{"id":"https://openalex.org/W7140275339","doi":"https://doi.org/10.1109/tdsc.2026.3677524","title":"NetPuzz: Testing Network Printers via Fully Black-Box and Feedback-Guided Protocol Fuzzing","display_name":"NetPuzz: Testing Network Printers via Fully Black-Box and Feedback-Guided Protocol Fuzzing","publication_year":2026,"publication_date":"2026-03-25","ids":{"openalex":"https://openalex.org/W7140275339","doi":"https://doi.org/10.1109/tdsc.2026.3677524"},"language":null,"primary_location":{"id":"doi:10.1109/tdsc.2026.3677524","is_oa":false,"landing_page_url":"https://doi.org/10.1109/tdsc.2026.3677524","pdf_url":null,"source":{"id":"https://openalex.org/S133795288","display_name":"IEEE Transactions on Dependable and Secure Computing","issn_l":"1545-5971","issn":["1545-5971","1941-0018","2160-9209"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310320439","host_organization_name":"IEEE Computer Society","host_organization_lineage":["https://openalex.org/P4310320439","https://openalex.org/P4310319808"],"host_organization_lineage_names":["IEEE Computer Society","Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Transactions on Dependable and Secure Computing","raw_type":"journal-article"},"type":"article","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5017174482","display_name":"Jia-Ju Bai","orcid":"https://orcid.org/0000-0002-9500-6100"},"institutions":[{"id":"https://openalex.org/I82880672","display_name":"Beihang University","ror":"https://ror.org/00wk2mp56","country_code":"CN","type":"education","lineage":["https://openalex.org/I82880672"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Jia-Ju Bai","raw_affiliation_strings":["School of Cyber Science and Technology, Beihang University, Beijing, China"],"raw_orcid":"https://orcid.org/0000-0002-9500-6100","affiliations":[{"raw_affiliation_string":"School of Cyber Science and Technology, Beihang University, Beijing, China","institution_ids":["https://openalex.org/I82880672"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5130593106","display_name":"Rui-Nan Hu","orcid":null},"institutions":[{"id":"https://openalex.org/I82880672","display_name":"Beihang University","ror":"https://ror.org/00wk2mp56","country_code":"CN","type":"education","lineage":["https://openalex.org/I82880672"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Rui-Nan Hu","raw_affiliation_strings":["School of Cyber Science and Technology, Beihang University, Beijing, China"],"raw_orcid":"https://orcid.org/0009-0002-5904-6479","affiliations":[{"raw_affiliation_string":"School of Cyber Science and Technology, Beihang University, Beijing, China","institution_ids":["https://openalex.org/I82880672"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5100398921","display_name":"Chenglong Li","orcid":"https://orcid.org/0000-0001-5777-6828"},"institutions":[{"id":"https://openalex.org/I82880672","display_name":"Beihang University","ror":"https://ror.org/00wk2mp56","country_code":"CN","type":"education","lineage":["https://openalex.org/I82880672"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Cheng Li","raw_affiliation_strings":["School of Cyber Science and Technology, Beihang University, Beijing, China"],"raw_orcid":"https://orcid.org/0009-0009-0161-5182","affiliations":[{"raw_affiliation_string":"School of Cyber Science and Technology, Beihang University, Beijing, China","institution_ids":["https://openalex.org/I82880672"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5100410518","display_name":"Jianjun Chen","orcid":"https://orcid.org/0000-0003-0206-3294"},"institutions":[{"id":"https://openalex.org/I99065089","display_name":"Tsinghua University","ror":"https://ror.org/03cve4549","country_code":"CN","type":"education","lineage":["https://openalex.org/I99065089"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Jianjun Chen","raw_affiliation_strings":["Institute for Network Sciences and Cyberspace, Tsinghua University, Beijing, China"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Institute for Network Sciences and Cyberspace, Tsinghua University, Beijing, China","institution_ids":["https://openalex.org/I99065089"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5130547753","display_name":"Rui Chen","orcid":null},"institutions":[{"id":"https://openalex.org/I4210166468","display_name":"Beijing Aerospace Flight Control Center","ror":"https://ror.org/007a14354","country_code":"CN","type":"other","lineage":["https://openalex.org/I4210166468"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Rui Chen","raw_affiliation_strings":["Beijing Institute of Control Engineering and Beijing Sunwise Information Technology Ltd., Beijing, China"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Beijing Institute of Control Engineering and Beijing Sunwise Information Technology Ltd., Beijing, China","institution_ids":["https://openalex.org/I4210166468"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5083017828","display_name":"Zhenyu