{"id":"https://openalex.org/W7125948113","doi":"https://doi.org/10.1109/ase63991.2025.00224","title":"Tephra: Principled Discovery of Fuzzer Limitations","display_name":"Tephra: Principled Discovery of Fuzzer Limitations","publication_year":2025,"publication_date":"2025-11-16","ids":{"openalex":"https://openalex.org/W7125948113","doi":"https://doi.org/10.1109/ase63991.2025.00224"},"language":null,"primary_location":{"id":"doi:10.1109/ase63991.2025.00224","is_oa":false,"landing_page_url":"https://doi.org/10.1109/ase63991.2025.00224","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"2025 40th IEEE/ACM International Conference on Automated Software Engineering (ASE)","raw_type":"proceedings-article"},"type":"conference-paper","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5124056652","display_name":"Vasil Sarafov","orcid":null},"institutions":[{"id":"https://openalex.org/I2799978770","display_name":"X-Fab (Germany)","ror":"https://ror.org/030bh9196","country_code":"DE","type":"company","lineage":["https://openalex.org/I2799978770"]}],"countries":["DE"],"is_corresponding":false,"raw_author_name":"Vasil Sarafov","raw_affiliation_strings":["Universität der Bundeswehr München,μCSRL — CODE Research Institute,Germany"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Universität der Bundeswehr München,μCSRL — CODE Research Institute,Germany","institution_ids":["https://openalex.org/I2799978770"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5124077632","display_name":"David Markvica","orcid":null},"institutions":[{"id":"https://openalex.org/I2799978770","display_name":"X-Fab (Germany)","ror":"https://ror.org/030bh9196","country_code":"DE","type":"company","lineage":["https://openalex.org/I2799978770"]}],"countries":["DE"],"is_corresponding":false,"raw_author_name":"David Markvica","raw_affiliation_strings":["Universität der Bundeswehr München,μCSRL — CODE Research Institute,Germany"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Universität der Bundeswehr München,μCSRL — CODE Research Institute,Germany","institution_ids":["https://openalex.org/I2799978770"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5058365944","display_name":"Stefan Brunthaler","orcid":"https://orcid.org/0000-0001-9766-4871"},"institutions":[{"id":"https://openalex.org/I2799978770","display_name":"X-Fab (Germany)","ror":"https://ror.org/030bh9196","country_code":"DE","type":"company","lineage":["https://openalex.org/I2799978770"]}],"countries":["DE"],"is_corresponding":false,"raw_author_name":"Stefan Brunthaler","raw_affiliation_strings":["Universität der Bundeswehr München,μCSRL — CODE Research Institute,Germany"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Universität der Bundeswehr München,μCSRL — CODE Research Institute,Germany","institution_ids":["https://openalex.org/I2799978770"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":1,"corresponding_author_ids":[],"corresponding_institution_ids":["https://openalex.org/I2799978770"],"apc_list":null,"apc_paid":null,"fwci":0.0,"has_fulltext":false,"cited_by_count":0,"citation_normalized_percentile":{"value":0.59080133,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":null,"biblio":{"volume":null,"issue":null,"first_page":"2733","last_page":"2745"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10743","display_name":"Software Testing and Debugging Techniques","score":0.9829000234603882,"subfield":{"id":"https://openalex.org/subfields/1712","display_name":"Software"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T10743","display_name":"Software Testing and Debugging Techniques","score":0.9829000234603882,"subfield":{"id":"https://openalex.org/subfields/1712","display_name":"Software"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11005","display_name":"Radiation Effects in Electronics","score":0.006200000178068876,"subfield":{"id":"https://openalex.org/subfields/2208","display_name":"Electrical and Electronic Engineering"},"field":{"id":"https://openalex.org/fields/22","display_name":"Engineering"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11032","display_name":"VLSI