{"id":"https://openalex.org/W4385080425","doi":"https://doi.org/10.1109/sp46215.2023.10179302","title":"TEEzz: Fuzzing Trusted Applications on COTS Android Devices","display_name":"TEEzz: Fuzzing Trusted Applications on COTS Android Devices","publication_year":2023,"publication_date":"2023-05-01","ids":{"openalex":"https://openalex.org/W4385080425","doi":"https://doi.org/10.1109/sp46215.2023.10179302"},"language":"en","primary_location":{"id":"doi:10.1109/sp46215.2023.10179302","is_oa":false,"landing_page_url":"https://doi.org/10.1109/sp46215.2023.10179302","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"2023 IEEE Symposium on Security and Privacy (SP)","raw_type":"proceedings-article"},"type":"conference-paper","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5042334814","display_name":"Marcel Busch","orcid":"https://orcid.org/0009-0007-6632-7355"},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Marcel Busch","raw_affiliation_strings":["EPFL"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"EPFL","institution_ids":[]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5071486684","display_name":"Aravind Machiry","orcid":"https://orcid.org/0000-0001-5124-6818"},"institutions":[{"id":"https://openalex.org/I219193219","display_name":"Purdue University West Lafayette","ror":"https://ror.org/02dqehb95","country_code":"US","type":"education","lineage":["https://openalex.org/I219193219"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Aravind Machiry","raw_affiliation_strings":["Purdue University"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Purdue University","institution_ids":["https://openalex.org/I219193219"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5091847839","display_name":"Chad Spensky","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Chad Spensky","raw_affiliation_strings":["Allthenticate"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Allthenticate","institution_ids":[]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5075685499","display_name":"Giovanni Vigna","orcid":"https://orcid.org/0000-0002-3422-5369"},"institutions":[{"id":"https://openalex.org/I154570441","display_name":"University of California, Santa Barbara","ror":"https://ror.org/02t274463","country_code":"US","type":"education","lineage":["https://openalex.org/I154570441"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Giovanni Vigna","raw_affiliation_strings":["UC Santa Barbara"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"UC Santa Barbara","institution_ids":["https://openalex.org/I154570441"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5022177364","display_name":"Christopher Kruegel","orcid":"https://orcid.org/0000-0001-5140-3414"},"institutions":[{"id":"https://openalex.org/I154570441","display_name":"University of California, Santa Barbara","ror":"https://ror.org/02t274463","country_code":"US","type":"education","lineage":["https://openalex.org/I154570441"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Christopher Kruegel","raw_affiliation_strings":["UC Santa Barbara"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"UC Santa Barbara","institution_ids":["https://openalex.org/I154570441"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5065116578","display_name":"Mathias Payer","orcid":"https://orcid.org/0000-0001-5054-7547"},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Mathias Payer","raw_affiliation_strings":["EPFL"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"EPFL","institution_ids":[]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":2,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":4.8333,"has_fulltext":false,"cited_by_count":20,"citation_normalized_percentile":{"value":0.96942362,"is_in_top_1_percent":false,"is_in_top_10_percent":true},"cited_by_percentile_year":{"min":98,"max":99},"biblio":{"volume":null,"issue":null,"first_page":"1204","last_page":"1219"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":0.9998999834060669,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":0.9998999834060669,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11424","display_name":"Security and Verification in Computing","score":0.9995999932289124,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10743","display_name":"Software Testing and Debugging