{"id":"https://openalex.org/W4309675212","doi":"https://doi.org/10.1109/cns56114.2022.9947273","title":"Performant Binary Fuzzing without Source Code using Static Instrumentation","display_name":"Performant Binary Fuzzing without Source Code using Static Instrumentation","publication_year":2022,"publication_date":"2022-10-03","ids":{"openalex":"https://openalex.org/W4309675212","doi":"https://doi.org/10.1109/cns56114.2022.9947273"},"language":"en","primary_location":{"id":"doi:10.1109/cns56114.2022.9947273","is_oa":false,"landing_page_url":"https://doi.org/10.1109/cns56114.2022.9947273","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"2022 IEEE Conference on Communications and Network Security (CNS)","raw_type":"proceedings-article"},"type":"conference-paper","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5044742451","display_name":"Eric Pauley","orcid":null},"institutions":[{"id":"https://openalex.org/I135310074","display_name":"University of Wisconsin\u2013Madison","ror":"https://ror.org/01y2jtd41","country_code":"US","type":"education","lineage":["https://openalex.org/I135310074"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Eric Pauley","raw_affiliation_strings":["University of Wisconsin-Madison"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"University of Wisconsin-Madison","institution_ids":["https://openalex.org/I135310074"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5010830558","display_name":"Gang Tan","orcid":"https://orcid.org/0000-0001-6109-6091"},"institutions":[{"id":"https://openalex.org/I130769515","display_name":"Pennsylvania State University","ror":"https://ror.org/04p491231","country_code":"US","type":"education","lineage":["https://openalex.org/I130769515"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Gang Tan","raw_affiliation_strings":["The Pennsylvania State University"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"The Pennsylvania State University","institution_ids":["https://openalex.org/I130769515"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5100722775","display_name":"Danfeng Zhang","orcid":"https://orcid.org/0000-0003-1942-6872"},"institutions":[{"id":"https://openalex.org/I130769515","display_name":"Pennsylvania State University","ror":"https://ror.org/04p491231","country_code":"US","type":"education","lineage":["https://openalex.org/I130769515"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Danfeng Zhang","raw_affiliation_strings":["The Pennsylvania State University"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"The Pennsylvania State University","institution_ids":["https://openalex.org/I130769515"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5055368149","display_name":"Patrick McDaniel","orcid":"https://orcid.org/0000-0003-2091-7484"},"institutions":[{"id":"https://openalex.org/I135310074","display_name":"University of Wisconsin\u2013Madison","ror":"https://ror.org/01y2jtd41","country_code":"US","type":"education","lineage":["https://openalex.org/I135310074"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Patrick McDaniel","raw_affiliation_strings":["University of Wisconsin-Madison"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"University of Wisconsin-Madison","institution_ids":["https://openalex.org/I135310074"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":2,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":null,"has_fulltext":false,"cited_by_count":2,"citation_normalized_percentile":null,"cited_by_percentile_year":null,"biblio":{"volume":"41","issue":null,"first_page":"226","last_page":"235"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10743","display_name":"Software Testing and Debugging Techniques","score":0.9998999834060669,"subfield":{"id":"https://openalex.org/subfields/1712","display_name":"Software"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T10743","display_name":"Software Testing and Debugging Techniques","score":0.9998999834060669,"subfield":{"id":"https://openalex.org/subfields/1712","display_name":"Software"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":0.9948999881744385,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":0.9947999715805054,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/fuzz-testing","display_name":"Fuzz testing","score":0.960419774055481},{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.8472048044204712},{"id":"https://openalex.org/keywords/source-code","display_name":"Source code","score":0.6462533473968506},{"id":"https://openalex.org/keywords/instrumentation","display_name":"Instrumentation (computer programming)","score":0.6243718266487122},{"id":"https://openalex.org/keywords/code-coverage","display_name":"Code coverage","score":0.5046588182449341},{"id":"https://openalex.org/keywords/overhead","display_name":"Overhead (engineering)","score":0.4468298852443695},{"id":"https://openalex.org/keywords/buffer-overflow","display_name":"Buffer overflow","score":0.4121488630771637},{"id":"https://openalex.org/keywords/programming-language","display_name":"Programming language","score":0.3231718838214874},{"id":"https://openalex.org/keywords/software","display_name":"Software","score":0.31590065360069275}],"concepts":[{"id":"https://openalex.org/C111065885","wikidata":"https://www.wikidata.org/wiki/Q1189053","display_name":"Fuzz