{"id":"https://openalex.org/W3140949594","doi":"https://doi.org/10.1109/iwast.2012.6228985","title":"SECFUZZ: Fuzz-testing security protocols","display_name":"SECFUZZ: Fuzz-testing security protocols","publication_year":2012,"publication_date":"2012-06-01","ids":{"openalex":"https://openalex.org/W3140949594","doi":"https://doi.org/10.1109/iwast.2012.6228985","mag":"3140949594"},"language":"en","primary_location":{"id":"doi:10.1109/iwast.2012.6228985","is_oa":false,"landing_page_url":"https://doi.org/10.1109/iwast.2012.6228985","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"2012 7th International Workshop on Automation of Software Test (AST)","raw_type":"proceedings-article"},"type":"conference-paper","indexed_in":["crossref","datacite"],"open_access":{"is_oa":true,"oa_status":"green","oa_url":"http://hdl.handle.net/20.500.11850/53922","any_repository_has_fulltext":true},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5073801126","display_name":"Petar Tsankov","orcid":null},"institutions":[{"id":"https://openalex.org/I35440088","display_name":"ETH Zurich","ror":"https://ror.org/05a28rw58","country_code":"CH","type":"education","lineage":["https://openalex.org/I2799323385","https://openalex.org/I35440088"]}],"countries":["CH"],"is_corresponding":false,"raw_author_name":"Petar Tsankov","raw_affiliation_strings":["Institute of Information Security, ETH Zurich, Switzerland"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Institute of Information Security, ETH Zurich, Switzerland","institution_ids":["https://openalex.org/I35440088"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5112807617","display_name":"Mohammad Torabi Dashti","orcid":null},"institutions":[{"id":"https://openalex.org/I35440088","display_name":"ETH Zurich","ror":"https://ror.org/05a28rw58","country_code":"CH","type":"education","lineage":["https://openalex.org/I2799323385","https://openalex.org/I35440088"]}],"countries":["CH"],"is_corresponding":false,"raw_author_name":"Mohammad Torabi Dashti","raw_affiliation_strings":["Institute of Information Security, ETH Zurich, Switzerland"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Institute of Information Security, ETH Zurich, Switzerland","institution_ids":["https://openalex.org/I35440088"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5025344654","display_name":"David Basin","orcid":"https://orcid.org/0000-0003-2952-939X"},"institutions":[{"id":"https://openalex.org/I35440088","display_name":"ETH Zurich","ror":"https://ror.org/05a28rw58","country_code":"CH","type":"education","lineage":["https://openalex.org/I2799323385","https://openalex.org/I35440088"]}],"countries":["CH"],"is_corresponding":false,"raw_author_name":"David Basin","raw_affiliation_strings":["Institute of Information Security, ETH Zurich, Switzerland"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Institute of Information Security, ETH Zurich, Switzerland","institution_ids":["https://openalex.org/I35440088"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":1,"corresponding_author_ids":[],"corresponding_institution_ids":["https://openalex.org/I35440088"],"apc_list":null,"apc_paid":null,"fwci":null,"has_fulltext":false,"cited_by_count":38,"citation_normalized_percentile":null,"cited_by_percentile_year":null,"biblio":{"volume":null,"issue":null,"first_page":"1","last_page":"7"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10743","display_name":"Software Testing and Debugging Techniques","score":0.9998999834060669,"subfield":{"id":"https://openalex.org/subfields/1712","display_name":"Software"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T10743","display_name":"Software Testing and Debugging Techniques","score":0.9998999834060669,"subfield":{"id":"https://openalex.org/subfields/1712","display_name":"Software"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":0.9986000061035156,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T12423","display_name":"Software Reliability and Analysis Research","score":0.9932000041007996,"subfield":{"id":"https://openalex.org/subfields/1712","display_name":"Software"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/fuzz-testing","display_name":"Fuzz testing","score":0.9301257133483887},{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.8456673622131348},{"id":"https://openalex.org/keywords/stateful-firewall","display_name":"Stateful firewall","score":0.7317302227020264},{"id":"https://openalex.org/keywords/cryptographic-protocol","display_name":"Cryptographic protocol","score":0.6447542905807495},{"id":"https://openalex.org/keywords/encryption","display_name":"Encryption","score":0.5933934450149536},{"id":"https://openalex.org/keywords/protocol","display_name":"Protocol (science)","score":0.5292115807533264},{"id":"https://openalex.org/keywords/cryptography","display_name":"Cryptography","score":0.521266758441925},{"id":"https://openalex.org/keywords/implementation","display_name":"Implementation","score":0.5090498328208923},{"id":"https://openalex.org/keywords/key","display_name":"Key (lock)","score":0.4540872573852539},{"id":"https://openalex.org/keywords/oracle","display_name":"Oracle","score":0.44504523277282715},{"id":"https://openalex.org/keywords/modular-design","display_name":"Modular design","score":0.4281325340270996},{"id":"https://openalex.org/keywords/set","display_name":"Set (abstract data type)","score":0.4206165671348572},{"id":"https://openalex.org/keywords/computer-network","display_name":"Computer network","score":0.3612861931324005},{"id":"https://openalex.org/keywords/computer-security","display_name":"Computer security","score":0.3606405556201935},{"id":"https://openalex.org/keywords/programming-language","display_name":"Programming language","score":0.2198186218738556},{"id":"https://openalex.org/keywords/software","display_name":"Software","score":0.16948604583740234}],"concepts":[{"id":"https://openalex.org/C111065885","wikidata":"https://www.wikidata.org/wiki/Q1189053","display_name":"Fuzz testing","level":3,"score":0.9301257133483887},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.8456673622131348},{"id":"https://openalex.org/C22927095","wikidata":"https://www.wikidata.org/wiki/Q1784206","display_name":"Stateful firewall","level":3,"score":0.7317302227020264},{"id":"https://openalex.org/C33884865","wikidata":"https://www.wikidata.org/wiki/Q1254335","display_name":"Cryptographic protocol","level":3,"score":0.6447542905807495},{"id":"https://openalex.org/C148730421","wikidata":"https://www.wikidata.org/wiki/Q141090","display_name":"Encryption","level":2,"score":0.5933934450149536},{"id":"https://openalex.org/C2780385302","wikidata":"https://www.wikidata.org/wiki/Q367158","display_name":"Protocol (science)","level":3,"score":0.5292115807533264},{"id":"https://openalex.org/C178489894","wikidata":"https://www.wikidata.org/wiki/Q8789","display_name":"Cryptography","level":2,"score":0.521266758441925},{"id":"https://openalex.org/C26713055","wikidata":"https://www.wikidata.org/wiki/Q245962","display_name":"Implementation","level":2,"score":0.5090498328208923},{"id":"https://openalex.org/C26517878","wikidata":"https://www.wikidata.org/wiki/Q228039","display_name":"Key (lock)","level":2,"score":0.4540872573852539},{"id":"https://openalex.org/C55166926","wikidata":"https://www.wikidata.org/wiki/Q2892946","display_name":"Oracle","level":2,"score":0.44504523277282715},{"id":"https://openalex.org/C101468663","wikidata":"https://www.wikidata.org/wiki/Q1620158","display_name":"Modular design","level":2,"score":0.4281325340270996},{"id":"https://openalex.org/C177264268","wikidata":"https://www.wikidata.org/wiki/Q1514741","display_name":"Set (abstract data type)","level":2,"score":0.4206165671348572},{"id":"https://openalex.org/C31258907","wikidata":"https://www.wikidata.org/wiki/Q1301371","display_name":"Computer network","level":1,"score":0.3612861931324005},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.3606405556201935},{"id":"https://openalex.org/C199360897","wikidata":"https://www.wikidata.org/wiki/Q9143","display_name":"Programming language","level":1,"score":0.2198186218738556},{"id":"https://openalex.org/C2777904410","wikidata":"https://www.wikidata.org/wiki/Q7397","display_name":"Software","level":2,"score":0.16948604583740234},{"id":"https://openalex.org/C158379750","wikidata":"https://www.wikidata.org/wiki/Q214111","display_name":"Network packet","level":2,"score":0.0},{"id":"https://openalex.org/C71924100","wikidata":"https://www.wikidata.org/wiki/Q11190","display_name":"Medicine","level":0,"score":0.0},{"id":"https://openalex.org/C142724271","wikidata":"https://www.wikidata.org/wiki/Q7208","display_name":"Pathology","level":1,"score":0.0},{"id":"https://openalex.org/C204787440","wikidata":"https://www.wikidata.org/wiki/Q188504","display_name":"Alternative medicine","level":2,"score":0.0}],"mesh":[],"locations_count":3,"locations":[{"id":"doi:10.1109/iwast.2012.6228985","is_oa":false,"landing_page_url":"https://doi.org/10.1109/iwast.2012.6228985","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"2012 7th International Workshop on Automation of Software Test (AST)","raw_type":"proceedings-article"},{"id":"pmh:oai:www.research-collection.ethz.ch:20.500.11850/53922","is_oa":true,"landing_page_url":"http://hdl.handle.net/20.500.11850/53922","pdf_url":null,"source":{"id":"https://openalex.org/S4306402302","display_name":"Repository for Publications and Research Data (ETH Zurich)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I35440088","host_organization_name":"ETH