{"id":"https://openalex.org/W7164122314","doi":"https://doi.org/10.1016/j.infsof.2026.108211","title":"From coverage to causes: Data-centric fuzzing for Javascript engines","display_name":"From coverage to causes: Data-centric fuzzing for Javascript engines","publication_year":2026,"publication_date":"2026-06-10","ids":{"openalex":"https://openalex.org/W7164122314","doi":"https://doi.org/10.1016/j.infsof.2026.108211"},"language":"en","primary_location":{"id":"doi:10.1016/j.infsof.2026.108211","is_oa":true,"landing_page_url":"https://doi.org/10.1016/j.infsof.2026.108211","pdf_url":null,"source":{"id":"https://openalex.org/S205010575","display_name":"Information and Software Technology","issn_l":"0950-5849","issn":["0950-5849","1873-6025"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310320990","host_organization_name":"Elsevier BV","host_organization_lineage":["https://openalex.org/P4310320990"],"host_organization_lineage_names":["Elsevier BV"],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Information and Software Technology","raw_type":"journal-article"},"type":"article","indexed_in":["crossref"],"open_access":{"is_oa":true,"oa_status":"hybrid","oa_url":"https://doi.org/10.1016/j.infsof.2026.108211","any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5138309773","display_name":"Kishan Kumar Ganguly","orcid":"https://orcid.org/0009-0007-4075-0040"},"institutions":[{"id":"https://openalex.org/I137902535","display_name":"North Carolina State University","ror":"https://ror.org/04tj63d06","country_code":"US","type":"education","lineage":["https://openalex.org/I137902535"]}],"countries":["US"],"is_corresponding":true,"raw_author_name":"Kishan Kumar Ganguly","raw_affiliation_strings":["Department of Computer Science, North Carolina State University, Raleigh, NC, USA"],"raw_orcid":"https://orcid.org/0009-0007-4075-0040","affiliations":[{"raw_affiliation_string":"Department of Computer Science, North Carolina State University, Raleigh, NC, USA","institution_ids":["https://openalex.org/I137902535"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5077008083","display_name":"Tim Menzies","orcid":"https://orcid.org/0000-0002-5040-3196"},"institutions":[{"id":"https://openalex.org/I137902535","display_name":"North Carolina State University","ror":"https://ror.org/04tj63d06","country_code":"US","type":"education","lineage":["https://openalex.org/I137902535"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Tim Menzies","raw_affiliation_strings":["Department of Computer Science, North Carolina State University, Raleigh, NC, USA"],"raw_orcid":"https://orcid.org/0000-0002-5040-3196","affiliations":[{"raw_affiliation_string":"Department of Computer Science, North Carolina State University, Raleigh, NC, USA","institution_ids":["https://openalex.org/I137902535"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":2,"corresponding_author_ids":["https://openalex.org/A5138309773"],"corresponding_institution_ids":["https://openalex.org/I137902535"],"apc_list":{"value":3350,"currency":"USD","value_usd":3350},"apc_paid":{"value":3350,"currency":"USD","value_usd":3350},"fwci":0.0,"has_fulltext":false,"cited_by_count":0,"citation_normalized_percentile":{"value":0.86760125,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":null,"biblio":{"volume":"198","issue":null,"first_page":"108211","last_page":"108211"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10743","display_name":"Software Testing and Debugging Techniques","score":0.5271000266075134,"subfield":{"id":"https://openalex.org/subfields/1712","display_name":"Software"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T10743","display_name":"Software Testing and Debugging Techniques","score":0.5271000266075134,"subfield":{"id":"https://openalex.org/subfields/1712","display_name":"Software"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10260","display_name":"Software Engineering