{"id":"https://openalex.org/W4384948619","doi":"https://doi.org/10.1109/sp46215.2023.10179354","title":"ViDeZZo: Dependency-aware Virtual Device Fuzzing","display_name":"ViDeZZo: Dependency-aware Virtual Device Fuzzing","publication_year":2023,"publication_date":"2023-05-01","ids":{"openalex":"https://openalex.org/W4384948619","doi":"https://doi.org/10.1109/sp46215.2023.10179354"},"language":"en","primary_location":{"id":"doi:10.1109/sp46215.2023.10179354","is_oa":false,"landing_page_url":"https://doi.org/10.1109/sp46215.2023.10179354","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"2023 IEEE Symposium on Security and Privacy (SP)","raw_type":"proceedings-article"},"type":"article","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5100409481","display_name":"Qiang Liu","orcid":"https://orcid.org/0000-0002-5865-6227"},"institutions":[{"id":"https://openalex.org/I76130692","display_name":"Zhejiang University","ror":"https://ror.org/00a2xv884","country_code":"CN","type":"education","lineage":["https://openalex.org/I76130692"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Qiang Liu","raw_affiliation_strings":["Zhejiang University"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Zhejiang University","institution_ids":["https://openalex.org/I76130692"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5029770311","display_name":"Flavio Toffalini","orcid":"https://orcid.org/0000-0002-7114-5640"},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Flavio Toffalini","raw_affiliation_strings":["EPFL"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"EPFL","institution_ids":[]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5088790914","display_name":"Yajin Zhou","orcid":"https://orcid.org/0000-0001-7610-4736"},"institutions":[{"id":"https://openalex.org/I76130692","display_name":"Zhejiang University","ror":"https://ror.org/00a2xv884","country_code":"CN","type":"education","lineage":["https://openalex.org/I76130692"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Yajin Zhou","raw_affiliation_strings":["Zhejiang University"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Zhejiang University","institution_ids":["https://openalex.org/I76130692"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5065116578","display_name":"Mathias Payer","orcid":"https://orcid.org/0000-0001-5054-7547"},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Mathias Payer","raw_affiliation_strings":["EPFL"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"EPFL","institution_ids":[]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":4,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":0.9238,"has_fulltext":false,"cited_by_count":5,"citation_normalized_percentile":{"value":0.74111675,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":{"min":90,"max":97},"biblio":{"volume":null,"issue":null,"first_page":"3228","last_page":"3245"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":0.9991999864578247,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":0.9991999864578247,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T12127","display_name":"Software System Performance and Reliability","score":0.9987999796867371,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10743","display_name":"Software Testing and Debugging Techniques","score":0.9984999895095825,"subfield":{"id":"https://openalex.org/subfields/1712","display_name":"Software"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.9190218448638916},{"id":"https://openalex.org/keywords/fuzz-testing","display_name":"Fuzz testing","score":0.8560689687728882},{"id":"https://openalex.org/keywords/exploit","display_name":"Exploit","score":0.7044145464897156},{"id":"https://openalex.org/keywords/scalability","display_name":"Scalability","score":0.6806686520576477},{"id":"https://openalex.org/keywords/host","display_name":"Host (biology)","score":0.5745497941970825},{"id":"https://openalex.org/keywords/virtual-machine","display_name":"Virtual