{"id":"https://openalex.org/W3006130050","doi":"https://doi.org/10.1109/access.2020.2973043","title":"FIRMCORN: Vulnerability-Oriented Fuzzing of IoT Firmware via Optimized Virtual Execution","display_name":"FIRMCORN: Vulnerability-Oriented Fuzzing of IoT Firmware via Optimized Virtual Execution","publication_year":2020,"publication_date":"2020-01-01","ids":{"openalex":"https://openalex.org/W3006130050","doi":"https://doi.org/10.1109/access.2020.2973043","mag":"3006130050"},"language":"en","primary_location":{"id":"doi:10.1109/access.2020.2973043","is_oa":true,"landing_page_url":"https://doi.org/10.1109/access.2020.2973043","pdf_url":"https://ieeexplore.ieee.org/ielx7/6287639/8948470/08990098.pdf","source":{"id":"https://openalex.org/S2485537415","display_name":"IEEE Access","issn_l":"2169-3536","issn":["2169-3536"],"is_oa":true,"is_in_doaj":true,"is_core":true,"host_organization":"https://openalex.org/P4310319808","host_organization_name":"Institute of Electrical and Electronics Engineers","host_organization_lineage":["https://openalex.org/P4310319808"],"host_organization_lineage_names":["Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Access","raw_type":"journal-article"},"type":"article","indexed_in":["crossref","doaj"],"open_access":{"is_oa":true,"oa_status":"gold","oa_url":"https://ieeexplore.ieee.org/ielx7/6287639/8948470/08990098.pdf","any_repository_has_fulltext":true},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5001636567","display_name":"Zhijie Gui","orcid":"https://orcid.org/0000-0002-1247-7792"},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Zhijie Gui","raw_affiliation_strings":["State Key Laboratory of Mathematical Engineering and Advanced Computing, Zhengzhou, China"],"raw_orcid":"https://orcid.org/0000-0002-1247-7792","affiliations":[{"raw_affiliation_string":"State Key Laboratory of Mathematical Engineering and Advanced Computing, Zhengzhou, China","institution_ids":[]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5103078504","display_name":"Hui Shu","orcid":"https://orcid.org/0000-0002-2797-1355"},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Hui Shu","raw_affiliation_strings":["State Key Laboratory of Mathematical Engineering and Advanced Computing, Zhengzhou, China"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"State Key Laboratory of Mathematical Engineering and Advanced Computing, Zhengzhou, China","institution_ids":[]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5103088653","display_name":"Fei Kang","orcid":"https://orcid.org/0000-0003-2545-4079"},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Fei Kang","raw_affiliation_strings":["State Key Laboratory of Mathematical Engineering and Advanced Computing, Zhengzhou, China"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"State Key Laboratory of Mathematical Engineering and Advanced Computing, Zhengzhou, China","institution_ids":[]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5025092456","display_name":"Xiaobing Xiong","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Xiaobing Xiong","raw_affiliation_strings":["State Key Laboratory of Mathematical Engineering and Advanced Computing, Zhengzhou, China"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"State Key Laboratory of Mathematical Engineering and Advanced Computing, Zhengzhou, China","institution_ids":[]}]}],"institutions":[],"countries_distinct_count":0,"institutions_distinct_count":0,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":{"value":1850,"currency":"USD","value_usd":1850},"apc_paid":{"value":1850,"currency":"USD","value_usd":1850},"fwci":3.5635,"has_fulltext":true,"cited_by_count":42,"citation_normalized_percentile":{"value":0.93534483,"is_in_top_1_percent":false,"is_in_top_10_percent":true},"cited_by_percentile_year":{"min":94,"max":99},"biblio":{"volume":"8","issue":null,"first_page":"29826","last_page":"29841"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":0.9990000128746033,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":0.9990000128746033,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11424","display_name":"Security and Verification in Computing","score":0.9973000288009644,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":0.9966999888420105,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/fuzz-testing","display_name":"Fuzz testing","score":0.9851806163787842},{"id":"https://openalex.org/keywords/firmware","display_name":"Firmware","score":0.9332678318023682},{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.8482957482337952},{"id":"https://openalex.org/keywords/emulation","display_name":"Emulation","score":0.8240852355957031},{"id":"https://openalex.org/keywords/vulnerability","display_name":"Vulnerability (computing)","score":0.6124016046524048},{"id":"https://openalex.org/keywords/embedded-system","display_name":"Embedded