{"id":"https://openalex.org/W4407568369","doi":"https://doi.org/10.1007/s10207-024-00953-6","title":"Speeding-up fuzzing through directional seeds","display_name":"Speeding-up fuzzing through directional seeds","publication_year":2025,"publication_date":"2025-02-14","ids":{"openalex":"https://openalex.org/W4407568369","doi":"https://doi.org/10.1007/s10207-024-00953-6"},"language":"en","primary_location":{"id":"doi:10.1007/s10207-024-00953-6","is_oa":true,"landing_page_url":"https://doi.org/10.1007/s10207-024-00953-6","pdf_url":"https://link.springer.com/content/pdf/10.1007/s10207-024-00953-6.pdf","source":{"id":"https://openalex.org/S164062316","display_name":"International Journal of Information Security","issn_l":"1615-5262","issn":["1615-5262","1615-5270"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310319900","host_organization_name":"Springer Science+Business Media","host_organization_lineage":["https://openalex.org/P4310319900","https://openalex.org/P4310319965"],"host_organization_lineage_names":["Springer Science+Business Media","Springer Nature"],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"International Journal of Information Security","raw_type":"journal-article"},"type":"article","indexed_in":["crossref"],"open_access":{"is_oa":true,"oa_status":"hybrid","oa_url":"https://link.springer.com/content/pdf/10.1007/s10207-024-00953-6.pdf","any_repository_has_fulltext":true},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5098948816","display_name":"Koffi Anderson Koffi","orcid":"https://orcid.org/0009-0007-0622-9198"},"institutions":[{"id":"https://openalex.org/I155093810","display_name":"University of Idaho","ror":"https://ror.org/03hbp5t65","country_code":"US","type":"education","lineage":["https://openalex.org/I155093810"]}],"countries":["US"],"is_corresponding":true,"raw_author_name":"Koffi Anderson Koffi","raw_affiliation_strings":["University of Idaho, Idaho Falls, ID, USA"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"University of Idaho, Idaho Falls, ID, USA","institution_ids":["https://openalex.org/I155093810"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5086906208","display_name":"Vyron Kampourakis","orcid":"https://orcid.org/0000-0003-4492-5104"},"institutions":[{"id":"https://openalex.org/I204778367","display_name":"Norwegian University of Science and Technology","ror":"https://ror.org/05xg72x27","country_code":"NO","type":"education","lineage":["https://openalex.org/I204778367"]}],"countries":["NO"],"is_corresponding":false,"raw_author_name":"Vyron Kampourakis","raw_affiliation_strings":["Department of Information Security and Communication Technology, Norwegian University of Science and Technology, Gj\u00f8vik, 2802, Norway"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Department of Information Security and Communication Technology, Norwegian University of Science and Technology, Gj\u00f8vik, 2802, Norway","institution_ids":["https://openalex.org/I204778367"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5088023851","display_name":"Constantinos Kolias","orcid":"https://orcid.org/0000-0002-3020-291X"},"institutions":[{"id":"https://openalex.org/I155093810","display_name":"University of Idaho","ror":"https://ror.org/03hbp5t65","country_code":"US","type":"education","lineage":["https://openalex.org/I155093810"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Constantinos Kolias","raw_affiliation_strings":["University of Idaho, Idaho Falls, ID, USA"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"University of Idaho, Idaho Falls, ID, USA","institution_ids":["https://openalex.org/I155093810"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5086914097","display_name":"Jia Song","orcid":"https://orcid.org/0009-0009-6954-6822"},"institutions":[{"id":"https://openalex.org/I155093810","display_name":"University of Idaho","ror":"https://ror.org/03hbp5t65","country_code":"US","type":"education","lineage":["https://openalex.org/I155093810"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Jia Song","raw_affiliation_strings":["University of Idaho, Idaho Falls, ID, USA"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"University of Idaho, Idaho Falls, ID, USA","institution_ids":["https://openalex.org/I155093810"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5029832036","display_name":"Robert