{"id":"https://openalex.org/W4412403871","doi":"https://doi.org/10.1109/tdsc.2025.3588878","title":"One Mutation Fits All: Exploring Universal Library Fuzzing Based on Exogenous Mutation","display_name":"One Mutation Fits All: Exploring Universal Library Fuzzing Based on Exogenous Mutation","publication_year":2025,"publication_date":"2025-07-14","ids":{"openalex":"https://openalex.org/W4412403871","doi":"https://doi.org/10.1109/tdsc.2025.3588878"},"language":"en","primary_location":{"id":"doi:10.1109/tdsc.2025.3588878","is_oa":false,"landing_page_url":"https://doi.org/10.1109/tdsc.2025.3588878","pdf_url":null,"source":{"id":"https://openalex.org/S133795288","display_name":"IEEE Transactions on Dependable and Secure Computing","issn_l":"1545-5971","issn":["1545-5971","1941-0018","2160-9209"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310320439","host_organization_name":"IEEE Computer Society","host_organization_lineage":["https://openalex.org/P4310320439","https://openalex.org/P4310319808"],"host_organization_lineage_names":["IEEE Computer Society","Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Transactions on Dependable and Secure Computing","raw_type":"journal-article"},"type":"article","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5064232110","display_name":"Ruiqi Dong","orcid":"https://orcid.org/0009-0000-0553-3023"},"institutions":[{"id":"https://openalex.org/I57093077","display_name":"Swinburne University of Technology","ror":"https://ror.org/031rekg67","country_code":"AU","type":"education","lineage":["https://openalex.org/I57093077"]}],"countries":["AU"],"is_corresponding":false,"raw_author_name":"Ruiqi Dong","raw_affiliation_strings":["Department of Computing Technologies, Swinburne University of Technology, Hawthorn, VIC, Australia","Department of Computing Technologies, Swinburne University of Technology, Hawthorn, Australia"],"raw_orcid":"https://orcid.org/0009-0000-0553-3023","affiliations":[{"raw_affiliation_string":"Department of Computing Technologies, Swinburne University of Technology, Hawthorn, VIC, Australia","institution_ids":["https://openalex.org/I57093077"]},{"raw_affiliation_string":"Department of Computing Technologies, Swinburne University of Technology, Hawthorn, Australia","institution_ids":["https://openalex.org/I57093077"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5043445657","display_name":"Fan Tong","orcid":"https://orcid.org/0000-0002-1692-2769"},"institutions":[{"id":"https://openalex.org/I3131625388","display_name":"University Town of Shenzhen","ror":"https://ror.org/05f5j6225","country_code":"CN","type":"education","lineage":["https://openalex.org/I3131625388"]},{"id":"https://openalex.org/I99065089","display_name":"Tsinghua University","ror":"https://ror.org/03cve4549","country_code":"CN","type":"education","lineage":["https://openalex.org/I99065089"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Fanke Tong","raw_affiliation_strings":["Shenzhen International Graduate School, Tsinghua University, Shenzhen, China","International Graduate School, Tsinghua University, Shenzhen, China"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Shenzhen International Graduate School, Tsinghua University, Shenzhen, China","institution_ids":["https://openalex.org/I3131625388","https://openalex.org/I99065089"]},{"raw_affiliation_string":"International Graduate School, Tsinghua University, Shenzhen, China","institution_ids":["https://openalex.org/I3131625388","https://openalex.org/I99065089"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5042189197","display_name":"He Huang","orcid":"https://orcid.org/0000-0001-6998-8131"},"institutions":[{"id":"https://openalex.org/I57093077","display_name":"Swinburne University of Technology","ror":"https://ror.org/031rekg67","country_code":"AU","type":"education","lineage":["https://openalex.org/I57093077"]}],"countries":["AU"],"is_corresponding":false,"raw_author_name":"He