testing","level":3,"score":0.960419774055481},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.8472048044204712},{"id":"https://openalex.org/C43126263","wikidata":"https://www.wikidata.org/wiki/Q128751","display_name":"Source code","level":2,"score":0.6462533473968506},{"id":"https://openalex.org/C118530786","wikidata":"https://www.wikidata.org/wiki/Q1134732","display_name":"Instrumentation (computer programming)","level":2,"score":0.6243718266487122},{"id":"https://openalex.org/C53942775","wikidata":"https://www.wikidata.org/wiki/Q1211721","display_name":"Code coverage","level":3,"score":0.5046588182449341},{"id":"https://openalex.org/C2779960059","wikidata":"https://www.wikidata.org/wiki/Q7113681","display_name":"Overhead (engineering)","level":2,"score":0.4468298852443695},{"id":"https://openalex.org/C40842320","wikidata":"https://www.wikidata.org/wiki/Q19423","display_name":"Buffer overflow","level":2,"score":0.4121488630771637},{"id":"https://openalex.org/C199360897","wikidata":"https://www.wikidata.org/wiki/Q9143","display_name":"Programming language","level":1,"score":0.3231718838214874},{"id":"https://openalex.org/C2777904410","wikidata":"https://www.wikidata.org/wiki/Q7397","display_name":"Software","level":2,"score":0.31590065360069275}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1109/cns56114.2022.9947273","is_oa":false,"landing_page_url":"https://doi.org/10.1109/cns56114.2022.9947273","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"2022 IEEE Conference on Communications and Network Security (CNS)","raw_type":"proceedings-article"}],"best_oa_location":null,"sustainable_development_goals":[],"awards":[],"funders":[{"id":"https://openalex.org/F4320306076","display_name":"National Science Foundation","ror":"https://ror.org/021nxhr62"}],"has_content":{"grobid_xml":false,"pdf":false},"content_urls":null,"referenced_works_count":28,"referenced_works":["https://openalex.org/W208494864","https://openalex.org/W646354405","https://openalex.org/W1522250664","https://openalex.org/W1550112417","https://openalex.org/W1981618658","https://openalex.org/W2016716561","https://openalex.org/W2030906223","https://openalex.org/W2119251836","https://openalex.org/W2134633067","https://openalex.org/W2407989913","https://openalex.org/W2515236103","https://openalex.org/W2574017551","https://openalex.org/W2612128870","https://openalex.org/W2613534458","https://openalex.org/W2741068848","https://openalex.org/W2765363641","https://openalex.org/W2791218785","https://openalex.org/W2914503388","https://openalex.org/W2947182139","https://openalex.org/W2964097210","https://openalex.org/W3001307185","https://openalex.org/W3015291177","https://openalex.org/W4245421994","https://openalex.org/W4246166885","https://openalex.org/W6621201870","https://openalex.org/W6631155369","https://openalex.org/W6632966915","https://openalex.org/W6759111002"],"related_works":["https://openalex.org/W2316974788","https://openalex.org/W2381594293","https://openalex.org/W2551594732","https://openalex.org/W2367489380","https://openalex.org/W4297792550","https://openalex.org/W3154327225","https://openalex.org/W4313066017","https://openalex.org/W2383174935","https://openalex.org/W2344257842","https://openalex.org/W1964740600"],"abstract_inverted_index":{"Advancements":[0],"in":[1,15,33,79],"fuzz":[2],"testing":[3],"have":[4],"achieved":[5],"the":[6,43,69,110,114,148],"ability":[7,150],"to":[8,26,41],"quickly":[9],"and":[10,45,66,98],"comprehensively":[11],"find":[12],"security-critical":[13],"faults":[14],"software":[16],"systems.":[17],"Yet,":[18],"some":[19],"of":[20,47,68,84,151],"these":[21,74],"techniques":[22,40,75,142],"rely":[23],"on":[24,109],"access":[25],"source":[27],"code,":[28],"which":[29],"is":[30,58,62],"often":[31],"unavailable":[32],"practice.":[34],"In":[35,136],"this":[36,85,137],"paper,":[37],"we":[38,139],"explore":[39],"replicate":[42],"depth":[44],"efficiency":[46],"source-code":[48],"available":[49,78],"fuzzers":[50],"via":[51,87],"static":[52],"binary":[53,144],"instrumentation.":[54],"Developing":[55],"such":[56],"instrumentation":[57],"difficult":[59],"because":[60],"compilation":[61],"a":[63,92,99,118,123],"lossy":[64],"process,":[65],"much":[67,83],"source-level":[70],"semantics":[71],"leveraged":[72],"by":[73],"are":[76],"not":[77],"binaries.":[80],"We":[81,106],"recover":[82],"information":[86],"heuristic":[88],"control":[89],"flow":[90],"reconstruction,":[91],"shadow":[93],"stack":[94],"for":[95,102,143],"function":[96],"identification,":[97],"novel":[100],"technique":[101],"instrumenting":[103],"comparison":[104],"instructions.":[105],"evaluate":[107],"RWFUZZ":[108],"LAVA-M":[111],"dataset,":[112],"achieving":[113],"same":[115],"effectiveness":[116],"as":[117],"best-in-class":[119],"source-available":[120,152],"fuzzer":[121],"with":[122],"<tex":[124],"xmlns:mml=\"http://www.w3.org/1998/Math/MathML\"":[125],"xmlns:xlink=\"http://www.w3.org/1999/xlink\">$3.4\\times$</tex>":[126],"execution":[127],"time":[128],"overhead":[129],"(lower":[130],"than":[131],"existing":[132],"dynamic":[133],"fuzzing":[134,145],"approaches).":[135],"way,":[138],"show":[140],"that":[141],"may":[146],"approach":[147],"functional":[149],"fuzzing.":[153]},"counts_by_year":[{"year":2025,"cited_by_count":1},{"year":2024,"cited_by_count":1}],"updated_date":"2026-07-14T23:27:15.235271","created_date":"2025-10-10T00:00:00"}