobid_xml":true,"pdf":true},"content_urls":{"pdf":"https://content.openalex.org/works/W7207791692.pdf","grobid_xml":"https://content.openalex.org/works/W7207791692.grobid-xml"},"referenced_works_count":19,"referenced_works":["https://openalex.org/W2192387223","https://openalex.org/W2765363641","https://openalex.org/W2897668282","https://openalex.org/W2984993098","https://openalex.org/W2985831349","https://openalex.org/W3108020564","https://openalex.org/W3211521973","https://openalex.org/W4287851274","https://openalex.org/W4288057707","https://openalex.org/W4308642904","https://openalex.org/W4308643127","https://openalex.org/W4313191964","https://openalex.org/W4324007134","https://openalex.org/W4385080372","https://openalex.org/W4388856870","https://openalex.org/W4391725287","https://openalex.org/W4402263655","https://openalex.org/W6921519929","https://openalex.org/W7134889147"],"related_works":["https://openalex.org/W7207830005","https://openalex.org/W7125678887","https://openalex.org/W7124192601","https://openalex.org/W4313303919","https://openalex.org/W7095002307","https://openalex.org/W4319043397","https://openalex.org/W4324007134","https://openalex.org/W4288057749","https://openalex.org/W4400796952","https://openalex.org/W7091691761"],"abstract_inverted_index":{"Exploitation":[0],"of":[1,106,164],"the":[2,64,160,172,194],"Linux":[3,66,196],"kernel":[4,27,37,87,197],"continues":[5],"to":[6,15,24,77,96,215],"pose":[7],"significant":[8],"security":[9],"risks":[10],"from":[11],"sensitive":[12,212],"information":[13],"leakage":[14],"severe":[16],"privilege":[17],"escalation.":[18],"While":[19],"developers":[20],"prioritize":[21],"reducing":[22],"primitives":[23,41,84,123,174,207],"limit":[25],"exploitability,":[26],"heap":[28,80,88],"exploitation":[29,165],"remains":[30],"a":[31,74,91,119,132,156],"persistent":[32],"threat":[33],"that":[34,93,158,171,202],"significantly":[35],"threatens":[36],"integrity.":[38],"Discovering":[39],"such":[40,142],"is":[42],"commonly":[43],"considered":[44],"an":[45],"art;":[46],"existing":[47],"approaches":[48],"rely":[49],"on":[50,58,186],"unsound":[51],"static":[52,116],"analysis":[53,112],"and":[54,60,124,146,162,178,190,208],"ad-hoc":[55],"expertise,":[56],"depending":[57],"expertise":[59],"limiting":[61],"practicality":[62],"in":[63,85,109,193],"real-world":[65,188],"kernel.":[67],"In":[68],"this":[69],"paper,":[70],"we":[71,154,183],"present":[72],"SyzPrime,":[73],"systematic":[75],"approach":[76],"automatically":[78],"discover":[79],"layout":[81],"manipulation":[82],"(HLM)":[83],"recent":[86],"vulnerabilities,":[89],"with":[90,115,131],"design":[92],"can":[94],"scale":[95],"edge":[97],"environments":[98],"for":[99,151],"autonomous,":[100],"real-time":[101],"security.":[102],"The":[103],"key":[104],"innovation":[105],"SyzPrime":[107,185,203],"lies":[108],"combining":[110],"dynamic":[111],"via":[113],"fuzzing":[114,125],"instrumentation,":[117],"enabling":[118],"direct":[120],"correlation":[121],"between":[122],"seeds.":[126],"We":[127],"utilize":[128],"object-driven":[129],"instrumentation":[130],"restricted":[133],"mutation-based":[134],"fuzzer":[135],"targeting":[136],"specific":[137],"object":[138],"or":[139],"cache":[140],"interactions,":[141],"as":[143],"allocation,":[144],"deallocation":[145],"usage.":[147],"By":[148],"enhancing":[149],"ftrace":[150],"precise":[152],"tracking,":[153],"lay":[155],"foundation":[157],"enables":[159],"identification":[161],"generation":[163],"paths":[166],"without":[167],"side":[168],"effects,":[169],"ensuring":[170],"discovered":[173],"are":[175],"both":[176],"reliable":[177],"practical.":[179],"To":[180],"demonstrate":[181],"effectiveness,":[182],"evaluated":[184],"40":[187],"CVEs":[189],"240":[191],"objects":[192,213],"stable":[195],"tree.":[198],"Our":[199],"results":[200],"show":[201],"discovers":[204],"1.6x":[205],"more":[206,211],"identifies":[209],"4.1x":[210],"compared":[214],"state-of-the-art":[216],"approaches.":[217]},"counts_by_year":[],"updated_date":"2026-11-04T10:54:05.112534","created_date":"2016-06-24T00:00:00"}