{"id":"https://openalex.org/W4412610660","doi":"https://doi.org/10.1109/hpcc64274.2024.00161","title":"Speed is Not All You Need When Fuzzing Stateful Network Servers","display_name":"Speed is Not All You Need When Fuzzing Stateful Network Servers","publication_year":2024,"publication_date":"2024-12-13","ids":{"openalex":"https://openalex.org/W4412610660","doi":"https://doi.org/10.1109/hpcc64274.2024.00161"},"language":"en","primary_location":{"id":"doi:10.1109/hpcc64274.2024.00161","is_oa":false,"landing_page_url":"https://doi.org/10.1109/hpcc64274.2024.00161","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"2024 IEEE International Conference on High Performance Computing and Communications (HPCC)","raw_type":"proceedings-article"},"type":"conference-paper","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5091907060","display_name":"Qian Liu","orcid":"https://orcid.org/0000-0002-1412-0615"},"institutions":[{"id":"https://openalex.org/I170215575","display_name":"National University of Defense Technology","ror":"https://ror.org/05d2yfz11","country_code":"CN","type":"education","lineage":["https://openalex.org/I170215575"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Qian Liu","raw_affiliation_strings":["National University of Defense Technology,School of Computer,ChangSha,China"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"National University of Defense Technology,School of Computer,ChangSha,China","institution_ids":["https://openalex.org/I170215575"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5027535082","display_name":"Lei Zhou","orcid":"https://orcid.org/0000-0002-5027-1234"},"institutions":[{"id":"https://openalex.org/I170215575","display_name":"National University of Defense Technology","ror":"https://ror.org/05d2yfz11","country_code":"CN","type":"education","lineage":["https://openalex.org/I170215575"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Lei Zhou","raw_affiliation_strings":["National University of Defense Technology,School of Computer,ChangSha,China"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"National University of Defense Technology,School of Computer,ChangSha,China","institution_ids":["https://openalex.org/I170215575"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5102821392","display_name":"Xu Zhou","orcid":"https://orcid.org/0000-0002-1400-8375"},"institutions":[{"id":"https://openalex.org/I170215575","display_name":"National University of Defense Technology","ror":"https://ror.org/05d2yfz11","country_code":"CN","type":"education","lineage":["https://openalex.org/I170215575"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Xu Zhou","raw_affiliation_strings":["National University of Defense Technology,School of Computer,ChangSha,China"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"National University of Defense Technology,School of Computer,ChangSha,China","institution_ids":["https://openalex.org/I170215575"]}]},{"author_position":"middle","author":{"id":null,"display_name":"Yuan Wei","orcid":null},"institutions":[{"id":"https://openalex.org/I170215575","display_name":"National University of Defense Technology","ror":"https://ror.org/05d2yfz11","country_code":"CN","type":"education","lineage":["https://openalex.org/I170215575"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Yuan Wei","raw_affiliation_strings":["National University of Defense Technology,School of Computer,ChangSha,China"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"National University of Defense Technology,School of Computer,ChangSha,China","institution_ids":["https://openalex.org/I170215575"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5073803603","display_name":"Danjun Liu","orcid":"https://orcid.org/0000-0002-5375-7598"},"institutions":[{"id":"https://openalex.org/I170215575","display_name":"National University of Defense Technology","ror":"https://ror.org/05d2yfz11","country_code":"CN","type":"education","lineage":["https://openalex.org/I170215575"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Danjun