{"id":"https://openalex.org/W7131292371","doi":"https://doi.org/10.1109/acsac67867.2025.00025","title":"TeTRIS: General-purpose Fuzzing for Translation Bugs in Source-to-Source Code Transpilers","display_name":"TeTRIS: General-purpose Fuzzing for Translation Bugs in Source-to-Source Code Transpilers","publication_year":2025,"publication_date":"2025-12-08","ids":{"openalex":"https://openalex.org/W7131292371","doi":"https://doi.org/10.1109/acsac67867.2025.00025"},"language":null,"primary_location":{"id":"doi:10.1109/acsac67867.2025.00025","is_oa":false,"landing_page_url":"https://doi.org/10.1109/acsac67867.2025.00025","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"2025 IEEE Annual Computer Security Applications Conference (ACSAC)","raw_type":"proceedings-article"},"type":"conference-paper","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5019412193","display_name":"Yeaseen Arafat","orcid":null},"institutions":[{"id":"https://openalex.org/I223532165","display_name":"University of Utah","ror":"https://ror.org/03r0ha626","country_code":"US","type":"education","lineage":["https://openalex.org/I223532165"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Yeaseen Arafat","raw_affiliation_strings":["University of Utah"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"University of Utah","institution_ids":["https://openalex.org/I223532165"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5088758050","display_name":"Stefan Nagy","orcid":"https://orcid.org/0000-0003-0220-1706"},"institutions":[{"id":"https://openalex.org/I223532165","display_name":"University of Utah","ror":"https://ror.org/03r0ha626","country_code":"US","type":"education","lineage":["https://openalex.org/I223532165"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Stefan Nagy","raw_affiliation_strings":["University of Utah"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"University of Utah","institution_ids":["https://openalex.org/I223532165"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":1,"corresponding_author_ids":[],"corresponding_institution_ids":["https://openalex.org/I223532165"],"apc_list":null,"apc_paid":null,"fwci":0.0,"has_fulltext":false,"cited_by_count":0,"citation_normalized_percentile":{"value":0.64343291,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":null,"biblio":{"volume":null,"issue":null,"first_page":"123","last_page":"136"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10743","display_name":"Software Testing and Debugging Techniques","score":0.839900016784668,"subfield":{"id":"https://openalex.org/subfields/1712","display_name":"Software"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T10743","display_name":"Software Testing and Debugging Techniques","score":0.839900016784668,"subfield":{"id":"https://openalex.org/subfields/1712","display_name":"Software"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10054","display_name":"Parallel Computing and Optimization Techniques","score":0.03500000014901161,"subfield":{"id":"https://openalex.org/subfields/1708","display_name":"Hardware and Architecture"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10126","display_name":"Logic, programming, and type systems","score":0.023600000888109207,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/fuzz-testing","display_name":"Fuzz testing","score":0.9307000041007996},{"id":"https://openalex.org/keywords/compiler","display_name":"Compiler","score":0.6297000050544739},{"id":"https://openalex.org/keywords/correctness","display_name":"Correctness","score":0.6176000237464905},{"id":"https://openalex.org/keywords/vetting","display_name":"Vetting","score":0.4350000023841858},{"id":"https://openalex.org/keywords/code","display_name":"Code (set theory)","score":0.399399995803833},{"id":"https://openalex.org/keywords/set","display_name":"Set (abstract data type)","score":0.3504999876022339},{"id":"https://openalex.org/keywords/source-code","display_name":"Source code","score":0.3483999967575073},{"id":"https://openalex.org/keywords/optimizing-compiler","display_name":"Optimizing compiler","score":0.3476000130176544},{"id":"https://openalex.org/keywords/program-analysis","display_name":"Program analysis","score":0.3440000116825104}],"concepts":[{"id":"https://openalex.org/C111065885","wikidata":"https://www.wikidata.org/wiki/Q1189053","display_name":"Fuzz testing","level":3,"score":0.9307000041007996},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.9093000292778015},{"id":"https://openalex.org/C199360897","wikidata":"https://www.wikidata.org/wiki/Q9143","display_name":"Programming