{"id":"https://openalex.org/W4406387935","doi":"https://doi.org/10.1109/tdsc.2025.3530010","title":"CherryPicker: A Parallel Solving and State Sharing Hybrid Fuzzing System","display_name":"CherryPicker: A Parallel Solving and State Sharing Hybrid Fuzzing System","publication_year":2025,"publication_date":"2025-01-15","ids":{"openalex":"https://openalex.org/W4406387935","doi":"https://doi.org/10.1109/tdsc.2025.3530010"},"language":"en","primary_location":{"id":"doi:10.1109/tdsc.2025.3530010","is_oa":false,"landing_page_url":"https://doi.org/10.1109/tdsc.2025.3530010","pdf_url":null,"source":{"id":"https://openalex.org/S133795288","display_name":"IEEE Transactions on Dependable and Secure Computing","issn_l":"1545-5971","issn":["1545-5971","1941-0018","2160-9209"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310320439","host_organization_name":"IEEE Computer Society","host_organization_lineage":["https://openalex.org/P4310320439","https://openalex.org/P4310319808"],"host_organization_lineage_names":["IEEE Computer Society","Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Transactions on Dependable and Secure Computing","raw_type":"journal-article"},"type":"article","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5087307843","display_name":"Qingyu Zhang","orcid":"https://orcid.org/0009-0009-4422-3971"},"institutions":[{"id":"https://openalex.org/I177725633","display_name":"Chinese University of Hong Kong","ror":"https://ror.org/00t33hh48","country_code":"HK","type":"education","lineage":["https://openalex.org/I177725633"]},{"id":"https://openalex.org/I889458895","display_name":"University of Hong Kong","ror":"https://ror.org/02zhqgq86","country_code":"HK","type":"education","lineage":["https://openalex.org/I889458895"]}],"countries":["HK"],"is_corresponding":true,"raw_author_name":"Qingyu Zhang","raw_affiliation_strings":["School of Computing and Data Science, The University of Hong Kong, Hong Kong, China"],"affiliations":[{"raw_affiliation_string":"School of Computing and Data Science, The University of Hong Kong, Hong Kong, China","institution_ids":["https://openalex.org/I177725633","https://openalex.org/I889458895"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5101963047","display_name":"Jiayi Lin","orcid":"https://orcid.org/0000-0002-3099-8647"},"institutions":[{"id":"https://openalex.org/I177725633","display_name":"Chinese University of Hong Kong","ror":"https://ror.org/00t33hh48","country_code":"HK","type":"education","lineage":["https://openalex.org/I177725633"]},{"id":"https://openalex.org/I889458895","display_name":"University of Hong Kong","ror":"https://ror.org/02zhqgq86","country_code":"HK","type":"education","lineage":["https://openalex.org/I889458895"]}],"countries":["HK"],"is_corresponding":false,"raw_author_name":"Jiayi Lin","raw_affiliation_strings":["School of Computing and Data Science, The University of Hong Kong, Hong Kong, China"],"affiliations":[{"raw_affiliation_string":"School of Computing and Data Science, The University of Hong Kong, Hong Kong, China","institution_ids":["https://openalex.org/I177725633","https://openalex.org/I889458895"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5088642867","display_name":"Changqing Sun","orcid":"https://orcid.org/0000-0001-5509-9237"},"institutions":[{"id":"https://openalex.org/I177725633","display_name":"Chinese University of Hong Kong","ror":"https://ror.org/00t33hh48","country_code":"HK","type":"education","lineage":["https://openalex.org/I177725633"]},{"id":"https://openalex.org/I889458895","display_name":"University of Hong Kong","ror":"https://ror.org/02zhqgq86","country_code":"HK","type":"education","lineage":["https://openalex.org/I889458895"]}],"countries":["HK"],"is_corresponding":false,"raw_author_name":"Chenxin Sun","raw_affiliation_strings":["School of Computing and Data Science, The University of Hong Kong, Hong Kong, China"],"affiliations":[{"raw_affiliation_string":"School of Computing and Data Science, The University of Hong Kong, Hong Kong, China","institution_ids":["https://openalex.org/I177725633","https://openalex.org/I889458895"]}]},{"author_position":"middle","author":{"id":null,"display_name":"Chenxiong Qian","orcid":"https://orcid.org/0000-0002-6201-6011"},"institutions":[{"id":"https://openalex.org/I177725633","display_name":"Chinese University of Hong Kong","ror":"https://ror.org/00t33hh48","country_code":"HK","type":"education","lineage":["https://openalex.org/I177725633"]},{"id":"https://openalex.org/I889458895","display_name":"University of Hong Kong","ror":"https://ror.org/02zhqgq86","country_code":"HK","type":"education","lineage":["https://openalex.org/I889458895"]}],"countries":["HK"],"is_corresponding":false,"raw_author_name":"Chenxiong