{"id":"https://openalex.org/W7125964901","doi":"https://doi.org/10.1109/ase63991.2025.00098","title":"GUIFuzz++: Unleashing Grey-box Fuzzing on Desktop Graphical User Interfacing Applications","display_name":"GUIFuzz++: Unleashing Grey-box Fuzzing on Desktop Graphical User Interfacing Applications","publication_year":2025,"publication_date":"2025-11-16","ids":{"openalex":"https://openalex.org/W7125964901","doi":"https://doi.org/10.1109/ase63991.2025.00098"},"language":null,"primary_location":{"id":"doi:10.1109/ase63991.2025.00098","is_oa":false,"landing_page_url":"https://doi.org/10.1109/ase63991.2025.00098","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"2025 40th IEEE/ACM International Conference on Automated Software Engineering (ASE)","raw_type":"proceedings-article"},"type":"conference-paper","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5095966867","display_name":"Dillon Otto","orcid":null},"institutions":[{"id":"https://openalex.org/I223532165","display_name":"University of Utah","ror":"https://ror.org/03r0ha626","country_code":"US","type":"education","lineage":["https://openalex.org/I223532165"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Dillon Otto","raw_affiliation_strings":["University of Utah"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"University of Utah","institution_ids":["https://openalex.org/I223532165"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5124141895","display_name":"Tanner Rowlett","orcid":null},"institutions":[{"id":"https://openalex.org/I223532165","display_name":"University of Utah","ror":"https://ror.org/03r0ha626","country_code":"US","type":"education","lineage":["https://openalex.org/I223532165"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Tanner Rowlett","raw_affiliation_strings":["University of Utah"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"University of Utah","institution_ids":["https://openalex.org/I223532165"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5088758050","display_name":"Stefan Nagy","orcid":"https://orcid.org/0000-0003-0220-1706"},"institutions":[{"id":"https://openalex.org/I223532165","display_name":"University of Utah","ror":"https://ror.org/03r0ha626","country_code":"US","type":"education","lineage":["https://openalex.org/I223532165"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Stefan Nagy","raw_affiliation_strings":["University of Utah"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"University of Utah","institution_ids":["https://openalex.org/I223532165"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":1,"corresponding_author_ids":[],"corresponding_institution_ids":["https://openalex.org/I223532165"],"apc_list":null,"apc_paid":null,"fwci":0.0,"has_fulltext":false,"cited_by_count":0,"citation_normalized_percentile":{"value":0.5979137,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":null,"biblio":{"volume":null,"issue":null,"first_page":"1132","last_page":"1142"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10743","display_name":"Software Testing and Debugging Techniques","score":0.883899986743927,"subfield":{"id":"https://openalex.org/subfields/1712","display_name":"Software"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T10743","display_name":"Software Testing and Debugging Techniques","score":0.883899986743927,"subfield":{"id":"https://openalex.org/subfields/1712","display_name":"Software"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T12127","display_name":"Software System Performance and Reliability","score":0.01549999974668026,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11424","display_name":"Security and Verification in Computing","score":0.012199999764561653,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/fuzz-testing","display_name":"Fuzz testing","score":0.7764999866485596},{"id":"https://openalex.org/keywords/graphical-user-interface","display_name":"Graphical