{"id":"https://openalex.org/W7166847789","doi":"https://doi.org/10.1109/sp63933.2026.00169","title":"PufferDoS: Efficient and Effective Attack String Generation for Regular Expression Denial of Service Vulnerabilities","display_name":"PufferDoS: Efficient and Effective Attack String Generation for Regular Expression Denial of Service Vulnerabilities","publication_year":2026,"publication_date":"2026-05-18","ids":{"openalex":"https://openalex.org/W7166847789","doi":"https://doi.org/10.1109/sp63933.2026.00169"},"language":null,"primary_location":{"id":"doi:10.1109/sp63933.2026.00169","is_oa":false,"landing_page_url":"https://doi.org/10.1109/sp63933.2026.00169","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"2026 IEEE Symposium on Security and Privacy (SP)","raw_type":"proceedings-article"},"type":"conference-paper","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5079915095","display_name":"Shangzhi Xu","orcid":null},"institutions":[{"id":"https://openalex.org/I31746571","display_name":"UNSW Sydney","ror":"https://ror.org/03r8z3t63","country_code":"AU","type":"education","lineage":["https://openalex.org/I31746571"]}],"countries":["AU"],"is_corresponding":false,"raw_author_name":"Shangzhi Xu","raw_affiliation_strings":["The University of New South Wales"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"The University of New South Wales","institution_ids":["https://openalex.org/I31746571"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5112859152","display_name":"Ziqi Ding","orcid":"https://orcid.org/0009-0008-8336-7516"},"institutions":[{"id":"https://openalex.org/I31746571","display_name":"UNSW Sydney","ror":"https://ror.org/03r8z3t63","country_code":"AU","type":"education","lineage":["https://openalex.org/I31746571"]}],"countries":["AU"],"is_corresponding":false,"raw_author_name":"Ziqi Ding","raw_affiliation_strings":["The University of New South Wales"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"The University of New South Wales","institution_ids":["https://openalex.org/I31746571"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5139791017","display_name":"Xiao Cheng","orcid":null},"institutions":[{"id":"https://openalex.org/I99043593","display_name":"Macquarie University","ror":"https://ror.org/01sf06y89","country_code":"AU","type":"education","lineage":["https://openalex.org/I99043593"]}],"countries":["AU"],"is_corresponding":false,"raw_author_name":"Xiao Cheng","raw_affiliation_strings":["Macquarie University"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Macquarie University","institution_ids":["https://openalex.org/I99043593"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5139760586","display_name":"Yuekang Li","orcid":null},"institutions":[{"id":"https://openalex.org/I31746571","display_name":"UNSW Sydney","ror":"https://ror.org/03r8z3t63","country_code":"AU","type":"education","lineage":["https://openalex.org/I31746571"]}],"countries":["AU"],"is_corresponding":false,"raw_author_name":"Yuekang Li","raw_affiliation_strings":["The University of New South Wales"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"The University of New South Wales","institution_ids":["https://openalex.org/I31746571"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5070493833","display_name":"Nan Sun","orcid":"https://orcid.org/0000-0001-9123-9022"},"institutions":[{"id":"https://openalex.org/I31746571","display_name":"UNSW Sydney","ror":"https://ror.org/03r8z3t63","country_code":"AU","type":"education","lineage":["https://openalex.org/I31746571"]}],"countries":["AU"],"is_corresponding":false,"raw_author_name":"Nan Sun","raw_affiliation_strings":["The University of New South Wales"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"The University of New South Wales","institution_ids":["https://openalex.org/I31746571"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5138775830","display_name":"Benjamin Turnbull","orcid":null},"institutions":[{"id":"https://openalex.org/I31746571","display_name":"UNSW Sydney","ror":"https://ror.org/03r8z3t63","country_code":"AU","type":"education","lineage":["https://openalex.org/I31746571"]}],"countries":["AU"],"is_corresponding":false,"raw_author_name":"Benjamin Turnbull","raw_affiliation_strings":["The University of New South Wales"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"The University of New South Wales","institution_ids":["https://openalex.org/I31746571"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5098879465","display_name":"Shuangxiang Kan","orcid":"https://orcid.org/0000-0002-2807-1420"},"institutions":[{"id":"https://openalex.org/I31746571","display_name":"UNSW Sydney","ror":"https://ror.org/03r8z3t63","country_code":"AU","type":"education","lineage":["https://openalex.org/I31746571"]}],"countries":["AU"],"is_corresponding":false,"raw_author_name":"Shuangxiang Kan","raw_affiliation_strings":["The University of New South Wales"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"The University of New South Wales","institution_ids":["https://openalex.org/I31746571"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5139716054","display_name":"Siqi Ma","orcid":null},"institutions":[{"id":"https://openalex.org/I204824540","display_name":"University of Wollongong","ror":"https://ror.org/00jtmb277","country_code":"AU","type":"education","lineage":["https://openalex.org/I204824540"]}],"countries":["AU"],"is_corresponding":false,"raw_author_name":"Siqi Ma","raw_affiliation_strings":["The University of Wollongong,CSIRO"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"The University of