{"id":"https://openalex.org/W7220847299","doi":"https://doi.org/10.1109/icra57385.2026.11696045","title":"IRPFuzz: Fuzzing Industrial Robot Protocol via LLM-driven Traffic Semantic Analysis","display_name":"IRPFuzz: Fuzzing Industrial Robot Protocol via LLM-driven Traffic Semantic Analysis","publication_year":2026,"publication_date":"2026-06-01","ids":{"openalex":"https://openalex.org/W7220847299","doi":"https://doi.org/10.1109/icra57385.2026.11696045"},"language":"en","primary_location":{"id":"doi:10.1109/icra57385.2026.11696045","doi":"https://doi.org/10.1109/icra57385.2026.11696045","is_oa":true,"landing_page_url":"https://doi.org/10.1109/icra57385.2026.11696045","pdf_url":null,"source":{"id":"https://openalex.org/S4210217939","display_name":"Proceedings - IEEE International Conference on Robotics and Automation/Proceedings","issn_l":"1050-4729","issn":["1050-4729","2577-087X"],"is_oa":false,"is_in_doaj":false,"is_core":true,"listed_in":["cwts-core","norway-1"],"host_organization":"https://openalex.org/P4310319808","host_organization_name":"Institute of Electrical and Electronics Engineers","host_organization_lineage":["https://openalex.org/P4310319808"],"host_organization_lineage_names":["Institute of Electrical and Electronics Engineers"],"type":"conference"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"2026 IEEE International Conference on Robotics and Automation (ICRA)","raw_type":"proceedings-article"},"volume":null,"type":"conference-paper","is_traditional":true,"indexed_in":["crossref"],"open_access":{"is_oa":true,"oa_status":"hybrid","oa_url":"https://doi.org/10.1109/icra57385.2026.11696045","any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5111302891","display_name":"Laile Xi","orcid":"https://orcid.org/0009-0009-9227-7747","observed_orcids":["https://orcid.org/0009-0009-9227-7747"]},"institutions":[{"id":"https://openalex.org/I19820366","display_name":"Chinese Academy of Sciences","ror":"https://ror.org/034t30j35","country_code":"CN","type":"government","lineage":["https://openalex.org/I19820366"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Laile Xi","raw_affiliation_strings":["Chinese Academy of Sciences"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Chinese Academy of Sciences","institution_ids":["https://openalex.org/I19820366"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5134128751","display_name":"Weicheng Lin","orcid":null,"observed_orcids":[]},"institutions":[{"id":"https://openalex.org/I19820366","display_name":"Chinese Academy of Sciences","ror":"https://ror.org/034t30j35","country_code":"CN","type":"government","lineage":["https://openalex.org/I19820366"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Weicheng Lin","raw_affiliation_strings":["Chinese Academy of Sciences"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Chinese Academy of Sciences","institution_ids":["https://openalex.org/I19820366"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5157802157","display_name":"Yang Zhang","orcid":null,"observed_orcids":[]},"institutions":[{"id":"https://openalex.org/I139759216","display_name":"Beijing University of Posts and Telecommunications","ror":"https://ror.org/04w9fbh59","country_code":"CN","type":"education","lineage":["https://openalex.org/I139759216"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Yang Zhang","raw_affiliation_strings":["Beijing University of Posts and Telecommunications"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Beijing University of Posts and Telecommunications","institution_ids":["https://openalex.org/I139759216"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5108961504","display_name":"Shenghao Lin","orcid":"https://orcid.org/0009-0006-0050-7487","observed_orcids":["https://orcid.org/0009-0006-0050-7487"]},"institutions":[{"id":"https://openalex.org/I19820366","display_name":"Chinese Academy of Sciences","ror":"https://ror.org/034t30j35","country_code":"CN","type":"government","lineage":["https://openalex.org/I19820366"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Shenghao Lin","raw_affiliation_strings":["Chinese Academy of Sciences"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Chinese Academy of Sciences","institution_ids":["https://openalex.org/I19820366"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5101865388","display_name":"Hao Sun","orcid":"https://orcid.org/0000-0002-3132-3529","observed_orcids":["https://orcid.org/0000-0002-3132-3529"]},"institutions":[{"id":"https://openalex.org/I4210131247","display_name":"Shandong Police College","ror":"https://ror.org/02k75d319","country_code":"CN","type":"education","lineage":["https://openalex.org/I4210131247"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Hao Sun","raw_affiliation_strings":["Shangdong