Huang","raw_affiliation_strings":["Department of Computing Technologies, Swinburne University of Technology, Hawthorn, VIC, Australia","Department of Computing Technologies, Swinburne University of Technology, Hawthorn, Australia"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Department of Computing Technologies, Swinburne University of Technology, Hawthorn, VIC, Australia","institution_ids":["https://openalex.org/I57093077"]},{"raw_affiliation_string":"Department of Computing Technologies, Swinburne University of Technology, Hawthorn, Australia","institution_ids":["https://openalex.org/I57093077"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5015792635","display_name":"Xiaogang Zhu","orcid":"https://orcid.org/0000-0002-0647-4747"},"institutions":[{"id":"https://openalex.org/I5681781","display_name":"The University of Adelaide","ror":"https://ror.org/00892tw58","country_code":"AU","type":"education","lineage":["https://openalex.org/I5681781"]}],"countries":["AU"],"is_corresponding":false,"raw_author_name":"Xiaogang Zhu","raw_affiliation_strings":["School of Computer and Mathematical Sciences, The University of Adelaide, Adelaide, SA, Australia"],"raw_orcid":"https://orcid.org/0000-0002-0647-4747","affiliations":[{"raw_affiliation_string":"School of Computer and Mathematical Sciences, The University of Adelaide, Adelaide, SA, Australia","institution_ids":["https://openalex.org/I5681781"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5101600503","display_name":"Xi Xiao","orcid":"https://orcid.org/0000-0003-1521-9542"},"institutions":[{"id":"https://openalex.org/I3131625388","display_name":"University Town of Shenzhen","ror":"https://ror.org/05f5j6225","country_code":"CN","type":"education","lineage":["https://openalex.org/I3131625388"]},{"id":"https://openalex.org/I99065089","display_name":"Tsinghua University","ror":"https://ror.org/03cve4549","country_code":"CN","type":"education","lineage":["https://openalex.org/I99065089"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Xi Xiao","raw_affiliation_strings":["Shenzhen International Graduate School, Tsinghua University, Shenzhen, China","International Graduate School, Tsinghua University, Shenzhen, China"],"raw_orcid":"https://orcid.org/0000-0003-1521-9542","affiliations":[{"raw_affiliation_string":"Shenzhen International Graduate School, Tsinghua University, Shenzhen, China","institution_ids":["https://openalex.org/I3131625388","https://openalex.org/I99065089"]},{"raw_affiliation_string":"International Graduate School, Tsinghua University, Shenzhen, China","institution_ids":["https://openalex.org/I3131625388","https://openalex.org/I99065089"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5070990953","display_name":"Shaohua Wang","orcid":"https://orcid.org/0000-0001-5777-7759"},"institutions":[{"id":"https://openalex.org/I137867983","display_name":"Central University of Finance and Economics","ror":"https://ror.org/008e3hf02","country_code":"CN","type":"education","lineage":["https://openalex.org/I137867983"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Shaohua Wang","raw_affiliation_strings":["Central University of Finance and Economics, Beijing, China","Central University of Finance and Economics"],"raw_orcid":"https://orcid.org/0000-0001-5777-7759","affiliations":[{"raw_affiliation_string":"Central University of Finance and Economics, Beijing, China","institution_ids":["https://openalex.org/I137867983"]},{"raw_affiliation_string":"Central University of Finance and Economics","institution_ids":["https://openalex.org/I137867983"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5076576641","display_name":"Sheng Wen","orcid":"https://orcid.org/0000-0003-0655-666X"},"institutions":[{"id":"https://openalex.org/I57093077","display_name":"Swinburne University of