Guan","orcid":"https://orcid.org/0000-0002-3959-338X"},"institutions":[{"id":"https://openalex.org/I82880672","display_name":"Beihang University","ror":"https://ror.org/00wk2mp56","country_code":"CN","type":"education","lineage":["https://openalex.org/I82880672"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Zhenyu Guan","raw_affiliation_strings":["School of Cyber Science and Technology, Beihang University, Beijing, China"],"raw_orcid":"https://orcid.org/0000-0002-3959-338X","affiliations":[{"raw_affiliation_string":"School of Cyber Science and Technology, Beihang University, Beijing, China","institution_ids":["https://openalex.org/I82880672"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":3,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":{"value":2645,"currency":"USD","value_usd":2645},"apc_paid":null,"fwci":0.0,"has_fulltext":false,"cited_by_count":0,"citation_normalized_percentile":{"value":0.25829187,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":null,"biblio":{"volume":"23","issue":"4","first_page":"7848","last_page":"7863"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10743","display_name":"Software Testing and Debugging Techniques","score":0.3384000062942505,"subfield":{"id":"https://openalex.org/subfields/1712","display_name":"Software"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T10743","display_name":"Software Testing and Debugging Techniques","score":0.3384000062942505,"subfield":{"id":"https://openalex.org/subfields/1712","display_name":"Software"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11032","display_name":"VLSI and Analog Circuit Testing","score":0.0763000026345253,"subfield":{"id":"https://openalex.org/subfields/1708","display_name":"Hardware and Architecture"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10720","display_name":"Complexity and Algorithms in Graphs","score":0.06920000165700912,"subfield":{"id":"https://openalex.org/subfields/1703","display_name":"Computational Theory and Mathematics"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/fuzz-testing","display_name":"Fuzz testing","score":0.8855999708175659},{"id":"https://openalex.org/keywords/protocol","display_name":"Protocol (science)","score":0.6328999996185303},{"id":"https://openalex.org/keywords/communications-protocol","display_name":"Communications protocol","score":0.4235999882221222},{"id":"https://openalex.org/keywords/system-testing","display_name":"System testing","score":0.3555000126361847},{"id":"https://openalex.org/keywords/conformance-testing","display_name":"Conformance testing","score":0.35190001130104065},{"id":"https://openalex.org/keywords/intelligent-network","display_name":"Intelligent Network","score":0.3321000039577484},{"id":"https://openalex.org/keywords/electronic-mail","display_name":"Electronic mail","score":0.30799999833106995},{"id":"https://openalex.org/keywords/internet-protocol-suite","display_name":"Internet protocol suite","score":0.29789999127388}],"concepts":[{"id":"https://openalex.org/C111065885","wikidata":"https://www.wikidata.org/wiki/Q1189053","display_name":"Fuzz testing","level":3,"score":0.8855999708175659},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.8194000124931335},{"id":"https://openalex.org/C2780385302","wikidata":"https://www.wikidata.org/wiki/Q367158","display_name":"Protocol (science)","level":3,"score":0.6328999996185303},{"id":"https://openalex.org/C31258907","wikidata":"https://www.wikidata.org/wiki/Q1301371","display_name":"Computer network","level":1,"score":0.6097999811172485},{"id":"https://openalex.org/C149635348","wikidata":"https://www.wikidata.org/wiki/Q193040","display_name":"Embedded system","level":1,"score":0.48500001430511475},{"id":"https://openalex.org/C12269588","wikidata":"https://www.wikidata.org/wiki/Q132364","display_name":"Communications protocol","level":2,"score":0.4235999882221222},{"id":"https://openalex.org/C7166840","wikidata":"https://www.wikidata.org/wiki/Q1199682","display_name":"System testing","level":2,"score":0.3555000126361847},{"id":"https://openalex.org/C76844732","wikidata":"https://www.wikidata.org/wiki/Q4072285","display_name":"Conformance testing","level":3,"score":0.35190001130104065},{"id":"https://openalex.org/C51675839","wikidata":"https://www.wikidata.org/wiki/Q1665681","display_name":"Intelligent Network","level":2,"score":0.3321000039577484},{"id":"https://openalex.org/C3020028006","wikidata":"https://www.wikidata.org/wiki/Q9158","display_name":"Electronic mail","level":2,"score":0.30799999833106995},{"id":"https://openalex.org/C65567647","wikidata":"https://www.wikidata.org/wiki/Q81414","display_name":"Internet protocol suite","level":3,"score":0.29789999127388},{"id":"https://openalex.org/C137471899","wikidata":"https://www.wikidata.org/wiki/Q11381","display_name":"Local area network","level":2,"score":0.2921999990940094},{"id":"https://openalex.org/C104954878","wikidata":"https://www.wikidata.org/wiki/Q1648707","display_name":"Routing