system","score":0.53311687707901},{"id":"https://openalex.org/keywords/virtual-machine","display_name":"Virtual machine","score":0.45272281765937805},{"id":"https://openalex.org/keywords/process","display_name":"Process (computing)","score":0.43098747730255127},{"id":"https://openalex.org/keywords/throughput","display_name":"Throughput","score":0.41393470764160156},{"id":"https://openalex.org/keywords/operating-system","display_name":"Operating system","score":0.4100688397884369},{"id":"https://openalex.org/keywords/software","display_name":"Software","score":0.36180463433265686},{"id":"https://openalex.org/keywords/computer-security","display_name":"Computer security","score":0.2624754309654236},{"id":"https://openalex.org/keywords/wireless","display_name":"Wireless","score":0.15848547220230103}],"concepts":[{"id":"https://openalex.org/C111065885","wikidata":"https://www.wikidata.org/wiki/Q1189053","display_name":"Fuzz testing","level":3,"score":0.9851806163787842},{"id":"https://openalex.org/C67212190","wikidata":"https://www.wikidata.org/wiki/Q104851","display_name":"Firmware","level":2,"score":0.9332678318023682},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.8482957482337952},{"id":"https://openalex.org/C149810388","wikidata":"https://www.wikidata.org/wiki/Q5374873","display_name":"Emulation","level":2,"score":0.8240852355957031},{"id":"https://openalex.org/C95713431","wikidata":"https://www.wikidata.org/wiki/Q631425","display_name":"Vulnerability (computing)","level":2,"score":0.6124016046524048},{"id":"https://openalex.org/C149635348","wikidata":"https://www.wikidata.org/wiki/Q193040","display_name":"Embedded system","level":1,"score":0.53311687707901},{"id":"https://openalex.org/C25344961","wikidata":"https://www.wikidata.org/wiki/Q192726","display_name":"Virtual machine","level":2,"score":0.45272281765937805},{"id":"https://openalex.org/C98045186","wikidata":"https://www.wikidata.org/wiki/Q205663","display_name":"Process (computing)","level":2,"score":0.43098747730255127},{"id":"https://openalex.org/C157764524","wikidata":"https://www.wikidata.org/wiki/Q1383412","display_name":"Throughput","level":3,"score":0.41393470764160156},{"id":"https://openalex.org/C111919701","wikidata":"https://www.wikidata.org/wiki/Q9135","display_name":"Operating system","level":1,"score":0.4100688397884369},{"id":"https://openalex.org/C2777904410","wikidata":"https://www.wikidata.org/wiki/Q7397","display_name":"Software","level":2,"score":0.36180463433265686},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.2624754309654236},{"id":"https://openalex.org/C555944384","wikidata":"https://www.wikidata.org/wiki/Q249","display_name":"Wireless","level":2,"score":0.15848547220230103},{"id":"https://openalex.org/C50522688","wikidata":"https://www.wikidata.org/wiki/Q189833","display_name":"Economic growth","level":1,"score":0.0},{"id":"https://openalex.org/C162324750","wikidata":"https://www.wikidata.org/wiki/Q8134","display_name":"Economics","level":0,"score":0.0}],"mesh":[],"locations_count":2,"locations":[{"id":"doi:10.1109/access.2020.2973043","is_oa":true,"landing_page_url":"https://doi.org/10.1109/access.2020.2973043","pdf_url":"https://ieeexplore.ieee.org/ielx7/6287639/8948470/08990098.pdf","source":{"id":"https://openalex.org/S2485537415","display_name":"IEEE Access","issn_l":"2169-3536","issn":["2169-3536"],"is_oa":true,"is_in_doaj":true,"is_core":true,"host_organization":"https://openalex.org/P4310319808","host_organization_name":"Institute of Electrical and Electronics Engineers","host_organization_lineage":["https://openalex.org/P4310319808"],"host_organization_lineage_names":["Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Access","raw_type":"journal-article"},{"id":"pmh:oai:doaj.org/article:f20f8685644e49b2a7853bce90648417","is_oa":true,"landing_page_url":"https://doaj.org/article/f20f8685644e49b2a7853bce90648417","pdf_url":null,"source":{"id":"https://openalex.org/S4306401280","display_name":"DOAJ (DOAJ: Directory of Open Access Journals)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":null,"host_organization_name":null,"host_organization_lineage":[],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by-sa","license_id":"https://openalex.org/licenses/cc-by-sa","version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":"IEEE Access, Vol 8, Pp 29826-29841 (2020)","raw_type":"article"}],"best_oa_location":{"id":"doi:10.1109/access.2020.2973043","is_oa":true,"landing_page_url":"https://doi.org/10.1109/access.2020.2973043","pdf_url":"https://ieeexplore.ieee.org/ielx7/6287639/8948470/08990098.pdf","source":{"id":"https://openalex.org/S2485537415","display_name":"IEEE