user interface","score":0.760699987411499},{"id":"https://openalex.org/keywords/software","display_name":"Software","score":0.5454000234603882},{"id":"https://openalex.org/keywords/graphical-user-interface-testing","display_name":"Graphical user interface testing","score":0.507099986076355},{"id":"https://openalex.org/keywords/interfacing","display_name":"Interfacing","score":0.4684000015258789},{"id":"https://openalex.org/keywords/rendering","display_name":"Rendering (computer graphics)","score":0.4677000045776367},{"id":"https://openalex.org/keywords/user-interface","display_name":"User interface","score":0.46320000290870667},{"id":"https://openalex.org/keywords/suite","display_name":"Suite","score":0.39570000767707825},{"id":"https://openalex.org/keywords/porting","display_name":"Porting","score":0.3700999915599823},{"id":"https://openalex.org/keywords/callback","display_name":"Callback","score":0.3666999936103821}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.8920000195503235},{"id":"https://openalex.org/C111065885","wikidata":"https://www.wikidata.org/wiki/Q1189053","display_name":"Fuzz testing","level":3,"score":0.7764999866485596},{"id":"https://openalex.org/C37789001","wikidata":"https://www.wikidata.org/wiki/Q782543","display_name":"Graphical user interface","level":2,"score":0.760699987411499},{"id":"https://openalex.org/C2777904410","wikidata":"https://www.wikidata.org/wiki/Q7397","display_name":"Software","level":2,"score":0.5454000234603882},{"id":"https://openalex.org/C66153210","wikidata":"https://www.wikidata.org/wiki/Q5597182","display_name":"Graphical user interface testing","level":4,"score":0.507099986076355},{"id":"https://openalex.org/C2776303644","wikidata":"https://www.wikidata.org/wiki/Q1020499","display_name":"Interfacing","level":2,"score":0.4684000015258789},{"id":"https://openalex.org/C205711294","wikidata":"https://www.wikidata.org/wiki/Q176953","display_name":"Rendering (computer graphics)","level":2,"score":0.4677000045776367},{"id":"https://openalex.org/C89505385","wikidata":"https://www.wikidata.org/wiki/Q47146","display_name":"User interface","level":2,"score":0.46320000290870667},{"id":"https://openalex.org/C199360897","wikidata":"https://www.wikidata.org/wiki/Q9143","display_name":"Programming language","level":1,"score":0.40540000796318054},{"id":"https://openalex.org/C79581498","wikidata":"https://www.wikidata.org/wiki/Q1367530","display_name":"Suite","level":2,"score":0.39570000767707825},{"id":"https://openalex.org/C107457646","wikidata":"https://www.wikidata.org/wiki/Q207434","display_name":"Human\u2013computer interaction","level":1,"score":0.382099986076355},{"id":"https://openalex.org/C111919701","wikidata":"https://www.wikidata.org/wiki/Q9135","display_name":"Operating system","level":1,"score":0.37610000371932983},{"id":"https://openalex.org/C106251023","wikidata":"https://www.wikidata.org/wiki/Q851989","display_name":"Porting","level":3,"score":0.3700999915599823},{"id":"https://openalex.org/C115903868","wikidata":"https://www.wikidata.org/wiki/Q80993","display_name":"Software engineering","level":1,"score":0.36970001459121704},{"id":"https://openalex.org/C204495577","wikidata":"https://www.wikidata.org/wiki/Q1205349","display_name":"Callback","level":2,"score":0.3666999936103821},{"id":"https://openalex.org/C168167062","wikidata":"https://www.wikidata.org/wiki/Q1117970","display_name":"Component (thermodynamics)","level":2,"score":0.358599990606308},{"id":"https://openalex.org/C519991488","wikidata":"https://www.wikidata.org/wiki/Q28865","display_name":"Python (programming language)","level":2,"score":0.35589998960494995},{"id":"https://openalex.org/C76518257","wikidata":"https://www.wikidata.org/wiki/Q271680","display_name":"Software