Zurich","host_organization_lineage":["https://openalex.org/I35440088"],"host_organization_lineage_names":[],"type":"repository"},"license":"other-oa","license_id":"https://openalex.org/licenses/other-oa","version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":"7th International Workshop on Automation of Software Test (AST 2012)","raw_type":"info:eu-repo/semantics/conferenceObject"},{"id":"doi:10.3929/ethz-a-007560920","is_oa":true,"landing_page_url":"https://doi.org/10.3929/ethz-a-007560920","pdf_url":null,"source":{"id":"https://openalex.org/S7407051236","display_name":"ETH Z\u00fcrich Research Collection","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":null,"host_organization_name":null,"host_organization_lineage":[],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":null,"is_accepted":false,"is_published":null,"raw_source_name":null,"raw_type":"Other"}],"best_oa_location":{"id":"pmh:oai:www.research-collection.ethz.ch:20.500.11850/53922","is_oa":true,"landing_page_url":"http://hdl.handle.net/20.500.11850/53922","pdf_url":null,"source":{"id":"https://openalex.org/S4306402302","display_name":"Repository for Publications and Research Data (ETH Zurich)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I35440088","host_organization_name":"ETH Zurich","host_organization_lineage":["https://openalex.org/I35440088"],"host_organization_lineage_names":[],"type":"repository"},"license":"other-oa","license_id":"https://openalex.org/licenses/other-oa","version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":"7th International Workshop on Automation of Software Test (AST 2012)","raw_type":"info:eu-repo/semantics/conferenceObject"},"sustainable_development_goals":[{"display_name":"Peace, Justice and strong institutions","id":"https://metadata.un.org/sdg/16","score":0.7300000190734863}],"awards":[],"funders":[],"has_content":{"pdf":false,"grobid_xml":false},"content_urls":null,"referenced_works_count":16,"referenced_works":["https://openalex.org/W588120939","https://openalex.org/W1494154039","https://openalex.org/W1710734607","https://openalex.org/W1884983968","https://openalex.org/W1949661937","https://openalex.org/W1983119041","https://openalex.org/W2002934700","https://openalex.org/W2051634947","https://openalex.org/W2116818527","https://openalex.org/W2129975948","https://openalex.org/W2149792581","https://openalex.org/W4237492309","https://openalex.org/W4239035626","https://openalex.org/W6637688222","https://openalex.org/W6677864018","https://openalex.org/W6679554657"],"related_works":["https://openalex.org/W2511770387","https://openalex.org/W2129975948","https://openalex.org/W2591875911","https://openalex.org/W2736754676","https://openalex.org/W4287833485","https://openalex.org/W4387191767","https://openalex.org/W4221162427","https://openalex.org/W4385412215","https://openalex.org/W3194450632","https://openalex.org/W2750938873"],"abstract_inverted_index":{"We":[0,26,66,84,113],"propose":[1],"a":[2,28,43,86],"light-weight,":[3],"yet":[4],"effective,":[5],"technique":[6,12,120],"for":[7,127],"fuzz-testing":[8,111,125],"security":[9],"protocols.":[10],"Our":[11],"is":[13],"modular,":[14],"it":[15],"exercises":[16],"(stateful)":[17],"protocol":[18,33,101],"implementations":[19,94],"in":[20,77],"depth,":[21],"and":[22,38,74,102],"handles":[23],"encrypted":[24,82],"traffic.":[25],"use":[27],"concrete":[29],"implementation":[30],"of":[31,45,95,118],"the":[32,40,54,61,68,71,96,116],"to":[34,59,79,121],"generate":[35],"valid":[36],"inputs,":[37],"mutate":[39,81],"inputs":[41],"using":[42],"set":[44],"fuzz":[46],"operators.":[47],"A":[48],"dynamic":[49],"memory":[50],"analysis":[51],"tool":[52],"monitors":[53],"execution":[55],"as":[56],"an":[57],"oracle":[58],"detect":[60],"vulnerabilities":[62,107],"exposed":[63],"by":[64,109],"fuzz-testing.":[65],"provide":[67],"fuzzer":[69],"with":[70],"necessary":[72],"keys":[73],"cryptographic":[75],"algorithms":[76],"order":[78],"properly":[80],"messages.":[83],"present":[85],"case":[87],"study":[88],"on":[89,104],"two":[90,105,122],"widely":[91],"used,":[92],"mature":[93],"Internet":[97],"Key":[98],"Exchange":[99],"(IKE)":[100],"report":[103],"new":[106],"discovered":[108],"our":[110,119],"tool.":[112],"also":[114],"compare":[115],"effectiveness":[117],"existing":[123],"model-based":[124],"tools":[126],"IKE.":[128]},"counts_by_year":[{"year":2026,"cited_by_count":1},{"year":2025,"cited_by_count":2},{"year":2024,"cited_by_count":5},{"year":2023,"cited_by_count":5},{"year":2022,"cited_by_count":1},{"year":2020,"cited_by_count":4},{"year":2019,"cited_by_count":4},{"year":2018,"cited_by_count":5},{"year":2017,"cited_by_count":4},{"year":2016,"cited_by_count":1},{"year":2015,"cited_by_count":5},{"year":2013,"cited_by_count":1}],"updated_date":"2026-07-14T23:27:15.235271","created_date":"2025-10-10T00:00:00"}