Liu","raw_affiliation_strings":["National University of Defense Technology,School of Computer,ChangSha,China"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"National University of Defense Technology,School of Computer,ChangSha,China","institution_ids":["https://openalex.org/I170215575"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":1,"corresponding_author_ids":[],"corresponding_institution_ids":["https://openalex.org/I170215575"],"apc_list":null,"apc_paid":null,"fwci":0.0,"has_fulltext":false,"cited_by_count":0,"citation_normalized_percentile":{"value":0.4384896,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":null,"biblio":{"volume":null,"issue":null,"first_page":"1194","last_page":"1203"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T12127","display_name":"Software System Performance and Reliability","score":0.9854000210762024,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T12127","display_name":"Software System Performance and Reliability","score":0.9854000210762024,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10714","display_name":"Software-Defined Networks and 5G","score":0.9595999717712402,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T12203","display_name":"Mobile Agent-Based Network Management","score":0.948199987411499,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/stateful-firewall","display_name":"Stateful firewall","score":0.9599207639694214},{"id":"https://openalex.org/keywords/fuzz-testing","display_name":"Fuzz testing","score":0.94625324010849},{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.7330136299133301},{"id":"https://openalex.org/keywords/server","display_name":"Server","score":0.6655256152153015},{"id":"https://openalex.org/keywords/computer-network","display_name":"Computer network","score":0.42161649465560913},{"id":"https://openalex.org/keywords/operating-system","display_name":"Operating system","score":0.27610039710998535},{"id":"https://openalex.org/keywords/software","display_name":"Software","score":0.08267846703529358}],"concepts":[{"id":"https://openalex.org/C22927095","wikidata":"https://www.wikidata.org/wiki/Q1784206","display_name":"Stateful firewall","level":3,"score":0.9599207639694214},{"id":"https://openalex.org/C111065885","wikidata":"https://www.wikidata.org/wiki/Q1189053","display_name":"Fuzz testing","level":3,"score":0.94625324010849},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.7330136299133301},{"id":"https://openalex.org/C93996380","wikidata":"https://www.wikidata.org/wiki/Q44127","display_name":"Server","level":2,"score":0.6655256152153015},{"id":"https://openalex.org/C31258907","wikidata":"https://www.wikidata.org/wiki/Q1301371","display_name":"Computer network","level":1,"score":0.42161649465560913},{"id":"https://openalex.org/C111919701","wikidata":"https://www.wikidata.org/wiki/Q9135","display_name":"Operating system","level":1,"score":0.27610039710998535},{"id":"https://openalex.org/C2777904410","wikidata":"https://www.wikidata.org/wiki/Q7397","display_name":"Software","level":2,"score":0.08267846703529358},{"id":"https://openalex.org/C158379750","wikidata":"https://www.wikidata.org/wiki/Q214111","display_name":"Network packet","level":2,"score":0.0}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1109/hpcc64274.2024.00161","is_oa":false,"landing_page_url":"https://doi.org/10.1109/hpcc64274.2024.00161","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"2024 IEEE International Conference on High Performance Computing and Communications (HPCC)","raw_type":"proceedings-article"}],"best_oa_location":null,"sustainable_development_goals":[{"score":0.44999998807907104,"display_name":"Reduced inequalities","id":"https://metadata.un.org/sdg/10"}],"awards":[],"funders":[{"id":"https://openalex.org/F4320321001","display_name":"National Natural Science Foundation of