framework","level":5,"score":0.35100001096725464},{"id":"https://openalex.org/C77362995","wikidata":"https://www.wikidata.org/wiki/Q1135914","display_name":"Event-driven programming","level":5,"score":0.34439998865127563},{"id":"https://openalex.org/C2779662365","wikidata":"https://www.wikidata.org/wiki/Q5416694","display_name":"Event (particle physics)","level":2,"score":0.3303999900817871},{"id":"https://openalex.org/C2781052500","wikidata":"https://www.wikidata.org/wiki/Q2230313","display_name":"Shell (structure)","level":2,"score":0.30979999899864197},{"id":"https://openalex.org/C43126263","wikidata":"https://www.wikidata.org/wiki/Q128751","display_name":"Source code","level":2,"score":0.296099990606308},{"id":"https://openalex.org/C198140048","wikidata":"https://www.wikidata.org/wiki/Q10859422","display_name":"Software versioning","level":3,"score":0.2904999852180481},{"id":"https://openalex.org/C529173508","wikidata":"https://www.wikidata.org/wiki/Q638608","display_name":"Software development","level":3,"score":0.28769999742507935},{"id":"https://openalex.org/C174683762","wikidata":"https://www.wikidata.org/wiki/Q609588","display_name":"Component-based software engineering","level":4,"score":0.27790001034736633},{"id":"https://openalex.org/C39510489","wikidata":"https://www.wikidata.org/wiki/Q1368336","display_name":"Look and feel","level":4,"score":0.273499995470047},{"id":"https://openalex.org/C163847158","wikidata":"https://www.wikidata.org/wiki/Q7233492","display_name":"Post-WIMP","level":5,"score":0.2711000144481659},{"id":"https://openalex.org/C2778751112","wikidata":"https://www.wikidata.org/wiki/Q835016","display_name":"Window (computing)","level":2,"score":0.27000001072883606},{"id":"https://openalex.org/C2780154230","wikidata":"https://www.wikidata.org/wiki/Q513420","display_name":"Undo","level":2,"score":0.2671000063419342},{"id":"https://openalex.org/C36464697","wikidata":"https://www.wikidata.org/wiki/Q451553","display_name":"Visualization","level":2,"score":0.26030001044273376},{"id":"https://openalex.org/C99613125","wikidata":"https://www.wikidata.org/wiki/Q165194","display_name":"Application programming interface","level":2,"score":0.2597000002861023},{"id":"https://openalex.org/C170130773","wikidata":"https://www.wikidata.org/wiki/Q216378","display_name":"Usability","level":2,"score":0.2551000118255615},{"id":"https://openalex.org/C177212765","wikidata":"https://www.wikidata.org/wiki/Q627335","display_name":"Workflow","level":2,"score":0.2529999911785126}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1109/ase63991.2025.00098","is_oa":false,"landing_page_url":"https://doi.org/10.1109/ase63991.2025.00098","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"2025 40th IEEE/ACM International Conference on Automated Software Engineering (ASE)","raw_type":"proceedings-article"}],"best_oa_location":null,"sustainable_development_goals":[{"display_name":"Industry, innovation and infrastructure","score":0.4019394516944885,"id":"https://metadata.un.org/sdg/9"}],"awards":[],"funders":[{"id":"https://openalex.org/F4320306076","display_name":"National Science Foundation","ror":"https://ror.org/021nxhr62"},{"id":"https://openalex.org/F4320332815","display_name":"Advanced Research Projects Agency","ror":"https://ror.org/02caytj08"}],"has_content":{"grobid_xml":false,"pdf":false},"content_urls":null,"referenced_works_count":9,"referenced_works":["https://openalex.org/W2100505193","https://openalex.org/W2584230735","https://openalex.org/W2964241064","https://openalex.org/W2979357014","https://openalex.org/W3136127207","https://openalex.org/W4220830491","https://openalex.org/W4388858797","https://openalex.org/W4401422703","https://openalex.org/W4405170922"],"related_works":[],"abstract_inverted_index":{"Desktop":[0],"applications":[1,50],"represent":[2],"one":[3],"of":[4,13,48,109,140,234,269],"today\u2019s":[5,219],