{"id":"https://openalex.org/W3213837676","doi":"https://doi.org/10.1109/dac18074.2021.9586321","title":"PAVFuzz: State-Sensitive Fuzz Testing of Protocols in Autonomous Vehicles","display_name":"PAVFuzz: State-Sensitive Fuzz Testing of Protocols in Autonomous Vehicles","publication_year":2021,"publication_date":"2021-11-08","ids":{"openalex":"https://openalex.org/W3213837676","doi":"https://doi.org/10.1109/dac18074.2021.9586321","mag":"3213837676"},"language":"en","primary_location":{"id":"doi:10.1109/dac18074.2021.9586321","is_oa":false,"landing_page_url":"https://doi.org/10.1109/dac18074.2021.9586321","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"2021 58th ACM/IEEE Design Automation Conference (DAC)","raw_type":"proceedings-article"},"type":"article","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5006395264","display_name":"Feilong Zuo","orcid":"https://orcid.org/0000-0003-2589-2255"},"institutions":[{"id":"https://openalex.org/I99065089","display_name":"Tsinghua University","ror":"https://ror.org/03cve4549","country_code":"CN","type":"education","lineage":["https://openalex.org/I99065089"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Feilong Zuo","raw_affiliation_strings":["KLISS, BNRist, School of Software, Tsinghua University"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"KLISS, BNRist, School of Software, Tsinghua University","institution_ids":["https://openalex.org/I99065089"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5078630181","display_name":"Zhengxiong Luo","orcid":"https://orcid.org/0000-0001-6522-9269"},"institutions":[{"id":"https://openalex.org/I99065089","display_name":"Tsinghua University","ror":"https://ror.org/03cve4549","country_code":"CN","type":"education","lineage":["https://openalex.org/I99065089"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Zhengxiong Luo","raw_affiliation_strings":["KLISS, BNRist, School of Software, Tsinghua University"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"KLISS, BNRist, School of Software, Tsinghua University","institution_ids":["https://openalex.org/I99065089"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5091646340","display_name":"Junze Yu","orcid":"https://orcid.org/0009-0004-7427-5573"},"institutions":[{"id":"https://openalex.org/I139759216","display_name":"Beijing University of Posts and Telecommunications","ror":"https://ror.org/04w9fbh59","country_code":"CN","type":"education","lineage":["https://openalex.org/I139759216"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Junze Yu","raw_affiliation_strings":["Beijing University of Posts and Telecommunications"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Beijing University of Posts and Telecommunications","institution_ids":["https://openalex.org/I139759216"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5100462349","display_name":"Zhe Liu","orcid":"https://orcid.org/0000-0001-9116-2897"},"institutions":[{"id":"https://openalex.org/I9842412","display_name":"Nanjing University of Aeronautics and Astronautics","ror":"https://ror.org/01scyh794","country_code":"CN","type":"education","lineage":["https://openalex.org/I9842412"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Zhe Liu","raw_affiliation_strings":["Nanjing University of Aeronautics and Astronautics"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Nanjing University of Aeronautics and Astronautics","institution_ids":["https://openalex.org/I9842412"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5060117799","display_name":"Yu Jiang","orcid":"https://orcid.org/0000-0003-0955-503X"},"institutions":[{"id":"https://openalex.org/I99065089","display_name":"Tsinghua University","ror":"https://ror.org/03cve4549","country_code":"CN","type":"education","lineage":["https://openalex.org/I99065089"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Yu Jiang","raw_affiliation_strings":["KLISS, BNRist, School of Software, Tsinghua University"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"KLISS, BNRist, School of Software, Tsinghua University","institution_ids":["https://openalex.org/I99065089"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":5,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":5.6962,"has_fulltext":false,"cited_by_count":28,"citation_normalized_percentile":{"value":0.96182008,"is_in_top_1_percent":false,"is_in_top_10_percent":true},"cited_by_percentile_year":{"min":89,"max":99},"biblio":{"volume":null,"issue":null,"first_page":"823","last_page":"828"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10743","display_name":"Software Testing and Debugging Techniques","score":0.9998000264167786,"subfield":{"id":"https://openalex.org/subfields/1712","display_name":"Software"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T10743","display_name":"Software Testing and Debugging