{"id":"https://openalex.org/W4385080390","doi":"https://doi.org/10.1109/sp46215.2023.10179398","title":"SegFuzz: Segmentizing Thread Interleaving to Discover Kernel Concurrency Bugs through Fuzzing","display_name":"SegFuzz: Segmentizing Thread Interleaving to Discover Kernel Concurrency Bugs through Fuzzing","publication_year":2023,"publication_date":"2023-05-01","ids":{"openalex":"https://openalex.org/W4385080390","doi":"https://doi.org/10.1109/sp46215.2023.10179398"},"language":"en","primary_location":{"id":"doi:10.1109/sp46215.2023.10179398","is_oa":false,"landing_page_url":"https://doi.org/10.1109/sp46215.2023.10179398","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"2023 IEEE Symposium on Security and Privacy (SP)","raw_type":"proceedings-article"},"type":"conference-paper","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5006285740","display_name":"Dae R. Jeong","orcid":"https://orcid.org/0000-0001-7344-0830"},"institutions":[{"id":"https://openalex.org/I157485424","display_name":"Korea Advanced Institute of Science and Technology","ror":"https://ror.org/05apxxy63","country_code":"KR","type":"education","lineage":["https://openalex.org/I157485424"]}],"countries":["KR"],"is_corresponding":false,"raw_author_name":"Dae R. Jeong","raw_affiliation_strings":["KAIST,School of Computing","School of Computing, KAIST"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"KAIST,School of Computing","institution_ids":["https://openalex.org/I157485424"]},{"raw_affiliation_string":"School of Computing, KAIST","institution_ids":["https://openalex.org/I157485424"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5081545538","display_name":"Byoungyoung Lee","orcid":"https://orcid.org/0000-0001-7746-0572"},"institutions":[{"id":"https://openalex.org/I139264467","display_name":"Seoul National University","ror":"https://ror.org/04h9pn542","country_code":"KR","type":"education","lineage":["https://openalex.org/I139264467"]}],"countries":["KR"],"is_corresponding":false,"raw_author_name":"Byoungyoung Lee","raw_affiliation_strings":["Seoul National University,Department of Electrical and Computer Engineering","Department of Electrical and Computer Engineering, Seoul National University"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Seoul National University,Department of Electrical and Computer Engineering","institution_ids":["https://openalex.org/I139264467"]},{"raw_affiliation_string":"Department of Electrical and Computer Engineering, Seoul National University","institution_ids":["https://openalex.org/I139264467"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5077052539","display_name":"Insik Shin","orcid":"https://orcid.org/0000-0002-9128-2415"},"institutions":[{"id":"https://openalex.org/I157485424","display_name":"Korea Advanced Institute of Science and Technology","ror":"https://ror.org/05apxxy63","country_code":"KR","type":"education","lineage":["https://openalex.org/I157485424"]}],"countries":["KR"],"is_corresponding":false,"raw_author_name":"Insik Shin","raw_affiliation_strings":["KAIST,School of Computing","School of Computing, KAIST"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"KAIST,School of Computing","institution_ids":["https://openalex.org/I157485424"]},{"raw_affiliation_string":"School of Computing, KAIST","institution_ids":["https://openalex.org/I157485424"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5019825813","display_name":"Youngjin Kwon","orcid":"https://orcid.org/0000-0001-5602-2397"},"institutions":[{"id":"https://openalex.org/I157485424","display_name":"Korea Advanced Institute of Science and Technology","ror":"https://ror.org/05apxxy63","country_code":"KR","type":"education","lineage":["https://openalex.org/I157485424"]}],"countries":["KR"],"is_corresponding":false,"raw_author_name":"Youngjin Kwon","raw_affiliation_strings":["KAIST,School of Computing","School of Computing, KAIST"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"KAIST,School of Computing","institution_ids":["https://openalex.org/I157485424"]},{"raw_affiliation_string":"School of Computing, KAIST","institution_ids":["https://openalex.org/I157485424"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":2,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":null,"has_fulltext":false,"cited_by_count":11,"citation_normalized_percentile":null,"cited_by_percentile_year":null,"biblio":{"volume":null,"issue":null,"first_page":"2104","last_page":"2121"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10054","display_name":"Parallel Computing and Optimization Techniques","score":0.9994000196456909,"subfield":{"id":"https://openalex.org/subfields/1708","display_name":"Hardware and Architecture"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T10054","display_name":"Parallel Computing and Optimization