Techniques","score":0.9952999949455261,"subfield":{"id":"https://openalex.org/subfields/1712","display_name":"Software"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/fuzz-testing","display_name":"Fuzz testing","score":0.9436064958572388},{"id":"https://openalex.org/keywords/android","display_name":"Android (operating system)","score":0.8169755935668945},{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.6722030639648438},{"id":"https://openalex.org/keywords/computer-security","display_name":"Computer security","score":0.5386590361595154},{"id":"https://openalex.org/keywords/embedded-system","display_name":"Embedded system","score":0.4190112352371216},{"id":"https://openalex.org/keywords/operating-system","display_name":"Operating system","score":0.3737863004207611},{"id":"https://openalex.org/keywords/software","display_name":"Software","score":0.1962054967880249}],"concepts":[{"id":"https://openalex.org/C111065885","wikidata":"https://www.wikidata.org/wiki/Q1189053","display_name":"Fuzz testing","level":3,"score":0.9436064958572388},{"id":"https://openalex.org/C557433098","wikidata":"https://www.wikidata.org/wiki/Q94","display_name":"Android (operating system)","level":2,"score":0.8169755935668945},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.6722030639648438},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.5386590361595154},{"id":"https://openalex.org/C149635348","wikidata":"https://www.wikidata.org/wiki/Q193040","display_name":"Embedded system","level":1,"score":0.4190112352371216},{"id":"https://openalex.org/C111919701","wikidata":"https://www.wikidata.org/wiki/Q9135","display_name":"Operating system","level":1,"score":0.3737863004207611},{"id":"https://openalex.org/C2777904410","wikidata":"https://www.wikidata.org/wiki/Q7397","display_name":"Software","level":2,"score":0.1962054967880249}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1109/sp46215.2023.10179302","is_oa":false,"landing_page_url":"https://doi.org/10.1109/sp46215.2023.10179302","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"2023 IEEE Symposium on Security and Privacy (SP)","raw_type":"proceedings-article"}],"best_oa_location":null,"sustainable_development_goals":[{"display_name":"Peace, Justice and strong institutions","score":0.6899999976158142,"id":"https://metadata.un.org/sdg/16"}],"awards":[],"funders":[{"id":"https://openalex.org/F4320334678","display_name":"European Research Council","ror":"https://ror.org/0472cxd90"}],"has_content":{"pdf":false,"grobid_xml":false},"content_urls":null,"referenced_works_count":59,"referenced_works":["https://openalex.org/W191489030","https://openalex.org/W1499965119","https://openalex.org/W1546956568","https://openalex.org/W2020936921","https://openalex.org/W2036894992","https://openalex.org/W2065948900","https://openalex.org/W2115675703","https://openalex.org/W2118961967","https://openalex.org/W2128985333","https://openalex.org/W2215262239","https://openalex.org/W2302344383","https://openalex.org/W2491928626","https://openalex.org/W2535617737","https://openalex.org/W2538991976","https://openalex.org/W2542538106","https://openalex.org/W2569698171","https://openalex.org/W2574017551","https://openalex.org/W2579697044","https://openalex.org/W2605883969","https://openalex.org/W2612380866","https://openalex.org/W2613534458","https://openalex.org/W2741068848","https://openalex.org/W2754096695","https://openalex.org/W2765435026","https://openalex.org/W2766540688","https://openalex.org/W2766647240","https://openalex.org/W2766711930","https://openalex.org/W2769748476","https://openalex.org/W2795192879","https://openalex.org/W2809018224","https://openalex.org/W2889022041","https://openalex.org/W2889322176","https://openalex.org/W2890190663","https://openalex.org/W2952183208","https://openalex.org/W2959219726","https://openalex.org/W2963298680","https://openalex.org/W2963674831","https://openalex.org/W2963846926","https://openalex.org/W2964097210","https://openalex.org/W2982720310","https://openalex.org/W3007127028","https://openalex.org/W3016246341","https://openalex.org/W3097562018","https://openalex.org/W3140949594","https://openalex.org/W4225163209","https://openalex.org/W4240738830","https://openalex.org/W6619192471","https://openalex.org/W6631155369","https://openalex.org/W6732034840","https://openalex.org/W6743496458","https://openalex.org/W6744145243","https://openalex.org/W6745987728","https://openalex.org/W6754293714