{"id":"https://openalex.org/W4400727190","doi":"https://doi.org/10.1109/iwcmc61514.2024.10592348","title":"Exploring the Frontiers of Firmware Fuzzing: \u03bcAFL\u2019s Application on Cortex M4 and Unix Programs","display_name":"Exploring the Frontiers of Firmware Fuzzing: \u03bcAFL\u2019s Application on Cortex M4 and Unix Programs","publication_year":2024,"publication_date":"2024-05-27","ids":{"openalex":"https://openalex.org/W4400727190","doi":"https://doi.org/10.1109/iwcmc61514.2024.10592348"},"language":"en","primary_location":{"id":"doi:10.1109/iwcmc61514.2024.10592348","is_oa":false,"landing_page_url":"http://dx.doi.org/10.1109/iwcmc61514.2024.10592348","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"2024 International Wireless Communications and Mobile Computing (IWCMC)","raw_type":"proceedings-article"},"type":"conference-paper","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5045578430","display_name":"Safayat Bin Hakim","orcid":"https://orcid.org/0000-0002-8119-7911"},"institutions":[{"id":"https://openalex.org/I79272384","display_name":"University of Maryland, Baltimore County","ror":"https://ror.org/02qskvh78","country_code":"US","type":"education","lineage":["https://openalex.org/I79272384"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Safayat Bin Hakim","raw_affiliation_strings":["University of Maryland, Baltimore County,Department of Information Systems,Baltimore,MD,USA,21250"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"University of Maryland, Baltimore County,Department of Information Systems,Baltimore,MD,USA,21250","institution_ids":["https://openalex.org/I79272384"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5065179238","display_name":"Muhammad Adil","orcid":"https://orcid.org/0000-0003-4494-8576"},"institutions":[{"id":"https://openalex.org/I63190737","display_name":"University at Buffalo, State University of New York","ror":"https://ror.org/01y64my43","country_code":"US","type":"education","lineage":["https://openalex.org/I63190737"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Muhammad Adil","raw_affiliation_strings":["The State University of New York at Buffalo,Computer Science and Engineering,Buffalo,NY,USA,14260"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"The State University of New York at Buffalo,Computer Science and Engineering,Buffalo,NY,USA,14260","institution_ids":["https://openalex.org/I63190737"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5064274622","display_name":"Jordi Mongay Batalla","orcid":"https://orcid.org/0000-0002-1489-5138"},"institutions":[{"id":"https://openalex.org/I108403487","display_name":"Warsaw University of Technology","ror":"https://ror.org/00y0xnp53","country_code":"PL","type":"education","lineage":["https://openalex.org/I108403487"]}],"countries":["PL"],"is_corresponding":false,"raw_author_name":"Jordi Mongay Batalla","raw_affiliation_strings":["Warsaw University of Technology,Institute of Telecommunications Electronics and Information Technology,Warsaw,Poland"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Warsaw University of Technology,Institute of Telecommunications Electronics and Information Technology,Warsaw,Poland","institution_ids":["https://openalex.org/I108403487"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5050729772","display_name":"Constandinos X. Mavromoustakis","orcid":"https://orcid.org/0000-0003-0333-8034"},"institutions":[{"id":"https://openalex.org/I17389662","display_name":"University of Nicosia","ror":"https://ror.org/04v18t651","country_code":"CY","type":"education","lineage":["https://openalex.org/I17389662"]}],"countries":["CY"],"is_corresponding":false,"raw_author_name":"Constandinos X. Mavromoustakis","raw_affiliation_strings":["University of Nicosia,School of Sciences and Engineering,Department of Computer Science,Nicosia,Cyprus"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"University of Nicosia,School of Sciences and Engineering,Department of Computer Science,Nicosia,Cyprus","institution_ids":["https://openalex.org/I17389662"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5079301418","display_name":"Houbing Song","orcid":"https://orcid.org/0000-0003-2631-9223"},"institutions":[{"id":"https://openalex.org/I79272384","display_name":"University of Maryland, Baltimore County","ror":"https://ror.org/02qskvh78","country_code":"US","type":"education","lineage":["https://openalex.org/I79272384"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Houbing Herbert Song","raw_affiliation_strings":["University of Maryland, Baltimore County,Department of Information Systems,Baltimore,MD,USA,21250"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"University of Maryland, Baltimore County,Department of Information Systems,Baltimore,MD,USA,21250","institution_ids":["https://openalex.org/I79272384"]}]}],"institutions":[],"countries_distinct_count":3,"institutions_distinct_count":4,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":0.5224,"has_fulltext":false,"cited_by_count":1,"citation_normalized_percentile":{"value":0.6105615,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":{"min":91,"max":95},"biblio":{"volume":null,"issue":null,"first_page":"1141","last_page":"1148"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10430","display_name":"Software Engineering Techniques and Practices","score":0.3066999912261963,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T10430","display_name":"Software Engineering Techniques and Practices","score":0.3066999912261963,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/fuzz-testing","display_name":"Fuzz