Qian","raw_affiliation_strings":["School of Computing and Data Science, The University of Hong Kong, Hong Kong, China"],"affiliations":[{"raw_affiliation_string":"School of Computing and Data Science, The University of Hong Kong, Hong Kong, China","institution_ids":["https://openalex.org/I177725633","https://openalex.org/I889458895"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5100400376","display_name":"Xiapu Luo","orcid":"https://orcid.org/0000-0002-9082-3208"},"institutions":[{"id":"https://openalex.org/I14243506","display_name":"Hong Kong Polytechnic University","ror":"https://ror.org/0030zas98","country_code":"HK","type":"education","lineage":["https://openalex.org/I14243506"]}],"countries":["HK"],"is_corresponding":false,"raw_author_name":"Xiapu Luo","raw_affiliation_strings":["Department of Computing, The Hong Kong Polytechnic University, Hong Kong, China"],"affiliations":[{"raw_affiliation_string":"Department of Computing, The Hong Kong Polytechnic University, Hong Kong, China","institution_ids":["https://openalex.org/I14243506"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":5,"corresponding_author_ids":["https://openalex.org/A5087307843"],"corresponding_institution_ids":["https://openalex.org/I177725633","https://openalex.org/I889458895"],"apc_list":null,"apc_paid":null,"fwci":0.0,"has_fulltext":false,"cited_by_count":0,"citation_normalized_percentile":{"value":0.00482585,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":null,"biblio":{"volume":"22","issue":"4","first_page":"3324","last_page":"3336"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10904","display_name":"Embedded Systems Design Techniques","score":0.9532999992370605,"subfield":{"id":"https://openalex.org/subfields/1708","display_name":"Hardware and Architecture"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T10904","display_name":"Embedded Systems Design Techniques","score":0.9532999992370605,"subfield":{"id":"https://openalex.org/subfields/1708","display_name":"Hardware and Architecture"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10743","display_name":"Software Testing and Debugging Techniques","score":0.9412000179290771,"subfield":{"id":"https://openalex.org/subfields/1712","display_name":"Software"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/fuzz-testing","display_name":"Fuzz testing","score":0.9443417191505432},{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.8010520935058594},{"id":"https://openalex.org/keywords/state","display_name":"State (computer science)","score":0.5018784999847412},{"id":"https://openalex.org/keywords/distributed-computing","display_name":"Distributed computing","score":0.36345821619033813},{"id":"https://openalex.org/keywords/computer-security","display_name":"Computer security","score":0.3238201141357422},{"id":"https://openalex.org/keywords/programming-language","display_name":"Programming language","score":0.18954849243164062},{"id":"https://openalex.org/keywords/software","display_name":"Software","score":0.09840837121009827}],"concepts":[{"id":"https://openalex.org/C111065885","wikidata":"https://www.wikidata.org/wiki/Q1189053","display_name":"Fuzz testing","level":3,"score":0.9443417191505432},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.8010520935058594},{"id":"https://openalex.org/C48103436","wikidata":"https://www.wikidata.org/wiki/Q599031","display_name":"State (computer science)","level":2,"score":0.5018784999847412},{"id":"https://openalex.org/C120314980","wikidata":"https://www.wikidata.org/wiki/Q180634","display_name":"Distributed computing","level":1,"score":0.36345821619033813},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.3238201141357422},{"id":"https://openalex.org/C199360897","wikidata":"https://www.wikidata.org/wiki/Q9143","display_name":"Programming language","level":1,"score":0.18954849243164062},{"id":"https://openalex.org/C2777904410","wikidata":"https://www.wikidata.org/wiki/Q7397","display_name":"Software","level":2,"score":0.09840837121009827}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1109/tdsc.2025.3530010","is_oa":false,"landing_page_url":"https://doi.org/10.1109/tdsc.2025.3530010","pdf_url":null,"source":{"id":"https://openalex.org/S133795288","display_name":"IEEE Transactions on Dependable and Secure Computing","issn_l":"1545-5971","issn":["1545-5971","1941-0018","2160-9209"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310320439","host_organization_name":"IEEE Computer Society","host_organization_lineage":["https://openalex.org/P4310320439","https://openalex.org/P4310319808"],"host_organization_lineage_names":["IEEE