{"id":"https://openalex.org/W4297802342","doi":"https://doi.org/10.1109/icis54925.2022.9882418","title":"FIoTFuzzer: Response-Based Black-Box fuzzing for IoT Devices","display_name":"FIoTFuzzer: Response-Based Black-Box fuzzing for IoT Devices","publication_year":2022,"publication_date":"2022-06-26","ids":{"openalex":"https://openalex.org/W4297802342","doi":"https://doi.org/10.1109/icis54925.2022.9882418"},"language":"en","primary_location":{"id":"doi:10.1109/icis54925.2022.9882418","is_oa":false,"landing_page_url":"https://doi.org/10.1109/icis54925.2022.9882418","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"2022 IEEE/ACIS 22nd International Conference on Computer and Information Science (ICIS)","raw_type":"proceedings-article"},"type":"article","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5101742818","display_name":"Zelin Xu","orcid":"https://orcid.org/0000-0002-1915-6924"},"institutions":[{"id":"https://openalex.org/I4391768176","display_name":"State Key Laboratory of Media Convergence and Communication","ror":"https://ror.org/0595ys057","country_code":null,"type":"facility","lineage":["https://openalex.org/I4391768176","https://openalex.org/I75689368"]},{"id":"https://openalex.org/I75689368","display_name":"Communication University of China","ror":"https://ror.org/04facbs33","country_code":"CN","type":"education","lineage":["https://openalex.org/I75689368"]}],"countries":["CN"],"is_corresponding":true,"raw_author_name":"Zelin Xu","raw_affiliation_strings":["University of China,State Key Laboratory of Media Convergence and Communication, Communication,Beijing,China","State Key Laboratory of Media Convergence and Communication, Communication, University of China, Beijing, China"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"University of China,State Key Laboratory of Media Convergence and Communication, Communication,Beijing,China","institution_ids":["https://openalex.org/I75689368","https://openalex.org/I4391768176"]},{"raw_affiliation_string":"State Key Laboratory of Media Convergence and Communication, Communication, University of China, Beijing, China","institution_ids":["https://openalex.org/I75689368"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5101768056","display_name":"Wei Huang","orcid":"https://orcid.org/0000-0003-1231-1394"},"institutions":[{"id":"https://openalex.org/I4391768176","display_name":"State Key Laboratory of Media Convergence and Communication","ror":"https://ror.org/0595ys057","country_code":null,"type":"facility","lineage":["https://openalex.org/I4391768176","https://openalex.org/I75689368"]},{"id":"https://openalex.org/I75689368","display_name":"Communication University of China","ror":"https://ror.org/04facbs33","country_code":"CN","type":"education","lineage":["https://openalex.org/I75689368"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Wei Huang","raw_affiliation_strings":["University of China,State Key Laboratory of Media Convergence and Communication, Communication,Beijing,China","State Key Laboratory of Media Convergence and Communication, Communication, University of China, Beijing, China"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"University of China,State Key Laboratory of Media Convergence and Communication, Communication,Beijing,China","institution_ids":["https://openalex.org/I75689368","https://openalex.org/I4391768176"]},{"raw_affiliation_string":"State Key Laboratory of Media Convergence and Communication, Communication, University of China, Beijing, China","institution_ids":["https://openalex.org/I75689368"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5037277507","display_name":"Wenqing Fan","orcid":null},"institutions":[{"id":"https://openalex.org/I4391768176","display_name":"State Key Laboratory of Media Convergence and Communication","ror":"https://ror.org/0595ys057","country_code":null,"type":"facility","lineage":["https://openalex.org/I4391768176","https://openalex.org/I75689368"]},{"id":"https://openalex.org/I75689368","display_name":"Communication University of China","ror":"https://ror.org/04facbs33","country_code":"CN","type":"education","lineage":["https://openalex.org/I75689368"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Wenqing Fan","raw_affiliation_strings":["University of China,State Key Laboratory of Media Convergence and Communication, Communication,Beijing,China","State Key Laboratory of Media Convergence and Communication, Communication, University of China, Beijing, China"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"University of China,State Key Laboratory of Media Convergence and Communication, Communication,Beijing,China","institution_ids":["https://openalex.org/I75689368","https://openalex.org/I4391768176"]},{"raw_affiliation_string":"State Key Laboratory of Media Convergence and Communication, Communication, University of