C. Ivans","orcid":"https://orcid.org/0000-0003-3923-2389"},"institutions":[{"id":"https://openalex.org/I2800102766","display_name":"Idaho National Laboratory","ror":"https://ror.org/00ty2a548","country_code":"US","type":"facility","lineage":["https://openalex.org/I1325736334","https://openalex.org/I1330989302","https://openalex.org/I2800102766","https://openalex.org/I2801818860"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Robert C. Ivans","raw_affiliation_strings":["Idaho National Laboratory, Idaho Falls, ID, USA"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Idaho National Laboratory, Idaho Falls, ID, USA","institution_ids":["https://openalex.org/I2800102766"]}]}],"institutions":[],"countries_distinct_count":2,"institutions_distinct_count":5,"corresponding_author_ids":["https://openalex.org/A5098948816"],"corresponding_institution_ids":["https://openalex.org/I155093810"],"apc_list":{"value":2590,"currency":"EUR","value_usd":3190},"apc_paid":{"value":2590,"currency":"EUR","value_usd":3190},"fwci":3.7407,"has_fulltext":true,"cited_by_count":2,"citation_normalized_percentile":{"value":0.90563013,"is_in_top_1_percent":false,"is_in_top_10_percent":true},"cited_by_percentile_year":{"min":95,"max":96},"biblio":{"volume":"24","issue":"2","first_page":null,"last_page":null},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10743","display_name":"Software Testing and Debugging Techniques","score":1.0,"subfield":{"id":"https://openalex.org/subfields/1712","display_name":"Software"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T10743","display_name":"Software Testing and Debugging Techniques","score":1.0,"subfield":{"id":"https://openalex.org/subfields/1712","display_name":"Software"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":0.9993000030517578,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T12423","display_name":"Software Reliability and Analysis Research","score":0.9979000091552734,"subfield":{"id":"https://openalex.org/subfields/1712","display_name":"Software"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/fuzz-testing","display_name":"Fuzz testing","score":0.8960447311401367},{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.7185388207435608},{"id":"https://openalex.org/keywords/cryptography","display_name":"Cryptography","score":0.5067790150642395},{"id":"https://openalex.org/keywords/computer-security","display_name":"Computer security","score":0.37117695808410645},{"id":"https://openalex.org/keywords/programming-language","display_name":"Programming language","score":0.29824578762054443},{"id":"https://openalex.org/keywords/software","display_name":"Software","score":0.09266379475593567}],"concepts":[{"id":"https://openalex.org/C111065885","wikidata":"https://www.wikidata.org/wiki/Q1189053","display_name":"Fuzz testing","level":3,"score":0.8960447311401367},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.7185388207435608},{"id":"https://openalex.org/C178489894","wikidata":"https://www.wikidata.org/wiki/Q8789","display_name":"Cryptography","level":2,"score":0.5067790150642395},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.37117695808410645},{"id":"https://openalex.org/C199360897","wikidata":"https://www.wikidata.org/wiki/Q9143","display_name":"Programming language","level":1,"score":0.29824578762054443},{"id":"https://openalex.org/C2777904410","wikidata":"https://www.wikidata.org/wiki/Q7397","display_name":"Software","level":2,"score":0.09266379475593567}],"mesh":[],"locations_count":2,"locations":[{"id":"doi:10.1007/s10207-024-00953-6","is_oa":true,"landing_page_url":"https://doi.org/10.1007/s10207-024-00953-6","pdf_url":"https://link.springer.com/content/pdf/10.1007/s10207-024-00953-6.pdf","source":{"id":"https://openalex.org/S164062316","display_name":"International Journal of Information Security","issn_l":"1615-5262","issn":["1615-5262","1615-5270"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310319900","host_organization_name":"Springer Science+Business Media","host_organization_lineage":["https://openalex.org/P4310319900","https://openalex.org/P4310319965"],"host_organization_lineage_names":["Springer Science+Business Media","Springer Nature"],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"International Journal of Information Security","raw_type":"journal-article"},{"id":"pmh:oai:osti.gov:2516767","is_oa":true,"landing_page_url":"https://www.osti.gov/biblio/2516767","pdf_url":null,"source":{"id":"https://openalex.org/S4306402487","display_name":"OSTI