testing","score":0.9712750911712646},{"id":"https://openalex.org/keywords/unix","display_name":"Unix","score":0.9182084798812866},{"id":"https://openalex.org/keywords/firmware","display_name":"Firmware","score":0.9110689759254456},{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.6486361026763916},{"id":"https://openalex.org/keywords/operating-system","display_name":"Operating system","score":0.509128987789154},{"id":"https://openalex.org/keywords/programming-language","display_name":"Programming language","score":0.502173900604248},{"id":"https://openalex.org/keywords/software-engineering","display_name":"Software engineering","score":0.40295732021331787},{"id":"https://openalex.org/keywords/software","display_name":"Software","score":0.24042508006095886}],"concepts":[{"id":"https://openalex.org/C111065885","wikidata":"https://www.wikidata.org/wiki/Q1189053","display_name":"Fuzz testing","level":3,"score":0.9712750911712646},{"id":"https://openalex.org/C112968700","wikidata":"https://www.wikidata.org/wiki/Q11368","display_name":"Unix","level":3,"score":0.9182084798812866},{"id":"https://openalex.org/C67212190","wikidata":"https://www.wikidata.org/wiki/Q104851","display_name":"Firmware","level":2,"score":0.9110689759254456},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.6486361026763916},{"id":"https://openalex.org/C111919701","wikidata":"https://www.wikidata.org/wiki/Q9135","display_name":"Operating system","level":1,"score":0.509128987789154},{"id":"https://openalex.org/C199360897","wikidata":"https://www.wikidata.org/wiki/Q9143","display_name":"Programming language","level":1,"score":0.502173900604248},{"id":"https://openalex.org/C115903868","wikidata":"https://www.wikidata.org/wiki/Q80993","display_name":"Software engineering","level":1,"score":0.40295732021331787},{"id":"https://openalex.org/C2777904410","wikidata":"https://www.wikidata.org/wiki/Q7397","display_name":"Software","level":2,"score":0.24042508006095886}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1109/iwcmc61514.2024.10592348","is_oa":false,"landing_page_url":"http://dx.doi.org/10.1109/iwcmc61514.2024.10592348","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"2024 International Wireless Communications and Mobile Computing (IWCMC)","raw_type":"proceedings-article"}],"best_oa_location":null,"sustainable_development_goals":[],"awards":[],"funders":[{"id":"https://openalex.org/F4320306076","display_name":"National Science Foundation","ror":"https://ror.org/021nxhr62"}],"has_content":{"grobid_xml":false,"pdf":false},"content_urls":null,"referenced_works_count":7,"referenced_works":["https://openalex.org/W2594266659","https://openalex.org/W2782780792","https://openalex.org/W2998321643","https://openalex.org/W4220806723","https://openalex.org/W4285301025","https://openalex.org/W4322504467","https://openalex.org/W4386569390"],"related_works":["https://openalex.org/W3207216830","https://openalex.org/W4378373752","https://openalex.org/W2158978621","https://openalex.org/W2354251310","https://openalex.org/W3053791662","https://openalex.org/W3123018244","https://openalex.org/W3158820933","https://openalex.org/W2370505686","https://openalex.org/W2486626696","https://openalex.org/W2981101256"],"abstract_inverted_index":{"The":[0,129,147],"aim":[1],"of":[2,74,88,131,149,182,192],"this":[3],"study":[4,83],"is":[5],"to":[6,169,186],"investigate":[7],"into":[8,142],"$\\mu":[9,156],"\\mathrm{AFL}$,":[10],"a":[11,85],"non-intrusive,":[12],"feedback-driven":[13],"fuzzing":[14,75,89,167,184],"framework,":[15],"evaluated":[16],"on":[17,26,91,112],"Cortex":[18,29],"M4":[19,30],"embedded":[20,54,175],"systems":[21,173],"and":[22,55,72,126,135],"Unix":[23],"platforms,":[24],"focusing":[25],"the":[27,34,70,82,99,103,143,163,180,188],"STM32F407VE":[28,100],"microcontroller.":[31],"By":[32],"leveraging":[33],"SEGGER":[35],"J-Trace":[36],"Pro":[37],"for":[38,98,165,174],"trace":[39],"collection,":[40],"it":[41],"demonstrates":[42],"$\\mu$AFL\u2019s":[43,64],"utility":[44],"beyond":[45],"its":[46,50],"traditional":[47,67],"scope,":[48],"showcasing":[49],"efficacy":[51],"in":[52,77,106],"both":[53],"general-purpose":[56],"computing":[57,194],"environments.":[58,195],"Our":[59],"analysis,":[60],"enriched":[61],"by":[62,110],"juxtaposing":[63],"capabilities":[65],"with":[66,123],"AFL,":[68],"emphasizes":[69],"adaptability":[71],"effectiveness":[73],"methodologies":[76,168],"firmware":[78,114],"security":[79,172,190],"enhancement.":[80],"Furthermore,":[81],"provides":[84],"deep":[86],"understanding":[87],"execution":[90,96,145],"different":[92],"hardware,":[93],"presenting":[94],"an":[95,118],"strategy":[97],"that":[101,155],"highlights":[102],"framework\u2019s":[104],"potential":[105],"identifying":[107],"vulnerabilities,":[108,161],"evidenced":[109],"tests":[111],"specific":[113],"programs":[115],"such":[116],"as":[117],"LED":[119],"blinking":[120],"program":[121],"integrated":[122],"semihosting":[124],"breakpoints":[125],"ETM":[127],"tracing.":[128],"use":[130],"uninitialized":[132],"memory":[133],"sections":[134],"strategically":[136],"placed":[137],"break-points":[138],"offers":[139],"significant":[140],"insights":[141],"firmware\u2019s":[144],"flow.":[146],"results":[148],"our":[150],"comparative":[151],"analysis":[152],"clearly":[153],"show":[154],"\\mathrm{AFL}$":[157],"excels":[158],"at":[159],"uncovering":[160],"reinforcing":[162],"need":[164],"evolving":[166],"build":[170],"stronger":[171],"devices.":[176],"This":[177],"contribution":[178],"underscores":[179],"importance":[181],"refining":[183],"techniques":[185],"meet":[187],"intricate":[189],"demands":[191],"contemporary":[193]},"counts_by_year":[{"year":2025,"cited_by_count":1}],"updated_date":"2026-07-29T14:22:42.915294","created_date":"2025-10-10T00:00:00"}