Computer Society","Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Transactions on Dependable and Secure Computing","raw_type":"journal-article"}],"best_oa_location":null,"sustainable_development_goals":[],"awards":[],"funders":[],"has_content":{"pdf":false,"grobid_xml":false},"content_urls":null,"referenced_works_count":31,"referenced_works":["https://openalex.org/W1480909796","https://openalex.org/W2009489720","https://openalex.org/W2113864883","https://openalex.org/W2134633067","https://openalex.org/W2296669295","https://openalex.org/W2515236103","https://openalex.org/W2574017551","https://openalex.org/W2584230735","https://openalex.org/W2795283266","https://openalex.org/W2947265301","https://openalex.org/W2964097210","https://openalex.org/W2984976544","https://openalex.org/W3015365135","https://openalex.org/W3015384571","https://openalex.org/W3138777601","https://openalex.org/W3172606155","https://openalex.org/W3194771370","https://openalex.org/W3207393608","https://openalex.org/W4235705169","https://openalex.org/W4237492309","https://openalex.org/W4240738830","https://openalex.org/W4244413641","https://openalex.org/W4246166885","https://openalex.org/W4288057783","https://openalex.org/W4308632293","https://openalex.org/W6606430823","https://openalex.org/W6637688222","https://openalex.org/W6753913213","https://openalex.org/W6774384908","https://openalex.org/W6779763331","https://openalex.org/W6782130387"],"related_works":["https://openalex.org/W4391375266","https://openalex.org/W2899084033","https://openalex.org/W2748952813","https://openalex.org/W2511770387","https://openalex.org/W3120811337","https://openalex.org/W2766647240","https://openalex.org/W4385301282","https://openalex.org/W2990186179","https://openalex.org/W4210660460","https://openalex.org/W3203597304"],"abstract_inverted_index":{"Hybrid":[0],"testing,":[1],"combining":[2],"fuzz":[3],"testing":[4,61,114,135],"and":[5,38,45,55,78,91,131,137,153,156,176,186],"concolic":[6,18,41,53,76,83,132,138],"execution,":[7],"has":[8],"emerged":[9],"as":[10],"an":[11],"effective":[12],"technique":[13],"for":[14,122],"bug":[15],"discovery.":[16],"However,":[17],"execution":[19,42,77,139],"becomes":[20],"the":[21,52,60,68,79,82,86,129,150,201],"performance":[22],"bottleneck":[23],"when":[24],"applied":[25],"to":[26,32,48,67,107,159,207],"real-world":[27,154],"software.":[28],"Despite":[29],"numerous":[30,71],"approaches":[31],"optimize":[33],"seed":[34],"scheduling,":[35],"symbolic":[36],"simulation,":[37],"constraint":[39,89],"solving,":[40],"remains":[43],"inefficient":[44],"ineffective":[46],"due":[47],"two":[49],"limitations.":[50],"First,":[51],"executor":[54,84,133],"fuzzer":[56,130],"do":[57],"not":[58],"synchronize":[59],"state":[62],"in":[63,74,111,141,172],"real":[64],"time,":[65],"leading":[66],"generation":[69],"of":[70,88,174,210],"duplicate":[72],"inputs":[73],"both":[75],"fuzzer.":[80],"Second,":[81],"overlooks":[85],"independence":[87],"solving":[90],"solves":[92],"constraints":[93],"sequentially,":[94],"which":[95,203,211],"introduces":[96],"significant":[97],"slowdown.":[98],"In":[99],"this":[100],"paper,":[101],"we":[102,145],"first":[103],"conduct":[104],"a":[105,119],"study":[106],"identify":[108],"these":[109],"limitations":[110],"existing":[112],"hybrid":[113,123],"systems.":[115,161],"We":[116],"then":[117],"propose":[118],"novel":[120],"design":[121],"fuzzing,":[124],"<sc":[125,166,191],"xmlns:mml=\"http://www.w3.org/1998/Math/MathML\"":[126,167,192],"xmlns:xlink=\"http://www.w3.org/1999/xlink\">CherryPicker</small>,":[127],"where":[128],"share":[134],"states,":[136],"runs":[140],"parallel":[142],"mode.":[143],"Finally,":[144],"evaluate":[146],"our":[147],"system":[148],"using":[149],"LAVA-M":[151],"benchmark":[152],"software":[155],"compare":[157],"it":[158],"state-of-the-art":[160],"The":[162],"results":[163],"demonstrate":[164],"that":[165],"xmlns:xlink=\"http://www.w3.org/1999/xlink\">CherryPicker</small>":[168,193],"outperforms":[169],"current":[170],"systems":[171],"terms":[173],"efficiency":[175],"effectiveness,":[177],"delivering":[178],"improved":[179],"runtime":[180],"performance,":[181],"generating":[182],"more":[183,188],"intriguing":[184],"inputs,":[185],"activating":[187],"code.":[189],"Notably,":[190],"exclusively":[194],"uncovers":[195],"six":[196],"previously":[197],"unknown":[198],"bugs":[199],"during":[200],"evaluation,":[202],"have":[204,212],"been":[205,213],"reported":[206],"developers,":[208],"all":[209],"confirmed":[214],"with":[215],"three":[216],"CVEs":[217],"assigned.":[218]},"counts_by_year":[],"updated_date":"2026-03-25T23:56:10.502304","created_date":"2025-10-10T00:00:00"}