","https://openalex.org/W6755579899","https://openalex.org/W6760419517","https://openalex.org/W6768128038","https://openalex.org/W6776092528","https://openalex.org/W6782113829","https://openalex.org/W6782613181"],"related_works":["https://openalex.org/W2511770387","https://openalex.org/W3120811337","https://openalex.org/W2766647240","https://openalex.org/W4385301282","https://openalex.org/W2990186179","https://openalex.org/W3203597304","https://openalex.org/W4248424560","https://openalex.org/W3023977444","https://openalex.org/W4210660460","https://openalex.org/W1565885216"],"abstract_inverted_index":{"Security":[0],"and":[1,43,80,83,116,150,163,175,179,209,259,300],"privacy-sensitive":[2],"smartphone":[3],"applications":[4,50],"use":[5],"trusted":[6,49],"execution":[7,110],"environments":[8],"(TEEs)":[9],"to":[10,23,30,158,186,290],"protect":[11],"sensitive":[12],"operations":[13],"from":[14],"malicious":[15],"code.":[16],"By":[17],"design,":[18],"TEEs":[19,39],"have":[20],"privileged":[21],"access":[22],"the":[24,58,74,78,84,91,98,109,130,144,160,167,187,214,274,287],"entire":[25],"system":[26],"but":[27,93],"expose":[28],"little":[29],"no":[31,95],"insight":[32],"into":[33,143],"their":[34,207],"inner":[35],"workings.":[36],"Moreover,":[37],"real-world":[38],"enforce":[40],"strict":[41],"format":[42],"protocol":[44],"interactions":[45,89],"when":[46],"communicating":[47],"with":[48,90],"(TAs),":[51],"which":[52,107,284,306],"prohibits":[53],"effective":[54],"automated":[55],"testing.TEEzz":[56],"is":[57,257,286],"first":[59],"TEE-aware":[60],"fuzzing":[61,66,105,138,177,192,227,235],"framework":[62],"capable":[63],"of":[64,111,129,136,141,153,166,190,277,283],"effectively":[65],"TAs":[67,195,236,254,279],"in":[68,77,182,273,280],"situ":[69],"on":[70,196,297],"production":[71],"smartphones,":[72],"i.e.,":[73],"TA":[75,92,168],"runs":[76],"encrypted":[79],"protected":[81],"TEE":[82,137],"fuzzer":[85,289],"may":[86],"only":[87,124,288],"observe":[88],"has":[94],"control":[96],"over":[97],"TA\u2019s":[99],"code":[100,256],"or":[101],"data.":[102],"Unlike":[103],"traditional":[104],"techniques,":[106],"monitor":[108],"a":[112,121,126,232,238],"program":[113],"being":[114],"fuzzed":[115],"view":[117,128],"its":[118,171],"memory":[119],"after":[120],"crash,":[122],"TEEzz":[123,132,212,244,285,296],"requires":[125],"limited":[127,188],"target.":[131],"overcomes":[133],"key":[134],"limitations":[135],"(e.g.,":[139],"lack":[140],"visibility":[142],"executed":[145],"TAs,":[146],"proprietary":[147],"exchange":[148],"formats,":[149],"value":[151],"dependencies":[152,165],"interactions)":[154],"by":[155],"automatically":[156],"attempting":[157],"infer":[159],"field":[161],"types":[162],"message":[164],"API":[169],"through":[170],"interactions,":[172],"designing":[173],"state-":[174],"type-aware":[176],"mutators,":[178],"creating":[180],"an":[181],"situ,":[183],"on-device":[184],"fuzzer.Due":[185],"availability":[189],"systematic":[191],"research":[193],"for":[194,226,234,264,305],"commercial-off-the-shelf":[197],"(COTS)":[198],"Android":[199],"devices,":[200],"we":[201,217,230],"extensively":[202],"examine":[203],"existing":[204],"solutions,":[205],"explore":[206],"limitations,":[208],"demonstrate":[210],"how":[211],"improves":[213],"state-of-the-art.":[215],"First,":[216],"show":[218,242],"that":[219,243],"general-purpose":[220],"kernel":[221],"driver":[222],"fuzzers":[223],"are":[224],"ineffective":[225],"TAs.":[228],"Then,":[229],"establish":[231],"baseline":[233],"using":[237],"ground-truth":[239],"experiment.":[240],"We":[241,267,293],"outperforms":[245,261],"other":[246],"blackbox":[247],"fuzzers,":[248],"can":[249],"improve":[250],"greybox":[251,262],"approaches":[252,263],"(if":[253],"source":[255],"available),":[258],"even":[260],"stateful":[265],"targets.":[266],"found":[268,301],"13":[269],"previously":[270],"unknown":[271],"bugs":[272,304],"latest":[275],"versions":[276],"OPTEE":[278],"total,":[281],"out":[282],"trigger":[291],"three.":[292],"also":[294],"ran":[295],"popular":[298],"phones":[299],"40":[302],"unique":[303],"one":[307],"CVE":[308],"was":[309],"assigned":[310],"so":[311],"far.":[312]},"counts_by_year":[{"year":2026,"cited_by_count":3},{"year":2025,"cited_by_count":7},{"year":2024,"cited_by_count":10}],"updated_date":"2026-07-29T14:22:42.915294","created_date":"2025-10-10T00:00:00"}