{"id":"https://openalex.org/W4412610510","doi":"https://doi.org/10.1109/hpcc64274.2024.00175","title":"MHFuzz: Advancing Heap Vulnerability Detection through Phased Fuzzing Strategies","display_name":"MHFuzz: Advancing Heap Vulnerability Detection through Phased Fuzzing Strategies","publication_year":2024,"publication_date":"2024-12-13","ids":{"openalex":"https://openalex.org/W4412610510","doi":"https://doi.org/10.1109/hpcc64274.2024.00175"},"language":"en","primary_location":{"id":"doi:10.1109/hpcc64274.2024.00175","is_oa":false,"landing_page_url":"https://doi.org/10.1109/hpcc64274.2024.00175","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"2024 IEEE International Conference on High Performance Computing and Communications (HPCC)","raw_type":"proceedings-article"},"type":"conference-paper","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5101310689","display_name":"Yuxiang Zeng","orcid":"https://orcid.org/0000-0003-0126-3083"},"institutions":[{"id":"https://openalex.org/I76569877","display_name":"Southeast University","ror":"https://ror.org/04ct4d772","country_code":"CN","type":"education","lineage":["https://openalex.org/I76569877"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Yuxiang Zeng","raw_affiliation_strings":["Southeast University,JiangSu,China"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Southeast University,JiangSu,China","institution_ids":["https://openalex.org/I76569877"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5028081336","display_name":"Nan Ma","orcid":"https://orcid.org/0000-0002-5336-9798"},"institutions":[{"id":"https://openalex.org/I76569877","display_name":"Southeast University","ror":"https://ror.org/04ct4d772","country_code":"CN","type":"education","lineage":["https://openalex.org/I76569877"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Nan Ma","raw_affiliation_strings":["Southeast University,JiangSu,China"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Southeast University,JiangSu,China","institution_ids":["https://openalex.org/I76569877"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5114038559","display_name":"Zhongyuan Qin","orcid":null},"institutions":[{"id":"https://openalex.org/I76569877","display_name":"Southeast University","ror":"https://ror.org/04ct4d772","country_code":"CN","type":"education","lineage":["https://openalex.org/I76569877"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Zhongyuan Qin","raw_affiliation_strings":["Southeast University,JiangSu,China"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Southeast University,JiangSu,China","institution_ids":["https://openalex.org/I76569877"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":1,"corresponding_author_ids":[],"corresponding_institution_ids":["https://openalex.org/I76569877"],"apc_list":null,"apc_paid":null,"fwci":0.0,"has_fulltext":false,"cited_by_count":0,"citation_normalized_percentile":{"value":0.39920262,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":null,"biblio":{"volume":null,"issue":null,"first_page":"1306","last_page":"1313"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":0.9711999893188477,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":0.9711999893188477,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/fuzz-testing","display_name":"Fuzz testing","score":0.967484712600708},{"id":"https://openalex.org/keywords/heap","display_name":"Heap (data structure)","score":0.7903502583503723},{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.6327642798423767},{"id":"https://openalex.org/keywords/vulnerability","display_name":"Vulnerability (computing)","score":0.5779138803482056},{"id":"https://openalex.org/keywords/computer-security","display_name":"Computer security","score":0.4198233187198639},{"id":"https://openalex.org/keywords/programming-language","display_name":"Programming language","score":0.10949087142944336},{"id":"https://openalex.org/keywords/software","display_name":"Software","score":0.06995519995689392}],"concepts":[{"id":"https://openalex.org/C111065885","wikidata":"https://www.wikidata.org/wiki/Q1189053","display_name":"Fuzz testing","level":3,"score":0.967484712600708},{"id":"https://openalex.org/C134757568","wikidata":"https://www.wikidata.org/wiki/Q274089","display_name":"Heap (data structure)","level":2,"score":0.7903502583503723},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.6327642798423767},{"id":"https://openalex.org/C95713431","wikidata":"https://www.wikidata.org/wiki/Q631425","display_name":"Vulnerability (computing)","level":2,"score":0.5779138803482056},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.4198233187198639},{"id":"https://openalex.org/C199360897","wikidata":"https://www.wikidata.org/wiki/Q9143","display_name":"Programming