China, Beijing, China","institution_ids":["https://openalex.org/I75689368"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5065317472","display_name":"Yixuan Cheng","orcid":"https://orcid.org/0000-0002-7937-3445"},"institutions":[{"id":"https://openalex.org/I75689368","display_name":"Communication University of China","ror":"https://ror.org/04facbs33","country_code":"CN","type":"education","lineage":["https://openalex.org/I75689368"]},{"id":"https://openalex.org/I4391768176","display_name":"State Key Laboratory of Media Convergence and Communication","ror":"https://ror.org/0595ys057","country_code":null,"type":"facility","lineage":["https://openalex.org/I4391768176","https://openalex.org/I75689368"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Yixuan Cheng","raw_affiliation_strings":["University of China,State Key Laboratory of Media Convergence and Communication, Communication,Beijing,China","State Key Laboratory of Media Convergence and Communication, Communication, University of China, Beijing, China"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"University of China,State Key Laboratory of Media Convergence and Communication, Communication,Beijing,China","institution_ids":["https://openalex.org/I75689368","https://openalex.org/I4391768176"]},{"raw_affiliation_string":"State Key Laboratory of Media Convergence and Communication, Communication, University of China, Beijing, China","institution_ids":["https://openalex.org/I75689368"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":4,"corresponding_author_ids":["https://openalex.org/A5101742818"],"corresponding_institution_ids":["https://openalex.org/I4391768176","https://openalex.org/I75689368"],"apc_list":null,"apc_paid":null,"fwci":1.6599,"has_fulltext":false,"cited_by_count":8,"citation_normalized_percentile":{"value":0.83513097,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":{"min":90,"max":99},"biblio":{"volume":null,"issue":null,"first_page":"239","last_page":"244"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10743","display_name":"Software Testing and Debugging Techniques","score":0.9998999834060669,"subfield":{"id":"https://openalex.org/subfields/1712","display_name":"Software"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T10743","display_name":"Software Testing and Debugging Techniques","score":0.9998999834060669,"subfield":{"id":"https://openalex.org/subfields/1712","display_name":"Software"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":0.9998999834060669,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T12423","display_name":"Software Reliability and Analysis Research","score":0.996399998664856,"subfield":{"id":"https://openalex.org/subfields/1712","display_name":"Software"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/fuzz-testing","display_name":"Fuzz testing","score":0.9761446714401245},{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.8459180593490601},{"id":"https://openalex.org/keywords/firmware","display_name":"Firmware","score":0.5695075988769531},{"id":"https://openalex.org/keywords/source-code","display_name":"Source code","score":0.44112229347229004},{"id":"https://openalex.org/keywords/code-coverage","display_name":"Code coverage","score":0.43575823307037354},{"id":"https://openalex.org/keywords/computer-network","display_name":"Computer network","score":0.34589824080467224},{"id":"https://openalex.org/keywords/programming-language","display_name":"Programming language","score":0.26373904943466187},{"id":"https://openalex.org/keywords/operating-system","display_name":"Operating system","score":0.23013415932655334},{"id":"https://openalex.org/keywords/software","display_name":"Software","score":0.19784733653068542}],"concepts":[{"id":"https://openalex.org/C111065885","wikidata":"https://www.wikidata.org/wiki/Q1189053","display_name":"Fuzz testing","level":3,"score":0.9761446714401245},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.8459180593490601},{"id":"https://openalex.org/C67212190","wikidata":"https://www.wikidata.org/wiki/Q104851","display_name":"Firmware","level":2,"score":0.5695075988769531},{"id":"https://openalex.org/C43126263","wikidata":"https://www.wikidata.org/wiki/Q128751","display_name":"Source code","level":2,"score":0.44112229347229004},{"id":"https://openalex.org/C53942775","wikidata":"https://www.wikidata.org/wiki/Q1211721","display_name":"Code coverage","level":3,"score":0.43575823307037354},{"id":"https://openalex.org/C31258907","wikidata":"https://www.wikidata.org/wiki/Q1301371","display_name":"Computer network","level":1,"score":0.34589824080467224},{"id":"https://openalex.org/C199360897","wikidata":"https://www.wikidata.org/wiki/Q9143","display_name":"Programming language","level":1,"score":0.26373904943466187},{"id":"https://openalex.org/C111919701","wikidata":"https://www.wikidata.org/wiki/Q9135","display_name":"Operating