Police College"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Shangdong Police College","institution_ids":["https://openalex.org/I4210131247"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5045009020","display_name":"Yimo Ren","orcid":"https://orcid.org/0000-0002-7543-0326","observed_orcids":["https://orcid.org/0000-0002-7543-0326"]},"institutions":[{"id":"https://openalex.org/I19820366","display_name":"Chinese Academy of Sciences","ror":"https://ror.org/034t30j35","country_code":"CN","type":"government","lineage":["https://openalex.org/I19820366"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Yimo Ren","raw_affiliation_strings":["Chinese Academy of Sciences"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Chinese Academy of Sciences","institution_ids":["https://openalex.org/I19820366"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5042555854","display_name":"Hongsong Zhu","orcid":null,"observed_orcids":[]},"institutions":[{"id":"https://openalex.org/I19820366","display_name":"Chinese Academy of Sciences","ror":"https://ror.org/034t30j35","country_code":"CN","type":"government","lineage":["https://openalex.org/I19820366"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Hongsong Zhu","raw_affiliation_strings":["Chinese Academy of Sciences"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Chinese Academy of Sciences","institution_ids":["https://openalex.org/I19820366"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":3,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":0.0,"has_fulltext":false,"cited_by_count":0,"citation_normalized_percentile":{"value":0.0,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":null,"biblio":{"volume":null,"issue":null,"first_page":"21121","last_page":"21128"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10743","display_name":"Software Testing and Debugging Techniques","score":0.9643999934196472,"subfield":{"id":"https://openalex.org/subfields/1712","display_name":"Software"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T10743","display_name":"Software Testing and Debugging Techniques","score":0.9643999934196472,"subfield":{"id":"https://openalex.org/subfields/1712","display_name":"Software"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":0.011300000362098217,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":0.004100000020116568,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/protocol-fuzzing","display_name":"protocol fuzzing","score":0.9700000286102295},{"id":"https://openalex.org/keywords/large-language-models","display_name":"large language models","score":0.9760000109672546}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.6039000153541565},{"id":"https://openalex.org/C2780385302","wikidata":"https://www.wikidata.org/wiki/Q367158","display_name":"Protocol (science)","level":3,"score":0.5266000032424927},{"id":"https://openalex.org/C111065885","wikidata":"https://www.wikidata.org/wiki/Q1189053","display_name":"Fuzz testing","level":3,"score":0.478300005197525},{"id":"https://openalex.org/C133112747","wikidata":"https://www.wikidata.org/wiki/Q7251931","display_name":"Protocol analysis","level":2,"score":0.4722000062465668},{"id":"https://openalex.org/C90509273","wikidata":"https://www.wikidata.org/wiki/Q11012","display_name":"Robot","level":2,"score":0.43230000138282776},{"id":"https://openalex.org/C2781317605","wikidata":"https://www.wikidata.org/wiki/Q7832483","display_name":"Traffic analysis","level":2,"score":0.41609999537467957},{"id":"https://openalex.org/C2776126113","wikidata":"https://www.wikidata.org/wiki/Q1128980","display_name":"Industrial robot","level":3,"score":0.39079999923706055},{"id":"https://openalex.org/C2777946921","wikidata":"https://www.wikidata.org/wiki/Q7449044","display_name":"Semantic analysis (machine learning)","level":2,"score":0.38679999113082886},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.31869998574256897},{"id":"https://openalex.org/C127413603","wikidata":"https://www.wikidata.org/wiki/Q11023","display_name":"Engineering","level":0,"score":0.28839999437332153},{"id":"https://openalex.org/C184337299","wikidata":"https://www.wikidata.org/wiki/Q1437428","display_name":"Semantics (computer science)","level":2,"score":0.27570000290870667},{"id":"https://openalex.org/C124101348","wikidata":"https://www.wikidata.org/wiki/Q172491","display_name":"Data mining","level":1,"score":0.2720000147819519},{"id":"https://openalex.org/C31258907","wikidata":"https://www.wikidata.org/wiki/Q1301371","display_name":"Computer network","level":1,"score":0.2615000009536743},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.25760000944137573},{"id":"https://openalex.org/C12426560","wikidata":"https://www.wikidata.org/wiki/Q189569","display_name":"Basis (linear algebra)","level":2,"score":0.25600001215934753}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1109/icra57385.2026.11696045","doi":"https://doi.org/10.1109/icra57385.2026.11696045","is_oa":true,"landing_page_url":"https://doi.org/10.1109/icra57385.2026.11696045","pdf_url":null,"source":{"id":"https://openalex.org/S4210217939","display_name":"Proceedings - IEEE International Conference on Robotics and Automation/Proceedings","issn_l":"1050-4729","issn":["1050-4729","2577-087X"],"is_oa":false,"is_in_doaj":false,"is_core":true,"listed_in":["cwts-core","norway-1"],"host_organization":"https://openalex.org/P4310319808","host_organization_name":"Institute of Electrical and Electronics Engineers","host_organization_lineage":["https://openalex.org/P4310319808"],"host_organization_lineage_names":["Institute of Electrical and Electronics Engineers"],"type":"conference"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"2026 IEEE International Conference on Robotics and Automation (ICRA)","raw_type":"proceedings-article"}],"best_oa_location":{"id":"doi:10.1109/icra57385.2026.11696045","doi":"https://doi.org/10.1109/icra57385.2026.11696045","is_oa":true,"landing_page_url":"https://doi.org/10.1109/icra57385.2026.11696045","pdf_url":null,"source":{"id":"https://openalex.org/S4210217939","display_name":"Proceedings - IEEE International Conference on Robotics and Automation/Proceedings","issn_l":"1050-4729","issn":["1050-4729","2577-087X"],"is_oa":false,"is_in_doaj":false,"is_core":true,"listed_in":["cwts-core","norway-1"],"host_organization":"https://openalex.org/P4310319808","host_organization_name":"Institute of Electrical and Electronics Engineers","host_organization_lineage":["https://openalex.org/P4310319808"],"host_organization_lineage_names":["Institute of Electrical and Electronics Engineers"],"type":"conference"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"2026 IEEE International Conference on Robotics and Automation (ICRA)","raw_type":"proceedings-article"},"sustainable_development_goals":[{"score":0.7207000255584717,"id":"https://metadata.un.org/sdg/9","display_name":"Industry, innovation and infrastructure"}],"study_designs":[],"awards":[],"funders":[],"has_content":{"grobid_xml":false,"pdf":false},"content_urls":null,"referenced_works_count":0,"referenced_works":[],"related_works":["https://openalex.org/W7202202797","https://openalex.org/W2529204751","https://openalex.org/W7215712308","https://openalex.org/W7165614259","https://openalex.org/W7219405159","https://openalex.org/W4323240482","https://openalex.org/W3159099285","https://openalex.org/W7019173211","https://openalex.org/W7220850428","https://openalex.org/W2729630370"],"abstract_inverted_index":{"Industrial":[0],"robots":[1],"are":[2,49],"widely":[3],"used":[4,39],"in":[5,17,43],"modern":[6],"factories,":[7],"interacting":[8],"with":[9],"external":[10],"systems":[11],"via":[12],"network":[13,84],"protocols.":[14],"Any":[15],"vulnerabilities":[16,42],"these":[18,133],"protocols":[19],"could":[20],"be":[21],"exploited":[22],"to":[23,40,52,82],"control":[24],"the":[25,53,94,148],"robot,":[26,115],"potentially":[27],"disrupting":[28],"production":[29],"and":[30,56,90,100,107,127,137],"even":[31],"endangering":[32],"human":[33],"lives.":[34],"Protocol":[35],"fuzzing":[36,106],"is":[37],"commonly":[38],"discover":[41],"protocol":[44],"implementation.":[45],"However,":[46],"existing":[47],"fuzzers":[48],"inefficient":[50],"due":[51],"proprietary":[54],"nature":[55],"complex":[57],"state":[58,98],"relationships":[59],"of":[60,97,132,150],"industrial":[61,73],"robot":[62,74,88],"protocols.In":[63],"this":[64],"paper,":[65],"we":[66],"present":[67],"IRPFuzz,":[68],"a":[69,113],"state-aware":[70,105],"fuzzer":[71],"for":[72,103],"protocol.":[75],"By":[76],"integrating":[77],"large":[78],"language":[79],"models":[80],"(LLMs)":[81],"analyze":[83],"traffic,":[85],"IRPFuzz":[86,116],"infers":[87],"states":[89],"request":[91],"templates,":[92],"enabling":[93],"automatic":[95],"construction":[96],"model":[99,102],"data":[101],"efficient":[104],"structured":[108],"message":[109],"mutation.":[110],"Evaluated":[111],"on":[112],"real":[114],"discovered":[117],"36":[118],"crashes,":[119],"outperforming":[120],"boofuzz":[121],"by":[122,125,129],"157.14%,":[123],"PCFuzzer":[124],"89.47%,":[126],"MSGFuzzer":[128],"16.13%.":[130],"Five":[131],"crashes":[134],"were":[135],"confirmed":[136],"assigned":[138],"vulnerability":[139],"IDs,":[140],"including":[141],"three":[142],"classified":[143],"as":[144],"high-severity,":[145],"which":[146],"demonstrates":[147],"effectiveness":[149],"IRPFuzz.":[151]},"counts_by_year":[],"updated_date":"2026-11-08T12:12:28.789561","created_date":"2026-10-08T00:00:00"}