{"id":"https://openalex.org/W4323338666","doi":"https://doi.org/10.1109/tdsc.2023.3253120","title":"Multiple Targets Directed Greybox Fuzzing","display_name":"Multiple Targets Directed Greybox Fuzzing","publication_year":2023,"publication_date":"2023-03-06","ids":{"openalex":"https://openalex.org/W4323338666","doi":"https://doi.org/10.1109/tdsc.2023.3253120"},"language":"en","primary_location":{"id":"doi:10.1109/tdsc.2023.3253120","is_oa":false,"landing_page_url":"https://doi.org/10.1109/tdsc.2023.3253120","pdf_url":null,"source":{"id":"https://openalex.org/S133795288","display_name":"IEEE Transactions on Dependable and Secure Computing","issn_l":"1545-5971","issn":["1545-5971","1941-0018","2160-9209"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310320439","host_organization_name":"IEEE Computer Society","host_organization_lineage":["https://openalex.org/P4310320439","https://openalex.org/P4310319808"],"host_organization_lineage_names":["IEEE Computer Society","Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Transactions on Dependable and Secure Computing","raw_type":"journal-article"},"type":"article","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5100354105","display_name":"Hongliang Liang","orcid":"https://orcid.org/0000-0001-6877-780X"},"institutions":[{"id":"https://openalex.org/I139759216","display_name":"Beijing University of Posts and Telecommunications","ror":"https://ror.org/04w9fbh59","country_code":"CN","type":"education","lineage":["https://openalex.org/I139759216"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Hongliang Liang","raw_affiliation_strings":["Trusted Software and Intelligent System Laboratory, Beijing University of Posts and Telecommunications, Beijing, China"],"raw_orcid":"https://orcid.org/0000-0001-6877-780X","affiliations":[{"raw_affiliation_string":"Trusted Software and Intelligent System Laboratory, Beijing University of Posts and Telecommunications, Beijing, China","institution_ids":["https://openalex.org/I139759216"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5101428197","display_name":"Xinglin Yu","orcid":"https://orcid.org/0009-0009-7271-3409"},"institutions":[{"id":"https://openalex.org/I139759216","display_name":"Beijing University of Posts and Telecommunications","ror":"https://ror.org/04w9fbh59","country_code":"CN","type":"education","lineage":["https://openalex.org/I139759216"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Xinglin Yu","raw_affiliation_strings":["Trusted Software and Intelligent System Laboratory, Beijing University of Posts and Telecommunications, Beijing, China"],"raw_orcid":"https://orcid.org/0009-0009-7271-3409","affiliations":[{"raw_affiliation_string":"Trusted Software and Intelligent System Laboratory, Beijing University of Posts and Telecommunications, Beijing, China","institution_ids":["https://openalex.org/I139759216"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5100854521","display_name":"Xianglin Cheng","orcid":null},"institutions":[{"id":"https://openalex.org/I139759216","display_name":"Beijing University of Posts and Telecommunications","ror":"https://ror.org/04w9fbh59","country_code":"CN","type":"education","lineage":["https://openalex.org/I139759216"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Xianglin Cheng","raw_affiliation_strings":["Trusted Software and Intelligent System Laboratory, Beijing University of Posts and Telecommunications, Beijing, China"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Trusted Software and Intelligent System Laboratory, Beijing University of Posts and Telecommunications, Beijing, China","institution_ids":["https://openalex.org/I139759216"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5100454211","display_name":"Jie Liu","orcid":"https://orcid.org/0000-0003-3745-7541"},"institutions":[{"id":"https://openalex.org/I139759216","display_name":"Beijing University of Posts and Telecommunications","ror":"https://ror.org/04w9fbh59","country_code":"CN","type":"education","lineage":["https://openalex.org/I139759216"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Jie Liu","raw_affiliation_strings":["Trusted Software and Intelligent System Laboratory, Beijing University of Posts and Telecommunications, Beijing, China"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Trusted Software and Intelligent System Laboratory, Beijing University of Posts and Telecommunications, Beijing, China","institution_ids":["https://openalex.org/I139759216"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5100364769","display_name":"Jin Li","orcid":"https://orcid.org/0000-0001-9201-2321"},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Jin