machine","score":0.5263924598693848},{"id":"https://openalex.org/keywords/dependency","display_name":"Dependency (UML)","score":0.4925611615180969},{"id":"https://openalex.org/keywords/message-passing","display_name":"Message passing","score":0.47473081946372986},{"id":"https://openalex.org/keywords/field","display_name":"Field (mathematics)","score":0.4502715766429901},{"id":"https://openalex.org/keywords/distributed-computing","display_name":"Distributed computing","score":0.3853335380554199},{"id":"https://openalex.org/keywords/operating-system","display_name":"Operating system","score":0.3378908634185791},{"id":"https://openalex.org/keywords/software","display_name":"Software","score":0.2254849076271057},{"id":"https://openalex.org/keywords/computer-security","display_name":"Computer security","score":0.2079344093799591},{"id":"https://openalex.org/keywords/artificial-intelligence","display_name":"Artificial intelligence","score":0.17818957567214966}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.9190218448638916},{"id":"https://openalex.org/C111065885","wikidata":"https://www.wikidata.org/wiki/Q1189053","display_name":"Fuzz testing","level":3,"score":0.8560689687728882},{"id":"https://openalex.org/C165696696","wikidata":"https://www.wikidata.org/wiki/Q11287","display_name":"Exploit","level":2,"score":0.7044145464897156},{"id":"https://openalex.org/C48044578","wikidata":"https://www.wikidata.org/wiki/Q727490","display_name":"Scalability","level":2,"score":0.6806686520576477},{"id":"https://openalex.org/C126831891","wikidata":"https://www.wikidata.org/wiki/Q221673","display_name":"Host (biology)","level":2,"score":0.5745497941970825},{"id":"https://openalex.org/C25344961","wikidata":"https://www.wikidata.org/wiki/Q192726","display_name":"Virtual machine","level":2,"score":0.5263924598693848},{"id":"https://openalex.org/C19768560","wikidata":"https://www.wikidata.org/wiki/Q320727","display_name":"Dependency (UML)","level":2,"score":0.4925611615180969},{"id":"https://openalex.org/C854659","wikidata":"https://www.wikidata.org/wiki/Q1859284","display_name":"Message passing","level":2,"score":0.47473081946372986},{"id":"https://openalex.org/C9652623","wikidata":"https://www.wikidata.org/wiki/Q190109","display_name":"Field (mathematics)","level":2,"score":0.4502715766429901},{"id":"https://openalex.org/C120314980","wikidata":"https://www.wikidata.org/wiki/Q180634","display_name":"Distributed computing","level":1,"score":0.3853335380554199},{"id":"https://openalex.org/C111919701","wikidata":"https://www.wikidata.org/wiki/Q9135","display_name":"Operating system","level":1,"score":0.3378908634185791},{"id":"https://openalex.org/C2777904410","wikidata":"https://www.wikidata.org/wiki/Q7397","display_name":"Software","level":2,"score":0.2254849076271057},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.2079344093799591},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.17818957567214966},{"id":"https://openalex.org/C33923547","wikidata":"https://www.wikidata.org/wiki/Q395","display_name":"Mathematics","level":0,"score":0.0},{"id":"https://openalex.org/C18903297","wikidata":"https://www.wikidata.org/wiki/Q7150","display_name":"Ecology","level":1,"score":0.0},{"id":"https://openalex.org/C86803240","wikidata":"https://www.wikidata.org/wiki/Q420","display_name":"Biology","level":0,"score":0.0},{"id":"https://openalex.org/C202444582","wikidata":"https://www.wikidata.org/wiki/Q837863","display_name":"Pure mathematics","level":1,"score":0.0}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1109/sp46215.2023.10179354","is_oa":false,"landing_page_url":"https://doi.org/10.1109/sp46215.2023.10179354","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"2023 IEEE Symposium on Security and Privacy (SP)","raw_type":"proceedings-article"}],"best_oa_location":null,"sustainable_development_goals":[],"awards":[],"funders":[{"id":"https://openalex.org/F4320321001","display_name":"National Natural Science Foundation of