language","level":1,"score":0.7856000065803528},{"id":"https://openalex.org/C169590947","wikidata":"https://www.wikidata.org/wiki/Q47506","display_name":"Compiler","level":2,"score":0.6297000050544739},{"id":"https://openalex.org/C55439883","wikidata":"https://www.wikidata.org/wiki/Q360812","display_name":"Correctness","level":2,"score":0.6176000237464905},{"id":"https://openalex.org/C2777230681","wikidata":"https://www.wikidata.org/wiki/Q7923820","display_name":"Vetting","level":2,"score":0.4350000023841858},{"id":"https://openalex.org/C2776760102","wikidata":"https://www.wikidata.org/wiki/Q5139990","display_name":"Code (set theory)","level":3,"score":0.399399995803833},{"id":"https://openalex.org/C177264268","wikidata":"https://www.wikidata.org/wiki/Q1514741","display_name":"Set (abstract data type)","level":2,"score":0.3504999876022339},{"id":"https://openalex.org/C43126263","wikidata":"https://www.wikidata.org/wiki/Q128751","display_name":"Source code","level":2,"score":0.3483999967575073},{"id":"https://openalex.org/C190902152","wikidata":"https://www.wikidata.org/wiki/Q1325106","display_name":"Optimizing compiler","level":3,"score":0.3476000130176544},{"id":"https://openalex.org/C98183937","wikidata":"https://www.wikidata.org/wiki/Q2112188","display_name":"Program analysis","level":2,"score":0.3440000116825104},{"id":"https://openalex.org/C2777561058","wikidata":"https://www.wikidata.org/wiki/Q2652119","display_name":"Program comprehension","level":4,"score":0.33629998564720154},{"id":"https://openalex.org/C115903868","wikidata":"https://www.wikidata.org/wiki/Q80993","display_name":"Software engineering","level":1,"score":0.3352999985218048},{"id":"https://openalex.org/C186644900","wikidata":"https://www.wikidata.org/wiki/Q194152","display_name":"Parsing","level":2,"score":0.33469998836517334},{"id":"https://openalex.org/C2777212361","wikidata":"https://www.wikidata.org/wiki/Q5127848","display_name":"Class (philosophy)","level":2,"score":0.3237000107765198},{"id":"https://openalex.org/C133162039","wikidata":"https://www.wikidata.org/wiki/Q1061077","display_name":"Code generation","level":3,"score":0.30790001153945923},{"id":"https://openalex.org/C2777904410","wikidata":"https://www.wikidata.org/wiki/Q7397","display_name":"Software","level":2,"score":0.30090001225471497},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.28519999980926514},{"id":"https://openalex.org/C2780598303","wikidata":"https://www.wikidata.org/wiki/Q65921492","display_name":"Flexibility (engineering)","level":2,"score":0.2849000096321106},{"id":"https://openalex.org/C113843644","wikidata":"https://www.wikidata.org/wiki/Q901882","display_name":"Interface (matter)","level":4,"score":0.2768999934196472},{"id":"https://openalex.org/C154526789","wikidata":"https://www.wikidata.org/wiki/Q157965","display_name":"Object code","level":4,"score":0.2734000086784363},{"id":"https://openalex.org/C97686452","wikidata":"https://www.wikidata.org/wiki/Q7604153","display_name":"Static analysis","level":2,"score":0.26829999685287476},{"id":"https://openalex.org/C184337299","wikidata":"https://www.wikidata.org/wiki/Q1437428","display_name":"Semantics (computer science)","level":2,"score":0.25589999556541443},{"id":"https://openalex.org/C115168132","wikidata":"https://www.wikidata.org/wiki/Q55813","display_name":"Machine code","level":3,"score":0.2526000142097473},{"id":"https://openalex.org/C26022165","wikidata":"https://www.wikidata.org/wiki/Q8091","display_name":"Grammar","level":2,"score":0.25049999356269836}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1109/acsac67867.2025.00025","is_oa":false,"landing_page_url":"https://doi.org/10.1109/acsac67867.2025.00025","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"2025 IEEE Annual Computer Security Applications Conference (ACSAC)","raw_type":"proceedings-article"}],"best_oa_location":null,"sustainable_development_goals":[],"awards":[{"id":"https://openalex.org/G6769771232","display_name":"CICI: TCR: Practical, Systematic Fuzz Testing for Securing Scientific Software","funder_award_id":"2419798","funder_id":"https://openalex.org/F4320306076","funder_display_name":"National Science Foundation"},{"id":"https://openalex.org/G8857169945","display_name":null,"funder_award_id":"FA8750-24-2-0002,GR105409-SUB00001384","funder_id":"https://openalex.org/F4320332180","funder_display_name":"Defense Advanced Research Projects Agency"}],"funders":[{"id":"https://openalex.org/F4320306076","display_name":"National Science Foundation","ror":"https://ror.org/021nxhr62"},{"id":"https://openalex.org/F4320332180","display_name":"Defense Advanced Research Projects