Li","raw_affiliation_strings":["National Key Laboratory of Science and Technology on Information System Security, Beijing, China"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"National Key Laboratory of Science and Technology on Information System Security, Beijing, China","institution_ids":[]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":1,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":3.3972,"has_fulltext":false,"cited_by_count":19,"citation_normalized_percentile":{"value":0.95753012,"is_in_top_1_percent":false,"is_in_top_10_percent":true},"cited_by_percentile_year":{"min":94,"max":99},"biblio":{"volume":"21","issue":"1","first_page":"325","last_page":"339"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10743","display_name":"Software Testing and Debugging Techniques","score":0.9990000128746033,"subfield":{"id":"https://openalex.org/subfields/1712","display_name":"Software"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T10743","display_name":"Software Testing and Debugging Techniques","score":0.9990000128746033,"subfield":{"id":"https://openalex.org/subfields/1712","display_name":"Software"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10260","display_name":"Software Engineering Research","score":0.9897000193595886,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T12127","display_name":"Software System Performance and Reliability","score":0.984000027179718,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/fuzz-testing","display_name":"Fuzz testing","score":0.9920637607574463},{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.8309686183929443},{"id":"https://openalex.org/keywords/vulnerability","display_name":"Vulnerability (computing)","score":0.45240315794944763},{"id":"https://openalex.org/keywords/scheduling","display_name":"Scheduling (production processes)","score":0.45144200325012207},{"id":"https://openalex.org/keywords/exploit","display_name":"Exploit","score":0.4182397127151489},{"id":"https://openalex.org/keywords/false-positive-paradox","display_name":"False positive paradox","score":0.4126170873641968},{"id":"https://openalex.org/keywords/machine-learning","display_name":"Machine learning","score":0.3552708029747009},{"id":"https://openalex.org/keywords/artificial-intelligence","display_name":"Artificial intelligence","score":0.3367631435394287},{"id":"https://openalex.org/keywords/programming-language","display_name":"Programming language","score":0.24362927675247192},{"id":"https://openalex.org/keywords/computer-security","display_name":"Computer security","score":0.23575866222381592},{"id":"https://openalex.org/keywords/software","display_name":"Software","score":0.08303850889205933}],"concepts":[{"id":"https://openalex.org/C111065885","wikidata":"https://www.wikidata.org/wiki/Q1189053","display_name":"Fuzz testing","level":3,"score":0.9920637607574463},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.8309686183929443},{"id":"https://openalex.org/C95713431","wikidata":"https://www.wikidata.org/wiki/Q631425","display_name":"Vulnerability (computing)","level":2,"score":0.45240315794944763},{"id":"https://openalex.org/C206729178","wikidata":"https://www.wikidata.org/wiki/Q2271896","display_name":"Scheduling (production processes)","level":2,"score":0.45144200325012207},{"id":"https://openalex.org/C165696696","wikidata":"https://www.wikidata.org/wiki/Q11287","display_name":"Exploit","level":2,"score":0.4182397127151489},{"id":"https://openalex.org/C64869954","wikidata":"https://www.wikidata.org/wiki/Q1859747","display_name":"False positive paradox","level":2,"score":0.4126170873641968},{"id":"https://openalex.org/C119857082","wikidata":"https://www.wikidata.org/wiki/Q2539","display_name":"Machine learning","level":1,"score":0.3552708029747009},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.3367631435394287},{"id":"https://openalex.org/C199360897","wikidata":"https://www.wikidata.org/wiki/Q9143","display_name":"Programming language","level":1,"score":0.24362927675247192},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.23575866222381592},{"id":"https://openalex.org/C2777904410","wikidata":"https://www.wikidata.org/wiki/Q7397","display_name":"Software","level":2,"score":0.08303850889205933},{"id":"https://openalex.org/C162324750","wikidata":"https://www.wikidata.org/wiki/Q8134","display_name":"Economics","level":0,"score":0.0},{"id":"https://openalex.org/C21547014","wikidata":"https://www.wikidata.org/wiki/Q1423657","display_name":"Operations