Technology","ror":"https://ror.org/031rekg67","country_code":"AU","type":"education","lineage":["https://openalex.org/I57093077"]}],"countries":["AU"],"is_corresponding":false,"raw_author_name":"Sheng Wen","raw_affiliation_strings":["Department of Computing Technologies, Swinburne University of Technology, Hawthorn, VIC, Australia","Department of Computing Technologies, Swinburne University of Technology, Hawthorn, Australia"],"raw_orcid":"https://orcid.org/0000-0003-0655-666X","affiliations":[{"raw_affiliation_string":"Department of Computing Technologies, Swinburne University of Technology, Hawthorn, VIC, Australia","institution_ids":["https://openalex.org/I57093077"]},{"raw_affiliation_string":"Department of Computing Technologies, Swinburne University of Technology, Hawthorn, Australia","institution_ids":["https://openalex.org/I57093077"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5100666554","display_name":"Yang Xiang","orcid":"https://orcid.org/0000-0001-5252-0831"},"institutions":[{"id":"https://openalex.org/I57093077","display_name":"Swinburne University of Technology","ror":"https://ror.org/031rekg67","country_code":"AU","type":"education","lineage":["https://openalex.org/I57093077"]}],"countries":["AU"],"is_corresponding":false,"raw_author_name":"Yang Xiang","raw_affiliation_strings":["Department of Computing Technologies, Swinburne University of Technology, Hawthorn, VIC, Australia","Department of Computing Technologies, Swinburne University of Technology, Hawthorn, Australia"],"raw_orcid":"https://orcid.org/0000-0001-5252-0831","affiliations":[{"raw_affiliation_string":"Department of Computing Technologies, Swinburne University of Technology, Hawthorn, VIC, Australia","institution_ids":["https://openalex.org/I57093077"]},{"raw_affiliation_string":"Department of Computing Technologies, Swinburne University of Technology, Hawthorn, Australia","institution_ids":["https://openalex.org/I57093077"]}]}],"institutions":[],"countries_distinct_count":2,"institutions_distinct_count":8,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":3.6106,"has_fulltext":false,"cited_by_count":3,"citation_normalized_percentile":{"value":0.93963421,"is_in_top_1_percent":false,"is_in_top_10_percent":true},"cited_by_percentile_year":{"min":91,"max":99},"biblio":{"volume":"22","issue":"6","first_page":"6580","last_page":"6591"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10533","display_name":"Teaching and Learning Programming","score":0.9718000292778015,"subfield":{"id":"https://openalex.org/subfields/1706","display_name":"Computer Science Applications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T10533","display_name":"Teaching and Learning Programming","score":0.9718000292778015,"subfield":{"id":"https://openalex.org/subfields/1706","display_name":"Computer Science Applications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10731","display_name":"Educational Games and Gamification","score":0.9624000191688538,"subfield":{"id":"https://openalex.org/subfields/3204","display_name":"Developmental and Educational Psychology"},"field":{"id":"https://openalex.org/fields/32","display_name":"Psychology"},"domain":{"id":"https://openalex.org/domains/2","display_name":"Social Sciences"}},{"id":"https://openalex.org/T10636","display_name":"Innovative Teaching and Learning Methods","score":0.9347000122070312,"subfield":{"id":"https://openalex.org/subfields/3204","display_name":"Developmental and Educational Psychology"},"field":{"id":"https://openalex.org/fields/32","display_name":"Psychology"},"domain":{"id":"https://openalex.org/domains/2","display_name":"Social Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/fuzz-testing","display_name":"Fuzz testing","score":0.8392900228500366},{"id":"https://openalex.org/keywords/mutation","display_name":"Mutation","score":0.6978108882904053},{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.6666615009307861},{"id":"https://openalex.org/keywords/mutation-testing","display_name":"Mutation