Techniques","score":0.9998000264167786,"subfield":{"id":"https://openalex.org/subfields/1712","display_name":"Software"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":0.9908999800682068,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11005","display_name":"Radiation Effects in Electronics","score":0.9900000095367432,"subfield":{"id":"https://openalex.org/subfields/2208","display_name":"Electrical and Electronic Engineering"},"field":{"id":"https://openalex.org/fields/22","display_name":"Engineering"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/fuzz-testing","display_name":"Fuzz testing","score":0.9893124103546143},{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.8233640789985657},{"id":"https://openalex.org/keywords/vulnerability","display_name":"Vulnerability (computing)","score":0.7558695673942566},{"id":"https://openalex.org/keywords/protocol","display_name":"Protocol (science)","score":0.722143292427063},{"id":"https://openalex.org/keywords/state","display_name":"State (computer science)","score":0.6002055406570435},{"id":"https://openalex.org/keywords/taint-checking","display_name":"Taint checking","score":0.5594373941421509},{"id":"https://openalex.org/keywords/computer-security","display_name":"Computer security","score":0.5207881331443787},{"id":"https://openalex.org/keywords/cryptographic-protocol","display_name":"Cryptographic protocol","score":0.49543726444244385},{"id":"https://openalex.org/keywords/vulnerability-assessment","display_name":"Vulnerability assessment","score":0.4928024113178253},{"id":"https://openalex.org/keywords/finite-state-machine","display_name":"Finite-state machine","score":0.4610089659690857},{"id":"https://openalex.org/keywords/communications-protocol","display_name":"Communications protocol","score":0.4537123441696167},{"id":"https://openalex.org/keywords/computer-network","display_name":"Computer network","score":0.38423365354537964},{"id":"https://openalex.org/keywords/distributed-computing","display_name":"Distributed computing","score":0.3762902617454529},{"id":"https://openalex.org/keywords/cryptography","display_name":"Cryptography","score":0.13933929800987244},{"id":"https://openalex.org/keywords/software","display_name":"Software","score":0.10102382302284241},{"id":"https://openalex.org/keywords/operating-system","display_name":"Operating system","score":0.10023549199104309},{"id":"https://openalex.org/keywords/algorithm","display_name":"Algorithm","score":0.07905030250549316}],"concepts":[{"id":"https://openalex.org/C111065885","wikidata":"https://www.wikidata.org/wiki/Q1189053","display_name":"Fuzz testing","level":3,"score":0.9893124103546143},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.8233640789985657},{"id":"https://openalex.org/C95713431","wikidata":"https://www.wikidata.org/wiki/Q631425","display_name":"Vulnerability (computing)","level":2,"score":0.7558695673942566},{"id":"https://openalex.org/C2780385302","wikidata":"https://www.wikidata.org/wiki/Q367158","display_name":"Protocol (science)","level":3,"score":0.722143292427063},{"id":"https://openalex.org/C48103436","wikidata":"https://www.wikidata.org/wiki/Q599031","display_name":"State (computer science)","level":2,"score":0.6002055406570435},{"id":"https://openalex.org/C63116202","wikidata":"https://www.wikidata.org/wiki/Q7676227","display_name":"Taint checking","level":3,"score":0.5594373941421509},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.5207881331443787},{"id":"https://openalex.org/C33884865","wikidata":"https://www.wikidata.org/wiki/Q1254335","display_name":"Cryptographic protocol","level":3,"score":0.49543726444244385},{"id":"https://openalex.org/C167063184","wikidata":"https://www.wikidata.org/wiki/Q1400839","display_name":"Vulnerability assessment","level":3,"score":0.4928024113178253},{"id":"https://openalex.org/C167822520","wikidata":"https://www.wikidata.org/wiki/Q176452","display_name":"Finite-state machine","level":2,"score":0.4610089659690857},{"id":"https://openalex.org/C12269588","wikidata":"https://www.wikidata.org/wiki/Q132364","display_name":"Communications protocol","level":2,"score":0.4537123441696167},{"id":"https://openalex.org/C31258907","wikidata":"https://www.wikidata.org/wiki/Q1301371","display_name":"Computer network","level":1,"score":0.38423365354537964},{"id":"https://openalex.org/C120314980","wikidata":"https://www.wikidata.org/wiki/Q180634","display_name":"Distributed computing","level":1,"score":0.3762902617454529},{"id":"https://openalex.org/C178489894","wikidata":"https://www.wikidata.org/wiki/Q8789","display_name":"Cryptography","level":2,"score":0.13933929800987244},{"id":"https://openalex.org/C2777904410","wikidata":"https://www.wikidata.org/wiki/Q7397","display_name":"Software","level":2,"score":0.10102382302284241},{"id":"https://openalex.org/C111919701","wikidata":"https://www.wikidata.org/wiki/Q9135","display_name":"Operating