Research","score":0.07540000230073929,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T12479","display_name":"Web Application Security Vulnerabilities","score":0.04010000079870224,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/fuzz-testing","display_name":"Fuzz testing","score":0.7437000274658203},{"id":"https://openalex.org/keywords/javascript","display_name":"JavaScript","score":0.47839999198913574},{"id":"https://openalex.org/keywords/key","display_name":"Key (lock)","score":0.25699999928474426},{"id":"https://openalex.org/keywords/frame","display_name":"Frame (networking)","score":0.24719999730587006},{"id":"https://openalex.org/keywords/interchangeability","display_name":"Interchangeability","score":0.21930000185966492}],"concepts":[{"id":"https://openalex.org/C111065885","wikidata":"https://www.wikidata.org/wiki/Q1189053","display_name":"Fuzz testing","level":3,"score":0.7437000274658203},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.6651999950408936},{"id":"https://openalex.org/C544833334","wikidata":"https://www.wikidata.org/wiki/Q2005","display_name":"JavaScript","level":2,"score":0.47839999198913574},{"id":"https://openalex.org/C199360897","wikidata":"https://www.wikidata.org/wiki/Q9143","display_name":"Programming language","level":1,"score":0.35929998755455017},{"id":"https://openalex.org/C77088390","wikidata":"https://www.wikidata.org/wiki/Q8513","display_name":"Database","level":1,"score":0.2754000127315521},{"id":"https://openalex.org/C26517878","wikidata":"https://www.wikidata.org/wiki/Q228039","display_name":"Key (lock)","level":2,"score":0.25699999928474426},{"id":"https://openalex.org/C126042441","wikidata":"https://www.wikidata.org/wiki/Q1324888","display_name":"Frame (networking)","level":2,"score":0.24719999730587006},{"id":"https://openalex.org/C111919701","wikidata":"https://www.wikidata.org/wiki/Q9135","display_name":"Operating system","level":1,"score":0.2353000044822693},{"id":"https://openalex.org/C2779606619","wikidata":"https://www.wikidata.org/wiki/Q17092524","display_name":"Interchangeability","level":2,"score":0.21930000185966492},{"id":"https://openalex.org/C168167062","wikidata":"https://www.wikidata.org/wiki/Q1117970","display_name":"Component (thermodynamics)","level":2,"score":0.2094999998807907}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1016/j.infsof.2026.108211","is_oa":true,"landing_page_url":"https://doi.org/10.1016/j.infsof.2026.108211","pdf_url":null,"source":{"id":"https://openalex.org/S205010575","display_name":"Information and Software Technology","issn_l":"0950-5849","issn":["0950-5849","1873-6025"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310320990","host_organization_name":"Elsevier BV","host_organization_lineage":["https://openalex.org/P4310320990"],"host_organization_lineage_names":["Elsevier BV"],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Information and Software Technology","raw_type":"journal-article"}],"best_oa_location":{"id":"doi:10.1016/j.infsof.2026.108211","is_oa":true,"landing_page_url":"https://doi.org/10.1016/j.infsof.2026.108211","pdf_url":null,"source":{"id":"https://openalex.org/S205010575","display_name":"Information and Software Technology","issn_l":"0950-5849","issn":["0950-5849","1873-6025"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310320990","host_organization_name":"Elsevier BV","host_organization_lineage":["https://openalex.org/P4310320990"],"host_organization_lineage_names":["Elsevier BV"],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Information and Software