Techniques","score":0.9994000196456909,"subfield":{"id":"https://openalex.org/subfields/1708","display_name":"Hardware and Architecture"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10743","display_name":"Software Testing and Debugging Techniques","score":0.9991999864578247,"subfield":{"id":"https://openalex.org/subfields/1712","display_name":"Software"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11424","display_name":"Security and Verification in Computing","score":0.996999979019165,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/interleaving","display_name":"Interleaving","score":0.898566722869873},{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.8681949377059937},{"id":"https://openalex.org/keywords/thread","display_name":"Thread (computing)","score":0.8198893070220947},{"id":"https://openalex.org/keywords/concurrency","display_name":"Concurrency","score":0.8192002773284912},{"id":"https://openalex.org/keywords/fuzz-testing","display_name":"Fuzz testing","score":0.5088658332824707},{"id":"https://openalex.org/keywords/kernel","display_name":"Kernel (algebra)","score":0.43806013464927673},{"id":"https://openalex.org/keywords/programming-language","display_name":"Programming language","score":0.3338219225406647},{"id":"https://openalex.org/keywords/parallel-computing","display_name":"Parallel computing","score":0.33342796564102173},{"id":"https://openalex.org/keywords/operating-system","display_name":"Operating system","score":0.3214229941368103},{"id":"https://openalex.org/keywords/software","display_name":"Software","score":0.14596688747406006},{"id":"https://openalex.org/keywords/mathematics","display_name":"Mathematics","score":0.06309312582015991}],"concepts":[{"id":"https://openalex.org/C28034677","wikidata":"https://www.wikidata.org/wiki/Q17092530","display_name":"Interleaving","level":2,"score":0.898566722869873},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.8681949377059937},{"id":"https://openalex.org/C138101251","wikidata":"https://www.wikidata.org/wiki/Q213092","display_name":"Thread (computing)","level":2,"score":0.8198893070220947},{"id":"https://openalex.org/C193702766","wikidata":"https://www.wikidata.org/wiki/Q1414548","display_name":"Concurrency","level":2,"score":0.8192002773284912},{"id":"https://openalex.org/C111065885","wikidata":"https://www.wikidata.org/wiki/Q1189053","display_name":"Fuzz testing","level":3,"score":0.5088658332824707},{"id":"https://openalex.org/C74193536","wikidata":"https://www.wikidata.org/wiki/Q574844","display_name":"Kernel (algebra)","level":2,"score":0.43806013464927673},{"id":"https://openalex.org/C199360897","wikidata":"https://www.wikidata.org/wiki/Q9143","display_name":"Programming language","level":1,"score":0.3338219225406647},{"id":"https://openalex.org/C173608175","wikidata":"https://www.wikidata.org/wiki/Q232661","display_name":"Parallel computing","level":1,"score":0.33342796564102173},{"id":"https://openalex.org/C111919701","wikidata":"https://www.wikidata.org/wiki/Q9135","display_name":"Operating system","level":1,"score":0.3214229941368103},{"id":"https://openalex.org/C2777904410","wikidata":"https://www.wikidata.org/wiki/Q7397","display_name":"Software","level":2,"score":0.14596688747406006},{"id":"https://openalex.org/C33923547","wikidata":"https://www.wikidata.org/wiki/Q395","display_name":"Mathematics","level":0,"score":0.06309312582015991},{"id":"https://openalex.org/C114614502","wikidata":"https://www.wikidata.org/wiki/Q76592","display_name":"Combinatorics","level":1,"score":0.0}],"mesh":[],"locations_count":2,"locations":[{"id":"doi:10.1109/sp46215.2023.10179398","is_oa":false,"landing_page_url":"https://doi.org/10.1109/sp46215.2023.10179398","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"2023 IEEE Symposium on Security and Privacy (SP)","raw_type":"proceedings-article"},{"id":"pmh:oai:s-space.snu.ac.kr:10371/235138","is_oa":false,"landing_page_url":"https://hdl.handle.net/10371/235138","pdf_url":null,"source":{"id":"https://openalex.org/S4306401345","display_name":"Seoul National University Open Repository (Seoul National University)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I139264467","host_organization_name":"Seoul National University","host_organization_lineage":["https://openalex.org/I139264467"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"Proceedings Paper"}],"best_oa_location":null,"sustainable_development_goals":[],"awards":[],"funders":[{"id":"https://openalex.org/F4320322120","display_name":"National Research Foundation of