OAI (U.S. Department of Energy Office of Scientific and Technical Information)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I139351228","host_organization_name":"Office of Scientific and Technical Information","host_organization_lineage":["https://openalex.org/I139351228"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":null}],"best_oa_location":{"id":"doi:10.1007/s10207-024-00953-6","is_oa":true,"landing_page_url":"https://doi.org/10.1007/s10207-024-00953-6","pdf_url":"https://link.springer.com/content/pdf/10.1007/s10207-024-00953-6.pdf","source":{"id":"https://openalex.org/S164062316","display_name":"International Journal of Information Security","issn_l":"1615-5262","issn":["1615-5262","1615-5270"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310319900","host_organization_name":"Springer Science+Business Media","host_organization_lineage":["https://openalex.org/P4310319900","https://openalex.org/P4310319965"],"host_organization_lineage_names":["Springer Science+Business Media","Springer Nature"],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"International Journal of Information Security","raw_type":"journal-article"},"sustainable_development_goals":[],"awards":[{"id":"https://openalex.org/G2402323868","display_name":null,"funder_award_id":"DE-AC07-05ID14517","funder_id":"https://openalex.org/F4320306084","funder_display_name":"U.S. Department of Energy"},{"id":"https://openalex.org/G3584740094","display_name":null,"funder_award_id":"DE-AC07-05ID14517","funder_id":"https://openalex.org/F4320337547","funder_display_name":"Laboratory Directed Research and Development"},{"id":"https://openalex.org/G4072255364","display_name":null,"funder_award_id":"-AC07-05ID14517","funder_id":"https://openalex.org/F4320306084","funder_display_name":"U.S. Department of Energy"},{"id":"https://openalex.org/G7108482798","display_name":null,"funder_award_id":"AC07-05ID14517","funder_id":"https://openalex.org/F4320306084","funder_display_name":"U.S. Department of Energy"}],"funders":[{"id":"https://openalex.org/F4320306084","display_name":"U.S. Department of Energy","ror":"https://ror.org/01bj3aw27"},{"id":"https://openalex.org/F4320333921","display_name":"Idaho Operations Office, U.S. Department of Energy","ror":null},{"id":"https://openalex.org/F4320337547","display_name":"Laboratory Directed Research and Development","ror":"https://ror.org/01e41cf67"}],"has_content":{"grobid_xml":true,"pdf":true},"content_urls":{"pdf":"https://content.openalex.org/works/W4407568369.pdf","grobid_xml":"https://content.openalex.org/works/W4407568369.grobid-xml"},"referenced_works_count":33,"referenced_works":["https://openalex.org/W116894366","https://openalex.org/W1480909796","https://openalex.org/W1988869590","https://openalex.org/W2128985333","https://openalex.org/W2150990339","https://openalex.org/W2514974017","https://openalex.org/W2574017551","https://openalex.org/W2743785204","https://openalex.org/W2766540688","https://openalex.org/W2766898821","https://openalex.org/W2807659734","https://openalex.org/W2891085887","https://openalex.org/W2963723316","https://openalex.org/W2963742047","https://openalex.org/W2969597118","https://openalex.org/W2984839971","https://openalex.org/W2988200900","https://openalex.org/W3000246040","https://openalex.org/W3008477014","https://openalex.org/W3014235741","https://openalex.org/W3019415692","https://openalex.org/W3046946156","https://openalex.org/W3048340936","https://openalex.org/W3127221082","https://openalex.org/W3172606155","https://openalex.org/W3213337076","https://openalex.org/W4226241875","https://openalex.org/W4236799059","https://openalex.org/W4289038676","https://openalex.org/W4306916504","https://openalex.org/W4312966291","https://openalex.org/W4384154455","https://openalex.org/W4388857979"],"related_works":["https://openalex.org/W4391375266","https://openalex.org/W2899084033","https://openalex.org/W2748952813","https://openalex.org/W2511770387","https://openalex.org/W3120811337","https://openalex.org/W2766647240","https://openalex.org/W4385301282","https://openalex.org/W2990186179","https://openalex.org/W2060145807","https://openalex.org/W4248806346"],"abstract_inverted_index":{"Abstract":[0],"Fuzzing":[1],"is":[2,39],"an":[3],"automated":[4],"process":[5,87],"for":[6,24,91,97,205,292,314,340