testing","score":0.5434380769729614},{"id":"https://openalex.org/keywords/genetics","display_name":"Genetics","score":0.3232887089252472},{"id":"https://openalex.org/keywords/biology","display_name":"Biology","score":0.19497919082641602},{"id":"https://openalex.org/keywords/programming-language","display_name":"Programming language","score":0.14576348662376404},{"id":"https://openalex.org/keywords/software","display_name":"Software","score":0.1176663339138031},{"id":"https://openalex.org/keywords/gene","display_name":"Gene","score":0.07761877775192261}],"concepts":[{"id":"https://openalex.org/C111065885","wikidata":"https://www.wikidata.org/wiki/Q1189053","display_name":"Fuzz testing","level":3,"score":0.8392900228500366},{"id":"https://openalex.org/C501734568","wikidata":"https://www.wikidata.org/wiki/Q42918","display_name":"Mutation","level":3,"score":0.6978108882904053},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.6666615009307861},{"id":"https://openalex.org/C163565370","wikidata":"https://www.wikidata.org/wiki/Q4308623","display_name":"Mutation testing","level":4,"score":0.5434380769729614},{"id":"https://openalex.org/C54355233","wikidata":"https://www.wikidata.org/wiki/Q7162","display_name":"Genetics","level":1,"score":0.3232887089252472},{"id":"https://openalex.org/C86803240","wikidata":"https://www.wikidata.org/wiki/Q420","display_name":"Biology","level":0,"score":0.19497919082641602},{"id":"https://openalex.org/C199360897","wikidata":"https://www.wikidata.org/wiki/Q9143","display_name":"Programming language","level":1,"score":0.14576348662376404},{"id":"https://openalex.org/C2777904410","wikidata":"https://www.wikidata.org/wiki/Q7397","display_name":"Software","level":2,"score":0.1176663339138031},{"id":"https://openalex.org/C104317684","wikidata":"https://www.wikidata.org/wiki/Q7187","display_name":"Gene","level":2,"score":0.07761877775192261}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1109/tdsc.2025.3588878","is_oa":false,"landing_page_url":"https://doi.org/10.1109/tdsc.2025.3588878","pdf_url":null,"source":{"id":"https://openalex.org/S133795288","display_name":"IEEE Transactions on Dependable and Secure Computing","issn_l":"1545-5971","issn":["1545-5971","1941-0018","2160-9209"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310320439","host_organization_name":"IEEE Computer Society","host_organization_lineage":["https://openalex.org/P4310320439","https://openalex.org/P4310319808"],"host_organization_lineage_names":["IEEE Computer Society","Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Transactions on Dependable and Secure Computing","raw_type":"journal-article"}],"best_oa_location":null,"sustainable_development_goals":[],"awards":[],"funders":[],"has_content":{"grobid_xml":false,"pdf":false},"content_urls":null,"referenced_works_count":29,"referenced_works":["https://openalex.org/W1577581905","https://openalex.org/W2049695835","https://openalex.org/W2119296494","https://openalex.org/W2122947685","https://openalex.org/W2135841285","https://openalex.org/W2534135179","https://openalex.org/W2535617737","https://openalex.org/W2613534458","https://openalex.org/W2701225458","https://openalex.org/W2757104921","https://openalex.org/W2795192879","https://openalex.org/W2899781671","https://openalex.org/W2927166905","https://openalex.org/W2951091523","https://openalex.org/W2963350015","https://openalex.org/W2964097210","https://openalex.org/W2964241064","https://openalex.org/W2974819274","https://openalex.org/W3136690412","https://openalex.org/W3180202404","https://openalex.org/W3213337076","https://openalex.org/W4210660460","https://openalex.org/W4284704973","https://openalex.org/W4308632293","https://openalex.org/W4386043407","https://openalex.org/W4394745214","https://openalex.org/W4394769544","https://openalex.org/W4397028768","https://