system","level":1,"score":0.23013415932655334},{"id":"https://openalex.org/C2777904410","wikidata":"https://www.wikidata.org/wiki/Q7397","display_name":"Software","level":2,"score":0.19784733653068542}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1109/icis54925.2022.9882418","is_oa":false,"landing_page_url":"https://doi.org/10.1109/icis54925.2022.9882418","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"2022 IEEE/ACIS 22nd International Conference on Computer and Information Science (ICIS)","raw_type":"proceedings-article"}],"best_oa_location":null,"sustainable_development_goals":[],"awards":[],"funders":[{"id":"https://openalex.org/F4320337504","display_name":"Research and Development","ror":"https://ror.org/027s68j25"}],"has_content":{"pdf":false,"grobid_xml":false},"content_urls":null,"referenced_works_count":7,"referenced_works":["https://openalex.org/W2121084350","https://openalex.org/W2216041415","https://openalex.org/W2791018263","https://openalex.org/W3151659441","https://openalex.org/W3155102819","https://openalex.org/W3212565000","https://openalex.org/W4225009177"],"related_works":["https://openalex.org/W4210759690","https://openalex.org/W4317463648","https://openalex.org/W157156687","https://openalex.org/W2053597677","https://openalex.org/W4286331356","https://openalex.org/W4282585697","https://openalex.org/W4309675212","https://openalex.org/W4220856780","https://openalex.org/W4221149424","https://openalex.org/W3011657272"],"abstract_inverted_index":{"To":[0,144,178],"prevent":[1],"IoT":[2,34,241,264],"devices":[3,35],"from":[4],"being":[5],"exploited,":[6],"it":[7,126],"is":[8,27,48,119,127,257],"particularly":[9],"important":[10],"to":[11,134,165,259],"detect":[12,260],"vulnerabilities":[13,262,279],"as":[14,16],"many":[15],"possible":[17],"during":[18],"the":[19,42,46,98,136,142,146,167,180,186,191,197,210],"device":[20,53,61],"development":[21],"process.":[22],"The":[23,102,251],"black-box":[24,65,154],"fuzzing":[25,66,107,132,155,224],"test":[26],"widely":[28],"used":[29],"in":[30,51,122,263],"vulnerability":[31],"detection":[32],"for":[33,36,129],"several":[37],"reasons.":[38],"First":[39],"of":[40,45,60,72,90,106,117,138,141,174,196,201,212,220],"all,":[41],"source":[43,59],"code":[44],"firmware":[47,118],"rarely":[49,120],"provided":[50,121],"public,":[52],"response":[54],"messages":[55],"are":[56],"a":[57,70,87,152,162],"valuable":[58],"status.":[62],"In":[63,267],"legacy":[64],"tests,":[67],"there":[68],"was":[69],"lack":[71],"checks":[73,85],"on":[74,190,206,239],"network":[75],"protocols,":[76],"message":[77,163,187,207],"formats":[78],"and":[79,104,125,171,229,248,274,285],"encodings.":[80],"Byte-to-byte":[81],"mutation":[82,195,203],"without":[83],"these":[84,291],"produced":[86],"large":[88],"amount":[89],"garbage":[91],"input":[92],"data,":[93],"which":[94,243],"could":[95],"not":[96,231],"reach":[97,216],"deep-level":[99],"function":[100],"code.":[101],"efficiency":[103],"accuracy":[105],"testing":[108],"were":[109,237],"negatively":[110],"impacted":[111],"accordingly.":[112],"Secondly,":[113],"communication":[114,176],"protocol":[115],"specification":[116,214],"public":[123],"too,":[124],"difficult":[128],"existing":[130],"grammar-based":[131],"strategies":[133],"distinguish":[135],"meaning":[137],"each":[139],"field":[140],"message.":[143],"solve":[145],"above":[147],"issues,":[148],"this":[149],"paper":[150],"proposes":[151],"response-based":[153],"method,":[156],"named":[157],"FIoTFuzzer.":[158],"We":[159],"set":[160],"up":[161],"adapter":[164],"identify":[166],"protocol,":[168],"format,":[169],"encoding":[170],"other":[172],"information":[173],"original":[175],"packets.":[177],"improve":[179],"syntax":[181],"inference":[182],"capability,":[183],"FIoTFuzzer":[184,276],"divides":[185],"segment":[188,208],"based":[189,205],"response,":[192],"avoiding":[193],"blind":[194],"content.":[198],"This":[199,223],"method":[200,225],"using":[202],"strategy":[204],"under":[209],"premise":[211],"format":[213],"can":[215],"deep":[217],"functional":[218],"components":[219],"smart":[221,246],"devices.":[222],"has":[226],"lightweight":[227],"dependencies":[228],"does":[230],"require":[232],"reverse":[233],"engineering.":[234],"Our":[235],"tests":[236,271],"evaluated":[238],"12":[240],"devices,":[242],"included":[244],"routers,":[245],"bulbs":[247],"IP":[249],"cameras.":[250],"results":[252],"show":[253],"that:":[254],"(1)":[255],"FIoFuzzer":[256],"able":[258],"real-world":[261],"devices;":[265],"(2)":[266],"our":[268],"benchmark":[269],"comparison":[270],"with":[272],"Boofuzz":[273,281],"Sulley,":[275],"detected":[277,282,287],"9":[278,292],"while":[280],"only":[283,288],"5":[284],"Sulley":[286],"4":[289],"among":[290],"vulnerabilities.":[293]},"counts_by_year":[{"year":2026,"cited_by_count":2},{"year":2025,"cited_by_count":1},{"year":2024,"cited_by_count":4},{"year":2023,"cited_by_count":1}],"updated_date":"2026-05-26T13:28:51.108037","created_date":"2025-10-10T00:00:00"}