"largest":[6],"software":[7,32,141],"ecosystems,":[8],"accounting":[9],"for":[10,42,150],"over":[11],"96%":[12],"workplace":[14],"computing":[15],"and":[16,28,64,90,97,174,228,263,273],"supporting":[17,218],"essential":[18],"operations":[19],"across":[20,278],"critical":[21],"sectors":[22],"such":[23],"as":[24,133,135,247,249,255],"healthcare,":[25],"commerce,":[26],"industry,":[27],"government.":[29],"Though":[30],"modern":[31],"is":[33,188],"increasingly":[34],"being":[35],"vetted":[36],"through":[37],"fuzzing\u2014an":[38],"automated":[39],"testing":[40,215],"technique":[41],"large-scale":[43,266],"bug":[44],"discovery\u2014a":[45],"major":[46],"component":[47],"desktop":[49,110,115,151,155],"remains":[51,118],"universally":[52],"under-vetted:":[53],"the":[54,104,146],"Graphical":[55],"User":[56],"Interface":[57],"(GUI).":[58],"Existing":[59],"desktop-based":[60],"fuzzers":[61,86,156,207],"like":[62,87,208,225],"AFL++":[63,209],"libFuzzer":[65],"are":[66],"limited":[67],"to":[68,103,185,210,214],"non-GUI":[69,206],"interfaces":[70],"(e.g.,":[71],"file-":[72,160],"or":[73,161,295],"buffer-based":[74,162],"inputs),":[75],"rendering":[76,99],"them":[77,100],"wholly":[78],"incompatible":[79],"with":[80,123,290],"GUIs.":[81,216],"Conversely,":[82],"mobile":[83],"app":[84],"GUI":[85,116,152,167,191,202,222,244,250,282],"Android\u2019s":[88],"Monkey":[89],"iOS\u2019s":[91],"XCMonkey":[92],"rely":[93],"on":[94,237],"platform-specific":[95],"SDKs":[96],"event-handling,":[98],"fundamentally":[101],"unportable":[102],"broader,":[105],"more":[106],"complex":[107,177],"landscape":[108],"software.":[111,153],"For":[112],"these":[113],"reasons,":[114],"code":[117],"largely":[119],"under-tested,":[120],"burdening":[121],"users":[122],"numerous":[124],"GUI-induced":[125,181,288],"errors":[126],"that":[127,157],"should,":[128],"in":[129],"principle,":[130],"be":[131,211],"just":[132],"discoverable":[134],"any":[136],"other":[137],"well-fuzzed":[138],"class":[139],"bugs.This":[142],"paper":[143],"introduces":[144],"GUIFuzz++:":[145],"first":[147],"general-purpose":[148],"fuzzer":[149,261],"Unlike":[154],"randomly":[158],"mutate":[159],"inputs,":[163],"GUIFuzz++":[164,254],"exclusively":[165],"targets":[166],"interactions\u2014clicks,":[168],"scrolls,":[169],"key":[170],"presses,":[171],"window":[172],"navigation,":[173],"more\u2014to":[175],"uncover":[176],"event":[178],"sequences":[179],"triggering":[180],"program":[182],"errors.":[183],"Central":[184],"our":[186],"approach":[187],"a":[189,194,232,256,265],"novel":[190],"Interaction":[192],"Interpreter:":[193],"middle-layer":[195],"translating":[196],"fuzzer-generated":[197],"random":[198],"inputs":[199],"into":[200],"distinct":[201],"operations,":[203],"enabling":[204],"successful":[205],"easily":[212],"ported":[213],"Beyond":[217],"most":[220],"popular":[221],"development":[223],"frameworks":[224],"QT,":[226],"GTK,":[227],"Xorg,":[229],"we":[230],"introduce":[231],"suite":[233],"enhancements":[235],"capitalizing":[236],"ubiquitous":[238],"Software":[239],"Accessibility":[240],"Technologies,":[241],"significantly":[242],"boosting":[243],"fuzzing":[245],"precision":[246],"well":[248],"bug-finding":[251],"effectiveness.We":[252],"integrate":[253],"prototype":[257],"atop":[258],"state-of-the-art":[259],"GUI-agnostic":[260],"AFL++,":[262],"perform":[264],"ablation":[267],"study":[268],"its":[270],"fundamental":[271],"components":[272],"enhancements.":[274],"In":[275],"an":[276],"evaluation":[277],"12":[279],"popular,":[280],"real-world":[281],"applications,":[283],"GUI-FUZZ++":[284],"uncovers":[285],"23":[286],"previously-unknown":[287],"bugs\u2014":[289],"14":[291],"thus":[292],"far":[293],"confirmed":[294],"fixed":[296],"by":[297],"developers.":[298]},"counts_by_year":[],"updated_date":"2026-07-29T14:22:42.915294","created_date":"2026-01-29T00:00:00"}