and Analog Circuit Testing","score":0.0024999999441206455,"subfield":{"id":"https://openalex.org/subfields/1708","display_name":"Hardware and Architecture"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/fuzz-testing","display_name":"Fuzz testing","score":0.9860000014305115},{"id":"https://openalex.org/keywords/heuristics","display_name":"Heuristics","score":0.8565000295639038},{"id":"https://openalex.org/keywords/key","display_name":"Key (lock)","score":0.6104999780654907},{"id":"https://openalex.org/keywords/construct","display_name":"Construct (python library)","score":0.43459999561309814},{"id":"https://openalex.org/keywords/ranking","display_name":"Ranking (information retrieval)","score":0.3813999891281128},{"id":"https://openalex.org/keywords/code","display_name":"Code (set theory)","score":0.3549000024795532}],"concepts":[{"id":"https://openalex.org/C111065885","wikidata":"https://www.wikidata.org/wiki/Q1189053","display_name":"Fuzz testing","level":3,"score":0.9860000014305115},{"id":"https://openalex.org/C127705205","wikidata":"https://www.wikidata.org/wiki/Q5748245","display_name":"Heuristics","level":2,"score":0.8565000295639038},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.8270000219345093},{"id":"https://openalex.org/C26517878","wikidata":"https://www.wikidata.org/wiki/Q228039","display_name":"Key (lock)","level":2,"score":0.6104999780654907},{"id":"https://openalex.org/C119857082","wikidata":"https://www.wikidata.org/wiki/Q2539","display_name":"Machine learning","level":1,"score":0.48339998722076416},{"id":"https://openalex.org/C2780801425","wikidata":"https://www.wikidata.org/wiki/Q5164392","display_name":"Construct (python library)","level":2,"score":0.43459999561309814},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.4153999984264374},{"id":"https://openalex.org/C189430467","wikidata":"https://www.wikidata.org/wiki/Q7293293","display_name":"Ranking (information retrieval)","level":2,"score":0.3813999891281128},{"id":"https://openalex.org/C2776760102","wikidata":"https://www.wikidata.org/wiki/Q5139990","display_name":"Code (set theory)","level":3,"score":0.3549000024795532},{"id":"https://openalex.org/C199360897","wikidata":"https://www.wikidata.org/wiki/Q9143","display_name":"Programming language","level":1,"score":0.2883000075817108},{"id":"https://openalex.org/C2780009758","wikidata":"https://www.wikidata.org/wiki/Q6804172","display_name":"Measure (data warehouse)","level":2,"score":0.27489998936653137},{"id":"https://openalex.org/C1009929","wikidata":"https://www.wikidata.org/wiki/Q179550","display_name":"Software bug","level":3,"score":0.2736000120639801},{"id":"https://openalex.org/C2777904410","wikidata":"https://www.wikidata.org/wiki/Q7397","display_name":"Software","level":2,"score":0.2540000081062317}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1109/ase63991.2025.00224","is_oa":false,"landing_page_url":"https://doi.org/10.1109/ase63991.2025.00224","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"2025 40th IEEE/ACM International Conference on Automated Software Engineering (ASE)","raw_type":"proceedings-article"}],"best_oa_location":null,"sustainable_development_goals":[{"id":"https://metadata.un.org/sdg/9","score":0.4361555576324463,"display_name":"Industry, innovation and infrastructure"}],"awards":[],"funders":[],"has_content":{"pdf":false,"grobid_xml":false},"content_urls":null,"referenced_works_count":45,"referenced_works":["https://openalex.org/W190884830","https://openalex.org/W2002934700","https://openalex.org/W2043100293","https://openalex.org/W2049695835","https://openalex.org/W2080970633","https://openalex.org/W2135841285","https://openalex.org/W2390518826","https://openalex.org/W2515236103","https://openalex.org/W2535617737","https://openalex.org/W2757104921","https://openalex.org/W2766540688","https://openalex.org/W2788197406","https://openalex.org/W2795192879","https://openalex.org/W2947182139","https://openalex.org/W2963298680","https://