management","level":1,"score":0.0}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1109/tdsc.2023.3253120","is_oa":false,"landing_page_url":"https://doi.org/10.1109/tdsc.2023.3253120","pdf_url":null,"source":{"id":"https://openalex.org/S133795288","display_name":"IEEE Transactions on Dependable and Secure Computing","issn_l":"1545-5971","issn":["1545-5971","1941-0018","2160-9209"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310320439","host_organization_name":"IEEE Computer Society","host_organization_lineage":["https://openalex.org/P4310320439","https://openalex.org/P4310319808"],"host_organization_lineage_names":["IEEE Computer Society","Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Transactions on Dependable and Secure Computing","raw_type":"journal-article"}],"best_oa_location":null,"sustainable_development_goals":[{"display_name":"Affordable and clean energy","id":"https://metadata.un.org/sdg/7","score":0.8399999737739563}],"awards":[],"funders":[],"has_content":{"grobid_xml":false,"pdf":false},"content_urls":null,"referenced_works_count":29,"referenced_works":["https://openalex.org/W2049105156","https://openalex.org/W2340281863","https://openalex.org/W2514974017","https://openalex.org/W2574017551","https://openalex.org/W2613534458","https://openalex.org/W2766540688","https://openalex.org/W2777430404","https://openalex.org/W2806746626","https://openalex.org/W2891235722","https://openalex.org/W2899189777","https://openalex.org/W2947182139","https://openalex.org/W2956095933","https://openalex.org/W2964097210","https://openalex.org/W2974819274","https://openalex.org/W2998321643","https://openalex.org/W3011427369","https://openalex.org/W3014957459","https://openalex.org/W3015365135","https://openalex.org/W3020105429","https://openalex.org/W3156955803","https://openalex.org/W4251988601","https://openalex.org/W4284698041","https://openalex.org/W4288057792","https://openalex.org/W6637688222","https://openalex.org/W6776109021","https://openalex.org/W6776771148","https://openalex.org/W6781883526","https://openalex.org/W6929225692","https://openalex.org/W7066344169"],"related_works":["https://openalex.org/W2511770387","https://openalex.org/W3120811337","https://openalex.org/W3203597304","https://openalex.org/W4385301282","https://openalex.org/W2990186179","https://openalex.org/W2352737138","https://openalex.org/W2906845177","https://openalex.org/W4200107511","https://openalex.org/W2891427086","https://openalex.org/W1968625315"],"abstract_inverted_index":{"Directed":[0],"greybox":[1,57],"fuzzing":[2,58,68],"(DGF)":[3],"can":[4],"quickly":[5],"discover":[6],"or":[7,19],"reproduce":[8],"bugs":[9],"in":[10,23,66,102,119,139,152],"programs":[11,64],"by":[12,89],"seeking":[13],"to":[14,27,61,76],"reach":[15,62],"a":[16,67,73,84,103],"program":[17],"location":[18],"explore":[20],"some":[21],"locations":[22,45,65],"order.":[24],"However,":[25],"due":[26],"their":[28],"static":[29],"stage":[30],"division":[31],"and":[32,80,83,95,107,116,137,143,155],"coarse-grained":[33],"energy":[34,86],"scheduling,":[35],"prior":[36],"DGF":[37],"tools":[38],"perform":[39],"poorly":[40],"when":[41],"facing":[42],"multiple":[43,54,63],"target":[44,96],"(targets":[46],"for":[47],"short).":[48],"In":[49],"this":[50],"paper,":[51],"we":[52,71],"present":[53],"targets":[55],"directed":[56],"which":[59],"aims":[60],"campaign.":[69],"Specifically,":[70],"propose":[72],"novel":[74,85],"strategy":[75,88],"adaptively":[77],"coordinate":[78],"exploration":[79],"exploitation":[81],"stages,":[82],"scheduling":[87],"considering":[90],"more":[91],"relations":[92],"between":[93],"seeds":[94],"locations.":[97],"We":[98],"implement":[99],"our":[100],"approaches":[101],"tool":[104],"called":[105],"LeoFuzz":[106,126,146],"evaluate":[108],"it":[109],"on":[110],"crash":[111],"reproduction,":[112],"true":[113],"positives":[114],"verification,":[115],"vulnerability":[117],"exposure":[118],"real-world":[120,153],"programs.":[121],"Experimental":[122],"results":[123],"show":[124],"that":[125],"outperforms":[127],"six":[128],"state-of-the-art":[129],"fuzzers,":[130],"i.e.,":[131],"QYSM,":[132],"AFLGo,":[133],"Lolly,":[134],"Berry,":[135],"Beacon":[136],"WindRanger":[138],"terms":[140],"of":[141,157],"effectiveness":[142],"efficiency.":[144],"Moreover,":[145],"has":[147],"detected":[148],"23":[149],"new":[150],"vulnerabilities":[151],"programs,":[154],"12":[156],"them":[158],"have":[159],"been":[160],"assigned":[161],"CVE":[162],"IDs.":[163]},"counts_by_year":[{"year":2026,"cited_by_count":3},{"year":2025,"cited_by_count":6},{"year":2024,"cited_by_count":8},{"year":2023,"cited_by_count":2}],"updated_date":"2026-03-27T05:58:40.876381","created_date":"2025-10-10T00:00:00"}