China","ror":"https://ror.org/01h0zpd94"}],"has_content":{"grobid_xml":false,"pdf":false},"content_urls":null,"referenced_works_count":25,"referenced_works":["https://openalex.org/W1769343819","https://openalex.org/W1818910285","https://openalex.org/W2535617737","https://openalex.org/W2896864934","https://openalex.org/W2980096664","https://openalex.org/W3047947484","https://openalex.org/W3156273683","https://openalex.org/W3181528482","https://openalex.org/W3207926955","https://openalex.org/W4206992800","https://openalex.org/W4210660460","https://openalex.org/W4220830491","https://openalex.org/W4221162427","https://openalex.org/W4221162498","https://openalex.org/W4362466275","https://openalex.org/W4384163047","https://openalex.org/W4386569390","https://openalex.org/W4387010293","https://openalex.org/W4391724785","https://openalex.org/W4391899144","https://openalex.org/W4402954308","https://openalex.org/W6782130387","https://openalex.org/W6793945956","https://openalex.org/W6810421805","https://openalex.org/W6902390121"],"related_works":["https://openalex.org/W2899084033","https://openalex.org/W2748952813","https://openalex.org/W2129975948","https://openalex.org/W2591875911","https://openalex.org/W2736754676","https://openalex.org/W4287833485","https://openalex.org/W4401906987","https://openalex.org/W4401907763","https://openalex.org/W4404407863","https://openalex.org/W4387191767"],"abstract_inverted_index":{"Current":[0],"network":[1,36,106],"protocol":[2,10,81,107],"fuzzing":[3,30,48,59],"is":[4,213],"an":[5,104],"efficient":[6],"mechanism":[7],"for":[8],"uncovering":[9],"vulnerabilities,":[11],"yet":[12],"it":[13],"faces":[14],"several":[15],"challenges.":[16],"For":[17],"instance,":[18],"bugs":[19],"in":[20,46,79,125,170,193],"stateful":[21],"protocols":[22],"can":[23,41,157],"significantly":[24],"hinder":[25],"the":[26,47,96,121,218],"generation":[27],"of":[28,216],"effective":[29],"testcases.":[31],"Additionally,":[32],"factors":[33],"such":[34,85],"as":[35],"transmission":[37,114],"and":[38,92,115,135,173,203],"session":[39,116],"synchronization":[40,118],"lead":[42],"to":[43,94,119,131,150,166,179,198],"substantial":[44],"delays":[45],"process.":[49],"However,":[50],"we":[51,102,153],"have":[52],"observed":[53],"a":[54,86,159,167],"common":[55,87],"phenomenon":[56],"that":[57,109,142,155],"existing":[58],"techniques":[60],"often":[61],"focus":[62],"on":[63],"optimizing":[64],"either":[65],"execution":[66,145,211],"speed":[67,134,146,212],"or":[68],"state":[69,117,127,136,162,185],"inference,":[70,128],"but":[71],"not":[72,190],"both,":[73],"which":[74,188],"limits":[75],"their":[76],"overall":[77],"effectiveness":[78],"analyzing":[80],"defects.":[82],"We":[83],"verify":[84],"issue":[88],"by":[89,147],"experimental":[90],"analysis":[91,124],"seek":[93],"understand":[95],"specific":[97],"reasons":[98],"behind":[99],"this.":[100],"Then,":[101],"design":[103],"enhanced":[105],"fuzzer":[108],"harnesses":[110],"shared":[111],"memory-based":[112],"message":[113],"alleviate":[120],"heavy":[122],"post-execution":[123],"StateAFL":[126,180],"named":[129],"S2fuzzer,":[130],"optimize":[132],"both":[133],"inference":[137,186],"simultaneously.":[138],"Our":[139],"experiments":[140],"reveal":[141],"S2fuzzer":[143,197],"enhances":[144],"4.7x":[148],"compared":[149,178],"StateAFL.":[151],"Simultaneously,":[152],"find":[154],"S2Fuzzer":[156],"infer":[158],"more":[160],"comprehensive":[161],"model.":[163],"This":[164,184],"leads":[165],"9.38%":[168],"increase":[169],"code":[171],"coverage":[172,202],"371":[174],"additional":[175],"crashes":[176],"(1.42x)":[177],"across":[181],"tested":[182],"programs.":[183],"amplification,":[187],"has":[189],"been":[191],"discovered":[192],"previous":[194],"research,":[195],"allows":[196],"reach":[199],"nearly":[200],"equivalent":[201],"superior":[204],"bug":[205],"finding":[206],"ability,":[207],"even":[208],"if":[209],"its":[210],"merely":[214],"1/10":[215],"HNPFuzzer,":[217],"latest":[219],"speedup":[220],"scheme.":[221]},"counts_by_year":[],"updated_date":"2026-07-29T14:22:42.915294","created_date":"2025-10-10T00:00:00"}