Agency","ror":"https://ror.org/02caytj08"}],"has_content":{"pdf":false,"grobid_xml":false},"content_urls":null,"referenced_works_count":26,"referenced_works":["https://openalex.org/W1998284301","https://openalex.org/W2001602611","https://openalex.org/W2088705091","https://openalex.org/W2156487548","https://openalex.org/W2584230735","https://openalex.org/W2763314947","https://openalex.org/W2784262852","https://openalex.org/W2806285345","https://openalex.org/W2964241064","https://openalex.org/W3043641306","https://openalex.org/W3097728505","https://openalex.org/W3107362213","https://openalex.org/W3136690412","https://openalex.org/W3184007005","https://openalex.org/W3205049031","https://openalex.org/W4220845069","https://openalex.org/W4238083723","https://openalex.org/W4246166885","https://openalex.org/W4284687350","https://openalex.org/W4296981870","https://openalex.org/W4362676373","https://openalex.org/W4384154483","https://openalex.org/W4384154578","https://openalex.org/W4384345830","https://openalex.org/W4388843416","https://openalex.org/W4394938989"],"related_works":[],"abstract_inverted_index":{"Amid":[0],"the":[1,72,116,137,142,165,183,239,254,262],"rise":[2],"of":[3,21,74,119,139,144,167,185,204,207,257,268],"heterogeneous":[4],"computing":[5],"and":[6,10,42,53,124,192,235,248],"concerns":[7],"over":[8],"systems":[9],"application":[11],"security,":[12],"developers":[13],"are":[14],"increasingly":[15],"embracing":[16],"transpilers:":[17],"a":[18,88,133,152,175],"growing":[19],"class":[20],"tools":[22,94],"for":[23,155,178,232],"converting":[24],"code":[25,99,158,180,251,264],"from":[26],"one":[27],"programming":[28],"language":[29,199,246],"into":[30,174],"another.":[31],"As":[32],"languages":[33,120],"differ":[34],"greatly":[35],"in":[36,47,275],"constructs,":[37],"syntactic":[38,191],"sugar,":[39],"security":[40],"mitigations,":[41],"more,":[43],"transpilers":[44,231],"face":[45],"difficulties":[46],"faithfully":[48],"translating":[49],"software":[50],"between":[51],"source":[52],"target":[54],"languages\u2014sometimes":[55],"causing":[56],"outright":[57],"failures,":[58],"or":[59,209],"worse,":[60],"subtle-yet-incorrect":[61],"execution":[62],"behavior.":[63],"Proactively":[64],"testing":[65,156],"transpilers'":[66,104,129],"correctness":[67,130],"is":[68,238],"thus":[69,131],"critical":[70],"to":[71,102,242],"success":[73],"code-translation-oriented":[75],"development":[76],"tasks,":[77],"but":[78],"unfortunately,":[79],"no":[80],"effective":[81],"techniques":[82],"currently":[83],"exist.":[84],"Although":[85],"fuzz-testing":[86],"appears":[87],"natural":[89],"fit,":[90],"current":[91],"general-purpose":[92,140,153,168],"fuzzing":[93,134,203],"mostly":[95],"generate":[96],"invalid,":[97],"junk":[98],"that":[100,214],"fails":[101],"engage":[103],"core":[105],"translation":[106,219,265],"logic;":[107],"while":[108],"dedicated":[109,145],"compiler":[110,146,186],"fuzzers":[111,187,227],"cannot":[112],"keep":[113],"pace":[114],"with":[115,182],"ever-expanding":[117],"set":[118],"targeted":[121],"by":[122,188],"existing":[123],"emergent":[125],"transpilers.":[126,159,258],"Thoroughly":[127],"vetting":[128,276],"demands":[132],"approach":[135],"combining":[136],"reach":[138],"fuzzing\u2014with":[141],"precision":[143,184],"fuzzers.":[147],"This":[148],"paper":[149],"presents":[150],"TeTRIS:":[151],"fuzzer":[154],"source-to-source":[157],"At":[160],"its":[161,217,273],"core,":[162],"TeTRIS":[163,201,237,260],"bridges":[164],"flexibility":[166],"fuzzing,":[169],"abstracting":[170],"away":[171],"language-level":[172],"differences":[173],"unified":[176],"interface":[177],"fine-grained":[179],"mutations,":[181],"rigorously":[189],"enforcing":[190],"semantic":[193],"correctness.":[194],"Relying":[195],"solely":[196],"on":[197],"minimal":[198],"specifications,":[200],"supports":[202],"any":[205],"transpiler\u2014irrespective":[206],"input":[208],"output":[210],"language\u2014producing":[211],"high-quality":[212],"programs":[213],"extensively":[215],"probe":[216],"underlying":[218],"logic.":[220],"In":[221],"an":[222],"evaluation":[223],"against":[224],"four":[225],"state-of-the-art":[226],"across":[228],"seven":[229],"popular":[230],"C,":[233],"Go,":[234],"Haxe,":[236],"only":[240],"solution":[241],"uphold":[243],"both":[244],"high":[245,249],"validity":[247],"transpiler":[250,279],"coverage\u2014whilst":[252],"supporting":[253],"broadest":[255],"range":[256],"Moreover,":[259],"reveals":[261],"most":[263],"bugs\u2014all":[266],"12":[267],"which":[269],"were":[270],"previously":[271],"unknown\u2014underscoring":[272],"effectiveness":[274],"today's":[277],"diverse":[278],"ecosystem.":[280]},"counts_by_year":[],"updated_date":"2026-07-29T14:22:42.915294","created_date":"2026-02-25T00:00:00"}