Korea","ror":"https://ror.org/013aysd81"}],"has_content":{"grobid_xml":false,"pdf":false},"content_urls":null,"referenced_works_count":59,"referenced_works":["https://openalex.org/W1600255172","https://openalex.org/W2025819261","https://openalex.org/W2061504544","https://openalex.org/W2063123613","https://openalex.org/W2078197548","https://openalex.org/W2101161997","https://openalex.org/W2102314894","https://openalex.org/W2110059387","https://openalex.org/W2127989655","https://openalex.org/W2137530017","https://openalex.org/W2138428785","https://openalex.org/W2138555106","https://openalex.org/W2148011508","https://openalex.org/W2150602145","https://openalex.org/W2156858199","https://openalex.org/W2314450363","https://openalex.org/W2508374411","https://openalex.org/W2604695547","https://openalex.org/W2613274303","https://openalex.org/W2619153025","https://openalex.org/W2763131031","https://openalex.org/W2765435026","https://openalex.org/W2767836542","https://openalex.org/W2789383461","https://openalex.org/W2790401645","https://openalex.org/W2792800398","https://openalex.org/W2793974819","https://openalex.org/W2888080919","https://openalex.org/W2891748016","https://openalex.org/W2927543040","https://openalex.org/W2933883078","https://openalex.org/W2947814692","https://openalex.org/W2952024620","https://openalex.org/W2963237187","https://openalex.org/W2964241064","https://openalex.org/W2981689050","https://openalex.org/W2996406784","https://openalex.org/W3007127028","https://openalex.org/W3016185124","https://openalex.org/W3207016455","https://openalex.org/W3207470659","https://openalex.org/W4226163636","https://openalex.org/W4254906220","https://openalex.org/W4311414355","https://openalex.org/W4372263411","https://openalex.org/W6600049303","https://openalex.org/W6637199862","https://openalex.org/W6637688222","https://openalex.org/W6639248035","https://openalex.org/W6639560864","https://openalex.org/W6743674107","https://openalex.org/W6743843626","https://openalex.org/W6754293714","https://openalex.org/W6754597693","https://openalex.org/W6773979146","https://openalex.org/W6781274470","https://openalex.org/W6794723050","https://openalex.org/W6800370399","https://openalex.org/W6803794045"],"related_works":["https://openalex.org/W2511770387","https://openalex.org/W3120811337","https://openalex.org/W3203597304","https://openalex.org/W4281863035","https://openalex.org/W2133697637","https://openalex.org/W4253571630","https://openalex.org/W4385478034","https://openalex.org/W2837991191","https://openalex.org/W1873898332","https://openalex.org/W2741423451"],"abstract_inverted_index":{"Discovering":[0],"kernel":[1,9,105],"concurrency":[2,10,106,179],"bugs":[3,89,180,197],"through":[4],"fuzzing":[5,102],"is":[6,36,39],"challenging.":[7],"Identifying":[8],"bugs,":[11,16],"as":[12,143],"opposed":[13],"to":[14,41,162],"non-concurrency":[15],"necessitates":[17],"an":[18,70,118,131],"analysis":[19],"of":[20,33,73,113,125,128,133,137,188],"possible":[21],"interleavings":[22,157,166],"between":[23],"two":[24],"or":[25,58,68,86],"more":[26],"threads.":[27],"However,":[28],"because":[29],"the":[30,49,110,134,186,204],"search":[31,51,111],"space":[32,112],"thread":[34,45,66,114,120,153,165],"interleaving":[35,67,121,132,144,147,160],"vast,":[37],"it":[38],"impractical":[40],"investigate":[42],"all":[43],"conceivable":[44],"interleavings.":[46],"To":[47],"explore":[48],"vast":[50],"space,":[52],"most":[53],"previous":[54],"approaches":[55],"perform":[56],"random":[57],"simple":[59],"heuristic":[60],"searches":[61,82],"without":[62],"having":[63],"coverage":[64,92],"for":[65,104,152],"with":[69,83],"insufficient":[71],"form":[72],"coverage.":[74,149],"As":[75],"a":[76,101,123],"result,":[77],"they":[78],"either":[79],"conduct":[80],"wasteful":[81],"redundant":[84],"executions":[85],"overlook":[87],"concurrent":[88],"that":[90,167,192],"their":[91],"cannot":[93],"address.To":[94],"overcome":[95],"such":[96],"limitations,":[97],"we":[98,175],"propose":[99],"SegFuzz,":[100,174],"framework":[103],"bugs.":[107],"When":[108,150],"exploring":[109],"interleavings,":[115,154],"SegFuzz":[116,155,189,193],"decomposes":[117],"entire":[119],"into":[122],"set":[124],"segments,":[126],"each":[127],"which":[129],"represents":[130],"small":[135],"number":[136],"instructions,":[138],"and":[139,184],"utilizes":[140],"individual":[141],"segments":[142,161],"coverage,":[145],"called":[146],"segment":[148],"searching":[151],"mutates":[156],"in":[158,181],"explored":[159],"construct":[163],"new":[164,177],"have":[168],"not":[169],"yet":[170],"been":[171],"explored.":[172],"With":[173],"discover":[176],"21":[178],"Linux":[182],"kernels,":[183],"demonstrate":[185],"efficiency":[187],"by":[190],"showing":[191],"can":[194],"identify":[195],"known":[196],"on":[198],"average":[199],"4.1":[200],"times":[201],"quickly":[202],"than":[203],"state-of-the-art":[205],"approaches.":[206]},"counts_by_year":[{"year":2026,"cited_by_count":2},{"year":2025,"cited_by_count":5},{"year":2024,"cited_by_count":4}],"updated_date":"2026-07-22T07:51:19.307946","created_date":"2025-10-10T00:00:00"}