Wollongong,CSIRO","institution_ids":["https://openalex.org/I204824540"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":3,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":0.0,"has_fulltext":false,"cited_by_count":0,"citation_normalized_percentile":{"value":0.85322879,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":null,"biblio":{"volume":null,"issue":null,"first_page":"3984","last_page":"4002"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T12479","display_name":"Web Application Security Vulnerabilities","score":0.6705999970436096,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T12479","display_name":"Web Application Security Vulnerabilities","score":0.6705999970436096,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11424","display_name":"Security and Verification in Computing","score":0.050999999046325684,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":0.0340999998152256,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/denial-of-service-attack","display_name":"Denial-of-service attack","score":0.6083999872207642},{"id":"https://openalex.org/keywords/service","display_name":"Service (business)","score":0.4226999878883362},{"id":"https://openalex.org/keywords/string","display_name":"String (physics)","score":0.39500001072883606},{"id":"https://openalex.org/keywords/vulnerability","display_name":"Vulnerability (computing)","score":0.392300009727478},{"id":"https://openalex.org/keywords/expression","display_name":"Expression (computer science)","score":0.30730000138282776},{"id":"https://openalex.org/keywords/attack-patterns","display_name":"Attack patterns","score":0.2840000092983246}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.6468999981880188},{"id":"https://openalex.org/C38822068","wikidata":"https://www.wikidata.org/wiki/Q131406","display_name":"Denial-of-service attack","level":3,"score":0.6083999872207642},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.5900999903678894},{"id":"https://openalex.org/C2780378061","wikidata":"https://www.wikidata.org/wiki/Q25351891","display_name":"Service (business)","level":2,"score":0.4226999878883362},{"id":"https://openalex.org/C157486923","wikidata":"https://www.wikidata.org/wiki/Q1376436","display_name":"String (physics)","level":2,"score":0.39500001072883606},{"id":"https://openalex.org/C95713431","wikidata":"https://www.wikidata.org/wiki/Q631425","display_name":"Vulnerability (computing)","level":2,"score":0.392300009727478},{"id":"https://openalex.org/C31258907","wikidata":"https://www.wikidata.org/wiki/Q1301371","display_name":"Computer network","level":1,"score":0.35569998621940613},{"id":"https://openalex.org/C90559484","wikidata":"https://www.wikidata.org/wiki/Q778379","display_name":"Expression (computer science)","level":2,"score":0.30730000138282776},{"id":"https://openalex.org/C2780741293","wikidata":"https://www.wikidata.org/wiki/Q4818019","display_name":"Attack patterns","level":3,"score":0.2840000092983246},{"id":"https://openalex.org/C121329065","wikidata":"https://www.wikidata.org/wiki/Q185612","display_name":"Regular expression","level":2,"score":0.27970001101493835},{"id":"https://openalex.org/C177264268","wikidata":"https://www.wikidata.org/wiki/Q1514741","display_name":"Set (abstract data type)","level":2,"score":0.2648000121116638},{"id":"https://openalex.org/C178005623","wikidata":"https://www.wikidata.org/wiki/Q308859","display_name":"Anonymity","level":2,"score":0.25040000677108765}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1109/sp63933.2026.00169","is_oa":false,"landing_page_url":"https://doi.org/10.1109/sp63933.2026.00169","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"2026 IEEE Symposium on Security and Privacy (SP)","raw_type":"proceedings-article"}],"best_oa_location":null,"sustainable_development_goals":[{"id":"https://metadata.un.org/sdg/10","score":0.40802741050720215,"display_name":"Reduced inequalities"}],"awards":[{"id":"https://openalex.org/G1750106107","display_name":null,"funder_award_id":"FT - 250100652","funder_id":"https://openalex.org/F4320334704","funder_display_name":"Australian Research Council"}],"funders":[{"id":"https://openalex.org/F4320334704","display_name":"Australian Research Council","ror":"https://ror.org/05mmh0f86"}],"has_content":{"grobid_xml":false,"pdf":false},"content_urls":null,"referenced_works_count":41,"referenced_works":["https://openalex.org/W15179086","https://openalex.org/W87129872","https://openalex.org/W1480909796","https://openalex.org/W1570445666","https://openalex.org/W2002581185","https://openalex.org/W2072607050","https://openalex.org/W2166210994","https://openalex.org/W2168627357","https://openalex.org/W2171469152","https://openalex.org/W2275294428","https://openalex.org/W2460699391","https://openalex.org/W2506796853","https://openalex.org/W2601291317","https://openalex.org/W2603401210","https://openalex.org/W2752340395","https://openalex.org/W2805375386","https://openalex.org/W2888047193","https://openalex.org/W2888639985","https://openalex.org/W2899462170","https://openalex.org/W2968966662","https://openalex.org/W2969087412","https://openalex.org/W2985509521","https://openalex.org/W2999180736","https://openalex.org/W3048452377","https://openalex.org/W3087592560","https://openalex.org/W3156471679","https://openalex.org/W4225922019","https://openalex.org/W4237492309","https://openalex.org/W4246385123","https://openalex.org/W4253103663","https://openalex.org/W4284670904","https://openalex.org/W4288057755","https://openalex.org/W4376274732","https://openalex.org/W4384302786","https://openalex.org/W4385080349","https://openalex.org/W4399632242","https://openalex.org/W4400583101","https://openalex.org/W4413176238","https://openalex.org/W4413943341","https://openalex.org/W4414912948","https://openalex.org/W7160953125"],"related_works":[],"abstract_inverted_index":null,"counts_by_year":[],"updated_date":"2026-07-29T14:22:42.915294","created_date":"2026-07-02T00:00:00"}