openalex.org/W4406610709"],"related_works":["https://openalex.org/W4391375266","https://openalex.org/W2123958666","https://openalex.org/W2546792321","https://openalex.org/W2951506308","https://openalex.org/W2146849562","https://openalex.org/W2488011889","https://openalex.org/W2165310406","https://openalex.org/W2139763472","https://openalex.org/W2028961943","https://openalex.org/W2546441935"],"abstract_inverted_index":{"Fuzzing":[0],"is":[1],"a":[2,30,229,236],"critical":[3],"technique":[4],"for":[5,142],"uncovering":[6],"vulnerabilities":[7],"in":[8,188,203,213,232],"software":[9],"libraries.":[10],"However,":[11],"current":[12],"approaches":[13],"often":[14],"struggle":[15],"with":[16,21,123,166,196,208],"cross-language":[17,144],"compatibility":[18],"and":[19,97,109,162,174,176,182,194,210,249,256],"integration":[20,122],"diverse":[22,94,246],"fuzzing":[23,34,98,233,250],"tools.":[24,99],"We":[25,40,135],"propose":[26],"<monospace":[27,87,151,225],"xmlns:mml=\"http://www.w3.org/1998/Math/MathML\"":[28,88,152,226],"xmlns:xlink=\"http://www.w3.org/1999/xlink\">EXo-Muta</monospace>,":[29],"novel":[31],"universal":[32],"library":[33,259],"framework":[35],"based":[36],"on":[37,154,217,220,223],"exogenous":[38],"mutation.":[39],"use":[41],"the":[42,56,62,76,81,115,132,254],"term":[43],"\u2018exogenous\u2019":[44],"to":[45,55,104,198],"describe":[46],"this":[47],"new":[48],"mutation":[49,82,112],"process":[50,83],"because":[51],"it":[52,165],"operates":[53],"externally":[54],"fuzzer's":[57],"core":[58],"engine,":[59],"executing":[60],"within":[61,75],"fuzz":[63],"driver":[64],"as":[65,172,180],"an":[66],"independent":[67],"component,":[68],"unlike":[69],"traditional":[70],"endogenous":[71],"mutations":[72],"tightly":[73],"integrated":[74,207],"fuzzer":[77],"itself.":[78],"By":[79],"decoupling":[80],"from":[84],"specific":[85],"fuzzers,":[86,126,170],"xmlns:xlink=\"http://www.w3.org/1999/xlink\">EXo-Muta</monospace>":[89,153,227],"achieves":[90],"unprecedented":[91],"adaptability":[92],"across":[93,158,191,245],"programming":[95,247],"languages":[96,248],"It":[100],"leverages":[101],"static":[102],"analysis":[103],"extract":[105],"structured":[106],"data":[107,145],"representations":[108],"applies":[110],"language-independent":[111],"operators":[113],"at":[114],"code":[116,189,243],"level.":[117],"This":[118],"design":[119],"enables":[120],"seamless":[121],"various":[124],"existing":[125],"enhancing":[127],"their":[128],"performance":[129],"regardless":[130],"of":[131,258],"target":[133],"language.":[134],"further":[136],"utilize":[137],"large":[138],"language":[139],"models":[140],"(LLM)":[141],"efficient":[143],"conversion.":[146],"In":[147],"experiments,":[148],"we":[149],"evaluated":[150],"20":[155],"real-world":[156],"libraries":[157],"C++,":[159],"Python,":[160,218],"Java,":[161,221],"JavaScript,":[163],"integrating":[164],"multiple":[167],"stateof-":[168],"the-art":[169],"such":[171,179],"AFL++":[173],"libFuzzer,":[175,209],"languagespecific":[177],"tools,":[178,251],"Atheris":[181],"Jazzer.":[183],"Results":[184],"show":[185],"significant":[186,230],"improvements":[187],"coverage":[190,244],"different":[192],"fuzzers":[193],"languages,":[195],"up":[197],"58%":[199],"more":[200],"edges":[201],"discovered":[202],"C++":[204],"projects":[205],"when":[206],"consistent":[211],"outperformance":[212],"other":[214],"scenarios":[215],"(27%":[216],"9%":[219],"6%":[222],"JavaScript).":[224],"represents":[228],"advancement":[231],"technology,":[234],"offering":[235],"universal,":[237],"language-agnostic":[238],"approach":[239],"that":[240],"substantially":[241],"improves":[242],"thereby":[252],"expanding":[253],"reach":[255],"effectiveness":[257],"API":[260],"testing.":[261]},"counts_by_year":[{"year":2026,"cited_by_count":2},{"year":2025,"cited_by_count":1}],"updated_date":"2026-06-11T09:08:48.828518","created_date":"2025-10-10T00:00:00"}