,393],"discovering":[7],"inputs":[8,114],"in":[9,156,199,239],"a":[10,21,76,102,138,152,214],"program":[11,122,186],"that":[12,40,142,161,181,225,261],"may":[13,125],"trigger":[14,120],"unexpected":[15],"behavior.":[16],"Today,":[17],"fuzzing":[18,57,68,92,147,245],"has":[19],"become":[20],"standard":[22,244],"practice":[23],"the":[25,33,41,44,63,86,106,110,149,157,169,192,195,200,203,206,233,236,241,249,264,267,347,351,394],"discovery":[26],"of":[27,43,47,79,88,105,112,159,168,194,202,216,235,243,266,353],"bugs":[28],"and":[29,164],"security":[30],"vulnerabilities.":[31],"However,":[32,85],"main":[34],"issue":[35],"with":[36,222,350],"such":[37,247],"practices":[38],"exploration":[42],"input":[45,81],"space":[46],"programs":[48,116,221],"can":[49,162,258],"often":[50,94,117],"be":[51],"prohibitively":[52],"expensive.":[53],"Therefore,":[54],"several":[55],"alternative":[56],"strategies":[58],"have":[59],"been":[60],"introduced":[61],"during":[62],"last":[64],"few":[65],"years.":[66],"Some":[67],"techniques":[69],"rely":[70],"on":[71,213,391],"human":[72,150],"expertise":[73],"to":[74,115,178,184,282,304,328,369],"provide":[75],"plausible":[77],"set":[78,215],"initial":[80],"examples,":[82],"namely,":[83],"seeds.":[84,208,345],"handcrafting":[89],"seeds":[90,160,180,260,383],"purposes":[93],"becomes":[95],"strenuous":[96],"humans":[98],"as":[99,248],"it":[100],"requires":[101],"deeper":[103],"understanding":[104],"Program-Under-Test":[107],"(PUT).":[108],"Also,":[109],"use":[111],"known":[113],"does":[118],"not":[119,126],"vulnerable":[121,129],"behavior":[123],"or":[124],"reach":[127],"potentially":[128],"code":[130],"locations.":[131,187],"To":[132],"address":[133],"those":[134],"issues,":[135],"we":[136],"propose":[137],"seed":[139,395],"generation":[140,396],"framework":[141,173,190],"enables":[143,191],"Human-In-The-Loop":[144],"(HITL)":[145],"directed":[146],"where":[148],"assumes":[151],"more":[153],"active":[154],"role":[155],"creation":[158],"penetrate":[163],"assess":[165],"desired":[166],"locations":[167],"PUT.":[170],"Our":[171],"proposed":[172,237],"uses":[174],"Symbolic":[175],"Execution":[176],"(SE)":[177],"generate":[179,259],"exercise":[182],"paths":[183,198],"target":[185,354],"Moreover,":[188],"our":[189,211,256],"visualization":[193],"explored":[196],"execution":[197],"binary":[201],"PUT":[204],"generated":[207],"We":[209],"evaluated":[210],"approach":[212,238],"12":[217],"carefully":[218],"designed":[219],"C":[220],"diverse":[223],"characteristics":[224],"mimic":[226],"real-world":[227],"programs.":[228],"The":[229],"experimental":[230],"results":[231],"show":[232],"effectiveness":[234],"improving":[240],"performance":[242,265],"tools":[246],"American":[250],"Fuzzy":[251],"Lop":[252],"(\"Image":[253],"missing\").":[254],"Specifically,":[255],"solution":[257],"substantially":[262],"enhance":[263],"fuzzer,":[268],"achieving":[269],"speedups":[270],"ranging":[271,356],"from":[272,357],"$$1.46\\times":[273],"$$":[274,284,296,306,318,330,359,371],"<mml:math":[275,285,297,307,319,331,360,372],"xmlns:mml=\"http://www.w3.org/1998/Math/MathML\">":[276,286,298,308,320,332,361,373],"<mml:mrow>":[277,287,299,309,321,333,362,374],"<mml:mn>1.46</mml:mn>":[278],"<mml:mo>\u00d7</mml:mo>":[279,289,301,311,325,337,366,378],"</mml:mrow>":[280,290,302,312,326,338,367,379],"</mml:math>":[281,291,303,313,327,339,368,380],"$$68.53\\times":[283],"<mml:mn>68.53</mml:mn>":[288],"branch":[293,315,341],"conditions,":[294],"$$1.39\\times":[295],"<mml:mn>1.39</mml:mn>":[300],"$$254.62\\times":[305],"<mml:mn>254.62</mml:mn>":[310],"depths,":[316],"$$14,879.59\\times":[317],"<mml:mn>14</mml:mn>":[322],"<mml:mo>,</mml:mo>":[323,335,364,376],"<mml:mn>879.59</mml:mn>":[324],"$$30,295.88\\times":[329],"<mml:mn>30</mml:mn>":[334],"<mml:mn>295.88</mml:mn>":[336],"widths":[342],"over":[343,381],"traditional":[344,382],"Additionally,":[346],"speedup":[348],"increases":[349],"number":[352],"function":[355],"$$12,260\\times":[358],"<mml:mn>12</mml:mn>":[363],"<mml:mn>260</mml:mn>":[365],"$$22,856.07\\times":[370],"<mml:mn>22</mml:mn>":[375],"<mml:mn>856.07</mml:mn>":[377],"while":[384],"only":[385],"requiring":[386],"less":[387],"than":[388],"15":[389],"seconds":[390],"average":[392],"step.":[397]},"counts_by_year":[{"year":2025,"cited_by_count":2}],"updated_date":"2026-05-23T08:51:43.019350","created_date":"2025-10-10T00:00:00"}