China","ror":"https://ror.org/01h0zpd94"}],"has_content":{"grobid_xml":false,"pdf":false},"content_urls":null,"referenced_works_count":25,"referenced_works":["https://openalex.org/W2162023704","https://openalex.org/W2374182234","https://openalex.org/W2519952770","https://openalex.org/W2701225458","https://openalex.org/W2762831631","https://openalex.org/W2766711930","https://openalex.org/W2798658186","https://openalex.org/W2899781671","https://openalex.org/W2927166905","https://openalex.org/W2947109320","https://openalex.org/W2963350015","https://openalex.org/W2964241064","https://openalex.org/W2974819274","https://openalex.org/W2984452133","https://openalex.org/W3008726973","https://openalex.org/W3009050206","https://openalex.org/W3015193297","https://openalex.org/W3101633108","https://openalex.org/W3155827311","https://openalex.org/W3180202404","https://openalex.org/W3196498968","https://openalex.org/W3213068522","https://openalex.org/W6754293714","https://openalex.org/W6793945956","https://openalex.org/W6795027149"],"related_works":["https://openalex.org/W2511770387","https://openalex.org/W3120811337","https://openalex.org/W3203597304","https://openalex.org/W4385301282","https://openalex.org/W2990186179","https://openalex.org/W4248424560","https://openalex.org/W3023977444","https://openalex.org/W2766647240","https://openalex.org/W4210660460","https://openalex.org/W2352737138"],"abstract_inverted_index":{"A":[0],"virtual":[1,9,13,31,36,47,53,64,98,105,167,182],"machine":[2],"interacts":[3],"with":[4,112,121,207,210],"its":[5],"host":[6,39],"environment":[7],"through":[8],"devices,":[10,99,183],"driven":[11],"by":[12,108,117,152],"device":[14,32,54,65,106,178],"messages,":[15,22],"e.g.,":[16],"I/O":[17],"operations.":[18],"By":[19],"issuing":[20],"crafted":[21],"an":[23],"adversary":[24],"can":[25],"exploit":[26],"a":[27,30,63,81,113,157],"vulnerability":[28],"in":[29,46,62,87,156,166],"to":[33,143],"escape":[34],"the":[35,101,149,208],"machine,":[37],"gaining":[38],"access.":[40],"Even":[41],"though":[42],"hundreds":[43],"of":[44,103,134,212],"bugs":[45,198],"devices":[48],"have":[49],"been":[50],"discovered,":[51],"coverage-based":[52],"fuzzers":[55,107],"hardly":[56],"consider":[57],"intra-message":[58,110],"dependencies":[59,75,111,120,129],"(a":[60,76],"field":[61],"message":[66,77,128,135],"may":[67,78],"be":[68],"dependent":[69],"on":[70,80],"another":[71],"field)":[72],"and":[73,116,130,146,159,180,184,195],"inter-message":[74,119],"depend":[79],"previously":[82],"issued":[83],"message),":[84],"thus":[85],"resulting":[86,155],"limited":[88],"scalability":[89],"or":[90],"efficiency.ViDeZZo,":[91],"our":[92,169,213],"new":[93,122,197],"dependency-aware":[94],"fuzzing":[95],"framework":[96],"for":[97],"overcomes":[100],"limitations":[102],"existing":[104,194],"annotating":[109],"lightweight":[114],"grammar,":[115],"self-learning":[118],"mutation":[123],"rules.":[124],"Specifically,":[125],"ViDeZZo":[126,171,190],"annotates":[127],"applies":[131],"three":[132],"categories":[133],"mutators.":[136],"This":[137],"approach":[138],"avoids":[139],"heavy":[140],"manual":[141],"effort":[142],"analyze":[144],"specifications":[145],"speeds":[147],"up":[148],"slow":[150],"exploration":[151],"satisfying":[153],"dependencies,":[154],"scalable":[158],"efficient":[160],"fuzzer":[161],"that":[162],"boosts":[163],"bug":[164,201],"discovery":[165],"devices.In":[168],"evaluation,":[170],"covers":[172],"two":[173],"hypervisors,":[174],"four":[175],"architectures,":[176],"five":[177],"categories,":[179],"28":[181,196],"reaches":[185],"competitive":[186],"coverage":[187],"faster.":[188],"Moreover,":[189],"successfully":[191],"finds":[192],"24":[193],"across":[199],"diverse":[200],"types.":[202],"We":[203],"are":[204],"actively":[205],"engaging":[206],"community":[209],"7":[211],"submitted":[214],"patches":[215],"already":[216],"accepted.":[217]},"counts_by_year":[{"year":2025,"cited_by_count":3},{"year":2024,"cited_by_count":1},{"year":2023,"cited_by_count":1}],"updated_date":"2026-06-11T09:08:48.828518","created_date":"2025-10-10T00:00:00"}