language","level":1,"score":0.10949087142944336},{"id":"https://openalex.org/C2777904410","wikidata":"https://www.wikidata.org/wiki/Q7397","display_name":"Software","level":2,"score":0.06995519995689392}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1109/hpcc64274.2024.00175","is_oa":false,"landing_page_url":"https://doi.org/10.1109/hpcc64274.2024.00175","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"2024 IEEE International Conference on High Performance Computing and Communications (HPCC)","raw_type":"proceedings-article"}],"best_oa_location":null,"sustainable_development_goals":[{"display_name":"Climate action","score":0.4699999988079071,"id":"https://metadata.un.org/sdg/13"}],"awards":[],"funders":[],"has_content":{"pdf":false,"grobid_xml":false},"content_urls":null,"referenced_works_count":15,"referenced_works":["https://openalex.org/W1997188340","https://openalex.org/W2535617737","https://openalex.org/W2766540688","https://openalex.org/W2806377938","https://openalex.org/W3047947484","https://openalex.org/W3049735680","https://openalex.org/W4246166885","https://openalex.org/W4251273449","https://openalex.org/W4313563693","https://openalex.org/W4323338666","https://openalex.org/W6766204418","https://openalex.org/W6766830175","https://openalex.org/W6774432395","https://openalex.org/W6776109021","https://openalex.org/W6776771148"],"related_works":["https://openalex.org/W4391375266","https://openalex.org/W2899084033","https://openalex.org/W2748952813","https://openalex.org/W2511770387","https://openalex.org/W3120811337","https://openalex.org/W2766647240","https://openalex.org/W4385301282","https://openalex.org/W2990186179","https://openalex.org/W4210660460","https://openalex.org/W3203597304"],"abstract_inverted_index":{"With":[0],"the":[1,7,89,106,122,132,137,157,163],"rapid":[2],"advancement":[3],"of":[4,9,22,91,110,114,139,165,213],"information":[5],"technology,":[6],"issue":[8],"software":[10],"security":[11,31,49],"is":[12],"increasingly":[13],"gaining":[14],"attention.":[15],"Heap":[16],"memory,":[17],"as":[18,36],"a":[19,63],"key":[20],"component":[21],"memory":[23,38,44,209],"management":[24],"in":[25,58,117,191],"open-source":[26],"software,":[27],"presents":[28],"particularly":[29],"prominent":[30],"concerns.":[32],"Heap-related":[33],"vulnerabilities":[34],"such":[35,56],"heap":[37,208],"overflow,":[39],"use":[40],"after":[41],"free,":[42],"and":[43,54,66,79,83,98,108,156,168],"leaks":[45],"can":[46],"pose":[47],"serious":[48],"threats.":[50],"To":[51],"effectively":[52],"detect":[53],"prevent":[55],"vulnerabilities,":[57,130,210],"this":[59],"paper":[60],"we":[61],"introduce":[62],"new":[64],"multi-phase":[65],"heap-related":[67,77,96,129],"operations":[68,97],"guided":[69],"fuzzer":[70],"called":[71],"MHFuzz.":[72],"This":[73],"method":[74],"focuses":[75,125],"on":[76,126,143],"operations,":[78],"through":[80],"static":[81],"instrumentation":[82],"dynamic":[84],"runtime":[85],"feedback,":[86],"it":[87],"prioritizes":[88],"mutation":[90],"seeds":[92,174],"that":[93,172,184],"trigger":[94],"more":[95,100,176],"allocates":[99],"energy":[101,169],"to":[102,135,147,161],"them,":[103],"thereby":[104],"enhancing":[105],"capability":[107],"efficiency":[109],"vulnerability":[111],"mining.The":[112],"innovation":[113],"MHFuzz":[115,152,185],"lies":[116],"its":[118],"phased":[119],"fuzzing":[120,189],"strategy:":[121],"first":[123],"phase":[124],"extensively":[127],"mining":[128],"while":[131],"second":[133],"phase,":[134],"avoid":[136],"situation":[138],"local":[140],"optima,":[141],"concentrates":[142],"testing":[144,149],"low-frequency":[145],"paths":[146],"improve":[148],"efficiency.":[150],"Furthermore,":[151],"employs":[153],"non-dominated":[154],"sorting":[155],"simulated":[158],"annealing":[159],"algorithm":[160],"optimize":[162],"processes":[164],"seed":[166],"selection":[167],"distribution,":[170],"ensuring":[171],"superior":[173],"have":[175,182],"opportunities":[177],"for":[178],"mutation.":[179],"Experimental":[180],"assessments":[181],"shown":[183],"outperforms":[186],"four":[187],"advanced":[188],"tools":[190],"tests":[192],"across":[193],"eight":[194],"real-world":[195],"programs,":[196],"not":[197],"only":[198],"increasing":[199],"code":[200],"coverage":[201],"but":[202],"also":[203],"successfully":[204],"discovering":[205],"five":[206],"unknown":[207],"which":[211],"three":[212],"them":[214],"were":[215],"subsequently":[216],"assigned":[217],"CVE":[218],"numbers.":[219]},"counts_by_year":[],"updated_date":"2026-07-29T14:22:42.915294","created_date":"2025-10-10T00:00:00"}