Access","issn_l":"2169-3536","issn":["2169-3536"],"is_oa":true,"is_in_doaj":true,"is_core":true,"host_organization":"https://openalex.org/P4310319808","host_organization_name":"Institute of Electrical and Electronics Engineers","host_organization_lineage":["https://openalex.org/P4310319808"],"host_organization_lineage_names":["Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Access","raw_type":"journal-article"},"sustainable_development_goals":[],"awards":[],"funders":[],"has_content":{"grobid_xml":true,"pdf":true},"content_urls":{"pdf":"https://content.openalex.org/works/W3006130050.pdf","grobid_xml":"https://content.openalex.org/works/W3006130050.grobid-xml"},"referenced_works_count":37,"referenced_works":["https://openalex.org/W1469795891","https://openalex.org/W1522250664","https://openalex.org/W1572540473","https://openalex.org/W1694077306","https://openalex.org/W1969338270","https://openalex.org/W1994342242","https://openalex.org/W2042033151","https://openalex.org/W2043118292","https://openalex.org/W2091939272","https://openalex.org/W2119812052","https://openalex.org/W2128128820","https://openalex.org/W2180970301","https://openalex.org/W2532962075","https://openalex.org/W2547621596","https://openalex.org/W2564856904","https://openalex.org/W2576376563","https://openalex.org/W2613534458","https://openalex.org/W2749008552","https://openalex.org/W2775532270","https://openalex.org/W2777430404","https://openalex.org/W2782780792","https://openalex.org/W2791018263","https://openalex.org/W2884769489","https://openalex.org/W2908016018","https://openalex.org/W2910153088","https://openalex.org/W2947506247","https://openalex.org/W2963764936","https://openalex.org/W2965717902","https://openalex.org/W2967100751","https://openalex.org/W3105926539","https://openalex.org/W3160978791","https://openalex.org/W4242926647","https://openalex.org/W6631155369","https://openalex.org/W6637594488","https://openalex.org/W6757825082","https://openalex.org/W6766374046","https://openalex.org/W6766830175"],"related_works":["https://openalex.org/W2511770387","https://openalex.org/W3120811337","https://openalex.org/W3111743984","https://openalex.org/W3118666763","https://openalex.org/W4378976979","https://openalex.org/W4312439535","https://openalex.org/W3207216830","https://openalex.org/W4362015489","https://openalex.org/W3037057426","https://openalex.org/W4378373752"],"abstract_inverted_index":{"The":[0],"security":[1],"situation":[2],"of":[3,6,16,41,51,63,72,77,89,106,122,128],"the":[4,29,38,82,86,104,119,126,155,182],"Internet":[5],"Things":[7],"(IoT)":[8],"is":[9,115,135],"particularly":[10],"severe,":[11],"and":[12,69,85,97,158],"a":[13,111,177],"large":[14],"number":[15],"IoT":[17,34,52,129,138,185],"devices":[18],"are":[19],"prone":[20],"to":[21,75,92,117,125,137,171],"vulnerabilities.":[22],"In":[23],"this":[24,132],"study,":[25],"we":[26,80],"present":[27],"FIRMCORN,":[28,110],"first":[30],"vulnerability-oriented":[31,133],"fuzzer":[32],"for":[33,167],"firmware.":[35,140],"Based":[36],"on":[37,47,176],"novel":[39],"technology":[40],"optimized":[42,146],"virtual":[43,90,147,163],"execution,":[44],"FIRMCORN":[45,151,165,189],"focuses":[46],"three":[48],"typical":[49],"problems":[50],"firmware":[53,186],"fuzzing:":[54],"(1)":[55],"high":[56],"throughput":[57],"required":[58],"by":[59,150],"fuzzing,":[60],"(2)":[61],"inaccuracy":[62],"emulation":[64,73],"compared":[65,160,180],"with":[66,109,161,181],"real":[67],"devices,":[68],"(3)":[70],"instability":[71],"due":[74],"lack":[76],"hardware.":[78],"Here,":[79],"optimize":[81],"initial":[83],"environment":[84],"execution":[87,91,148],"process":[88],"achieve":[93],"faster,":[94],"more":[95,98,191],"accurate,":[96],"stable":[99],"fuzz":[100],"testing.":[101],"To":[102],"improve":[103,154],"efficiency":[105],"vulnerability":[107],"mining":[108],"vulnerable-code":[112],"search":[113],"algorithm":[114],"designed":[116],"obtain":[118],"entry":[120],"points":[121],"fuzzing":[123,134,187],"according":[124],"characteristics":[127],"firmware;":[130],"further,":[131],"applied":[136],"device":[139],"Our":[141],"evaluation":[142],"results":[143],"show":[144],"that":[145],"used":[149],"can":[152,190],"significantly":[153],"throughput,":[156],"accuracy,":[157],"stability":[159],"conventional":[162],"execution.":[164],"runs":[166],"only":[168],"2":[169],"hours":[170],"mine":[172,193],"two":[173],"0-day":[174],"vulnerabilities":[175,194],"machine.":[178],"Thus,":[179],"current":[183],"state-of-the-art":[184],"framework,":[188],"effectively":[192],"in":[195],"real-world":[196],"devices.":[197]},"counts_by_year":[{"year":2025,"cited_by_count":8},{"year":2024,"cited_by_count":10},{"year":2023,"cited_by_count":10},{"year":2022,"cited_by_count":8},{"year":2021,"cited_by_count":4},{"year":2020,"cited_by_count":2}],"updated_date":"2025-11-06T03:46:38.306776","created_date":"2025-10-10T00:00:00"}