Technology","raw_type":"journal-article"},"sustainable_development_goals":[],"awards":[],"funders":[],"has_content":{"pdf":false,"grobid_xml":false},"content_urls":null,"referenced_works_count":26,"referenced_works":["https://openalex.org/W1972978214","https://openalex.org/W2065948900","https://openalex.org/W2129660502","https://openalex.org/W2757104921","https://openalex.org/W2806377938","https://openalex.org/W2891235722","https://openalex.org/W2960485560","https://openalex.org/W2979357014","https://openalex.org/W3081792418","https://openalex.org/W3117333366","https://openalex.org/W3154106427","https://openalex.org/W3212134035","https://openalex.org/W3216660278","https://openalex.org/W4210660460","https://openalex.org/W4252684946","https://openalex.org/W4284706927","https://openalex.org/W4308642082","https://openalex.org/W4378591002","https://openalex.org/W4387053534","https://openalex.org/W4388197345","https://openalex.org/W4390977076","https://openalex.org/W4393029443","https://openalex.org/W4394769544","https://openalex.org/W4399567676","https://openalex.org/W4402443144","https://openalex.org/W4405181385"],"related_works":[],"abstract_inverted_index":{"Context:":[0],"Exhaustive":[1],"fuzzing":[2,42],"of":[3,14,160,171],"modern":[4],"JavaScript":[5],"engines":[6],"is":[7,43,175],"infeasible":[8],"due":[9],"to":[10,62,72,86,132,137,195,207],"the":[11,116,172,200],"vast":[12],"number":[13],"program":[15],"states":[16],"and":[17,45,70,92,111,146,153,230,240],"execution":[18],"paths.":[19],"Coverage-guided":[20],"fuzzers":[21],"rely":[22],"on":[23,53],"coverage":[24,38],"as":[25],"a":[26,77,181,187],"proxy":[27],"for":[28,96,165],"progress,":[29],"but":[30],"many":[31],"vulnerability-triggering":[32],"inputs":[33,140,217],"that":[34,81,169,190,218],"do":[35],"not":[36],"increase":[37],"are":[39,47,68,163,242],"discarded.":[40],"Since":[41],"expensive":[44],"crashes":[46],"rare":[48],"in":[49],"mature":[50],"engines,":[51],"relying":[52],"brute-force":[54],"exploration":[55],"wastes":[56],"substantial":[57],"effort.":[58],"Existing":[59],"heuristics":[60],"proposed":[61],"mitigate":[63],"this":[64,184,204,209],"require":[65],"expert":[66],"effort,":[67],"brittle,":[69],"hard":[71],"adapt.":[73],"Objective:":[74],"We":[75],"propose":[76],"data-centric,":[78],"LLM-boosted":[79],"alternative":[80],"learns":[82,191],"from":[83,192,202],"historical":[84,103,193],"vulnerabilities":[85,194],"automatically":[87],"identify":[88,196],"minimal":[89],"static":[90,110,145],"(code)":[91],"dynamic":[93,113,147],"(runtime)":[94],"features":[95,130,148,162],"detecting":[97],"high-risk":[98,139,197],"inputs.":[99],"Method:":[100],"Guided":[101],"by":[102],"V8":[104],"bugs,":[105],"iterative":[106],"prompting":[107],"generated":[108],"115":[109],"49":[112],"features,":[114],"with":[115],"latter":[117],"requiring":[118],"only":[119],"five":[120],"trace":[121],"flags,":[122],"minimizing":[123],"instrumentation":[124],"cost.":[125],"After":[126],"feature":[127],"selection,":[128],"41":[129],"remained":[131],"train":[133],"an":[134],"XGBoost":[135],"model":[136,189],"predict":[138],"during":[141],"fuzzing.":[142],"Results:":[143],"Combining":[144],"yields":[149],"over":[150],"85%":[151],"precision":[152],"under":[154],"1%":[155],"false":[156],"alarm.":[157],"Only":[158],"25%":[159],"these":[161],"needed":[164],"comparable":[166],"performance,":[167],"showing":[168],"most":[170],"search":[173],"space":[174],"irrelevant.":[176],"Conclusion:":[177],"Rather":[178],"than":[179],"proposing":[180],"new":[182],"fuzzer,":[183],"work":[185],"contributes":[186],"guidance":[188],"inputs,":[198],"shifting":[199],"question":[201],"\u201dis":[203],"path":[205],"new?\u201d":[206],"\u201ddoes":[208],"code":[210],"look":[211],"dangerous?\u201d":[212],"By":[213],"retaining":[214],"semantically":[215],"dangerous":[216],"coverage-based":[219],"corpus":[220],"management":[221],"would":[222],"otherwise":[223],"discard,":[224],"our":[225],"method":[226],"supports":[227],"more":[228],"targeted":[229],"reproducible":[231],"vulnerability":[232],"discovery.":[233],"To":[234],"support":[235],"open":[236],"science,":[237],"all":[238],"scripts":[239],"data":[241],"available":[243],"at":[244],"https://github.com/KKGanguly/DataCentricFuzzJS":[245],".":[246]},"counts_by_year":[],"updated_date":"2026-06-19T15:47:20.252518","created_date":"2026-06-11T00:00:00"}