system","level":1,"score":0.10023549199104309},{"id":"https://openalex.org/C11413529","wikidata":"https://www.wikidata.org/wiki/Q8366","display_name":"Algorithm","level":1,"score":0.07905030250549316},{"id":"https://openalex.org/C71924100","wikidata":"https://www.wikidata.org/wiki/Q11190","display_name":"Medicine","level":0,"score":0.0},{"id":"https://openalex.org/C15744967","wikidata":"https://www.wikidata.org/wiki/Q9418","display_name":"Psychology","level":0,"score":0.0},{"id":"https://openalex.org/C542102704","wikidata":"https://www.wikidata.org/wiki/Q183257","display_name":"Psychotherapist","level":1,"score":0.0},{"id":"https://openalex.org/C142724271","wikidata":"https://www.wikidata.org/wiki/Q7208","display_name":"Pathology","level":1,"score":0.0},{"id":"https://openalex.org/C137176749","wikidata":"https://www.wikidata.org/wiki/Q4105337","display_name":"Psychological resilience","level":2,"score":0.0},{"id":"https://openalex.org/C204787440","wikidata":"https://www.wikidata.org/wiki/Q188504","display_name":"Alternative medicine","level":2,"score":0.0}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1109/dac18074.2021.9586321","is_oa":false,"landing_page_url":"https://doi.org/10.1109/dac18074.2021.9586321","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"2021 58th ACM/IEEE Design Automation Conference (DAC)","raw_type":"proceedings-article"}],"best_oa_location":null,"sustainable_development_goals":[{"display_name":"Peace, Justice and strong institutions","id":"https://metadata.un.org/sdg/16","score":0.5400000214576721}],"awards":[],"funders":[],"has_content":{"grobid_xml":false,"pdf":false},"content_urls":null,"referenced_works_count":8,"referenced_works":["https://openalex.org/W2065948900","https://openalex.org/W2098456636","https://openalex.org/W2107147876","https://openalex.org/W2295974667","https://openalex.org/W2808820334","https://openalex.org/W2980096664","https://openalex.org/W3047947484","https://openalex.org/W4238083723"],"related_works":["https://openalex.org/W2179304688","https://openalex.org/W2008592783","https://openalex.org/W2159690530","https://openalex.org/W2004278744","https://openalex.org/W2107510936","https://openalex.org/W2027779752","https://openalex.org/W4393137439","https://openalex.org/W2620797757","https://openalex.org/W4294294414","https://openalex.org/W2962825342"],"abstract_inverted_index":{"The":[0,87],"rapid":[1],"development":[2],"of":[3,17,30,42,100],"in-vehicle":[4],"networks":[5],"and":[6,95,115,131,140,167,176],"protocols":[7,70,156],"brings":[8],"efficient":[9],"communication":[10],"service":[11],"but":[12],"also":[13],"increases":[14,134],"the":[15,38,51,97,111,121,174],"risk":[16],"attack.":[18],"Any":[19],"vulnerability":[20,39],"may":[21],"be":[22,91],"leveraged":[23],"to":[24,33,67,93,109,119,173],"cause":[25],"serious":[26,150],"consequences.":[27],"It":[28,75,145],"is":[29,48,107],"vital":[31],"importance":[32],"guarantee":[34],"their":[35],"security.":[36],"However,":[37],"detection":[40],"efficiency":[41],"traditional":[43],"techniques":[44],"such":[45,164],"as":[46,165],"fuzzing":[47],"challenged":[49],"by":[50,137],"complex":[52],"relations":[53,78,88],"among":[54,154],"protocol":[55,85],"states.In":[56],"this":[57],"paper,":[58],"we":[59],"propose":[60],"PAVFuzz,":[61],"a":[62],"state-sensitive":[63,117],"fuzz":[64],"testing":[65],"framework":[66],"secure":[68],"those":[69],"used":[71,92,160],"in":[72,83,161],"autonomous":[73,162],"vehicles.":[74],"automatically":[76],"learns":[77],"between":[79],"two":[80],"data":[81,102,113],"elements":[82,114],"different":[84],"states.":[86],"will":[89],"then":[90],"calculate":[94],"update":[96],"mutation":[98,118],"weight":[99],"each":[101],"element":[103],"continuously.":[104],"Accordingly,":[105],"PAVFuzz":[106,133],"able":[108],"select":[110],"target":[112],"perform":[116],"boost":[120],"efficiency.":[122],"Experiments":[123],"show":[124],"that,":[125],"compared":[126],"with":[127],"state-of-the-art":[128],"fuzzers":[129],"Peach":[130],"AFL,":[132],"branch":[135],"coverage":[136],"averagely":[138],"22.51%":[139],"369.19%":[141],"within":[142],"24":[143],"hours.":[144],"has":[146],"successfully":[147],"exposed":[148],"12":[149],"previously":[151],"unknown":[152],"vulnerabilities":[153],"several":[155],"that":[157],"are":[158],"widely":[159],"vehicles,":[163],"RTPS":[166],"SOME/IP.":[168],"We":[169],"have":[170,179],"reported":[171],"them":[172],"developers":[175],"corresponding":[177],"patches":[178],"been":[180],"released.":[181]},"counts_by_year":[{"year":2026,"cited_by_count":1},{"year":2025,"cited_by_count":9},{"year":2024,"cited_by_count":12},{"year":2023,"cited_by_count":3},{"year":2022,"cited_by_count":2},{"year":2021,"cited_by_count":1}],"updated_date":"2026-06-11T09:08:48.828518","created_date":"2025-10-10T00:00:00"}