openalex.org/W2964097210","https://openalex.org/W2964241064","https://openalex.org/W2967572128","https://openalex.org/W3006937969","https://openalex.org/W3046946156","https://openalex.org/W3082737479","https://openalex.org/W3101845936","https://openalex.org/W3104402823","https://openalex.org/W3130095569","https://openalex.org/W3194771370","https://openalex.org/W4213287115","https://openalex.org/W4238083723","https://openalex.org/W4249297534","https://openalex.org/W4250846042","https://openalex.org/W4283392482","https://openalex.org/W4285490477","https://openalex.org/W4306406268","https://openalex.org/W4308632293","https://openalex.org/W4313563712","https://openalex.org/W4366830184","https://openalex.org/W4383221433","https://openalex.org/W4384163171","https://openalex.org/W4385301329","https://openalex.org/W4386005206","https://openalex.org/W4387793713","https://openalex.org/W4388240309","https://openalex.org/W4390885500","https://openalex.org/W4397028768","https://openalex.org/W4405170922","https://openalex.org/W4405182819"],"related_works":[],"abstract_inverted_index":{"Fuzz":[0],"testing":[1],"has":[2,26],"proven":[3],"effective":[4],"in":[5,9,144,151,223],"discovering":[6],"nontrivial":[7],"bugs":[8,47,150],"complex,":[10],"real-world":[11],"systems,":[12],"with":[13,97,161],"coverage-guided":[14],"greybox":[15],"fuzzing":[16,65,146,224],"being":[17],"a":[18,52,86,103,113,200,208],"key":[19,80],"contributor":[20],"to":[21,33,72,93,106,127],"this":[22],"success.":[23],"Existing":[24],"research":[25,222],"largely":[27],"focused":[28],"on":[29],"developing":[30],"new":[31],"heuristics":[32,66,147,184],"increase":[34,42],"code":[35],"coverage,":[36,69],"and":[37,100,116,121,148,168,182,189,194,217],"current":[38,145],"benchmarks":[39],"measure":[40],"coverage":[41],"or":[43,63,75],"the":[44,130,152],"number":[45],"of":[46,55,133],"found.":[48],"However,":[49],"there":[50],"is":[51],"notable":[53],"lack":[54],"investigation":[56],"into":[57],"programming":[58],"constructs":[59],"that":[60,89,174],"systematically":[61],"hinder":[62],"prevent":[64],"from":[67],"achieving":[68],"commonly":[70],"referred":[71],"as":[73,165],"\"obstacles\"":[74],"\"roadblocks\".This":[76],"work":[77],"makes":[78],"two":[79],"contributions.":[81],"First,":[82],"we":[83,110,198],"introduce":[84],"Tephra,":[85],"principled":[87],"methodology":[88],"uses":[90],"semantics-guided":[91],"synthesis":[92],"generate":[94,117],"bug-free":[95],"programs":[96],"diverse":[98],"obstacles":[99],"statistically":[101],"evaluate":[102,129],"fuzzer\u2019s":[104,209],"ability":[105],"overcome":[107],"them.":[108],"Second,":[109],"implement":[111],"Tephra-C/C++,":[112],"concrete":[114],"instantiation,":[115],"26":[118],"different":[119],"C":[120],"C++":[122],"obstacles.":[123],"We":[124,171],"use":[125],"these":[126],"empirically":[128],"bypassing":[131],"abilities":[132],"31":[134],"contemporary":[135],"fuzzers,":[136],"consuming":[137],"37.4":[138],"CPU":[139],"years.Our":[140],"analysis":[141],"reveals":[142],"limitations":[143],"uncovers":[149],"fuzzers":[153,159],"themselves,":[154],"including":[155],"AFL++.":[156],"All":[157],"evaluated":[158],"struggle":[160],"certain":[162],"obstacles,":[163],"such":[164],"floating-point":[166],"conditionals":[167],"character":[169],"strings.":[170],"also":[172],"find":[173],"signed":[175],"integers":[176],"are":[177,185],"more":[178],"challenging":[179],"than":[180],"unsigned,":[181],"some":[183],"overtuned":[186],"for":[187,220],"32-":[188],"64-bit":[190],"types,":[191],"neglecting":[192],"8-":[193],"16-bit":[195],"integers.":[196],"Overall,":[197],"observe":[199],"single":[201],"difficult":[202],"semantic":[203],"construct":[204],"can":[205],"significantly":[206],"degrade":[207],"overall":[210],"performance.":[211],"Our":[212],"findings":[213],"demonstrate":[214],"Tephra\u2019s":[215],"effectiveness":[216],"highlight":[218],"avenues":[219],"future":[221],"techniques.":[225]},"counts_by_year":[],"updated_date":"2026-07-29T14:22:42.915294","created_date":"2026-01-29T00:00:00"}