protocol","level":3,"score":0.29179999232292175},{"id":"https://openalex.org/C52531181","wikidata":"https://www.wikidata.org/wiki/Q186224","display_name":"Wireless Application Protocol","level":4,"score":0.2808000147342682},{"id":"https://openalex.org/C41878487","wikidata":"https://www.wikidata.org/wiki/Q191018","display_name":"Session Initiation Protocol","level":3,"score":0.2806999981403351},{"id":"https://openalex.org/C93996380","wikidata":"https://www.wikidata.org/wiki/Q44127","display_name":"Server","level":2,"score":0.2800999879837036},{"id":"https://openalex.org/C159631557","wikidata":"https://www.wikidata.org/wiki/Q1546066","display_name":"Networking hardware","level":2,"score":0.2782999873161316},{"id":"https://openalex.org/C169485995","wikidata":"https://www.wikidata.org/wiki/Q42283","display_name":"File Transfer Protocol","level":3,"score":0.27149999141693115},{"id":"https://openalex.org/C162571340","wikidata":"https://www.wikidata.org/wiki/Q1667988","display_name":"Internet Protocol Control Protocol","level":5,"score":0.27070000767707825},{"id":"https://openalex.org/C111919701","wikidata":"https://www.wikidata.org/wiki/Q9135","display_name":"Operating system","level":1,"score":0.26820001006126404},{"id":"https://openalex.org/C33884865","wikidata":"https://www.wikidata.org/wiki/Q1254335","display_name":"Cryptographic protocol","level":3,"score":0.26460000872612},{"id":"https://openalex.org/C113508815","wikidata":"https://www.wikidata.org/wiki/Q193446","display_name":"Packet switching","level":3,"score":0.2614000141620636},{"id":"https://openalex.org/C2777904410","wikidata":"https://www.wikidata.org/wiki/Q7397","display_name":"Software","level":2,"score":0.25999999046325684},{"id":"https://openalex.org/C126298526","wikidata":"https://www.wikidata.org/wiki/Q189376","display_name":"Reduced instruction set computing","level":3,"score":0.25209999084472656}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1109/tdsc.2026.3677524","is_oa":false,"landing_page_url":"https://doi.org/10.1109/tdsc.2026.3677524","pdf_url":null,"source":{"id":"https://openalex.org/S133795288","display_name":"IEEE Transactions on Dependable and Secure Computing","issn_l":"1545-5971","issn":["1545-5971","1941-0018","2160-9209"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310320439","host_organization_name":"IEEE Computer Society","host_organization_lineage":["https://openalex.org/P4310320439","https://openalex.org/P4310319808"],"host_organization_lineage_names":["IEEE Computer Society","Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Transactions on Dependable and Secure Computing","raw_type":"journal-article"}],"best_oa_location":null,"sustainable_development_goals":[],"awards":[{"id":"https://openalex.org/G7339461508","display_name":null,"funder_award_id":"62572021","funder_id":"https://openalex.org/F4320321001","funder_display_name":"National Natural Science Foundation of China"}],"funders":[{"id":"https://openalex.org/F4320321001","display_name":"National Natural Science Foundation of China","ror":"https://ror.org/01h0zpd94"}],"has_content":{"pdf":false,"grobid_xml":false},"content_urls":null,"referenced_works_count":30,"referenced_works":["https://openalex.org/W2410961113","https://openalex.org/W2645364470","https://openalex.org/W2782780792","https://openalex.org/W2791018263","https://openalex.org/W2797989990","https://openalex.org/W2811217643","https://openalex.org/W2964241064","https://openalex.org/W3030859822","https://openalex.org/W3047947484","https://openalex.org/W3090180250","https://openalex.org/W3111743984","https://openalex.org/W3138456218","https://openalex.org/W3155102819","https://openalex.org/W3212565000","https://openalex.org/W4210660460","https://openalex.org/W4210759690","https://openalex.org/W4210883097","https://openalex.org/W4220830491","https://openalex.org/W4285490418","https://openalex.org/W4308409817","https://openalex.org/W4379517532","https://openalex.org/W4382941062","https://openalex.org/W4391724785","https://openalex.org/W4391725314","https://openalex.org/W4397028768","https://openalex.org/W4402264054","https://openalex.org/W4402696986","https://openalex.org/W4406610709","https://openalex.org/W4407026523","https://openalex.org/W4416457592"],"related_works":[],"abstract_inverted_index":{"Network":[0],"printers":[1,77],"have":[2,13,169],"been":[3,170],"widely":[4],"utilized":[5],"to":[6,51,152],"print":[7],"various":[8,38],"materials,":[9],"but":[10],"they":[11],"still":[12],"security":[14],"risks,":[15],"caused":[16],"by":[17],"vulnerabilities":[18,36],"that":[19,32],"can":[20],"be":[21],"exploited":[22],"for":[23,78],"malicious":[24],"attacks.":[25],"Fuzzing":[26],"is":[27],"a":[28,71],"popular":[29],"testing":[30,86],"technique":[31],"has":[33],"found":[34],"many":[35],"in":[37,46],"scenarios.":[39],"However,":[40],"existing":[41],"fuzzing":[42,73,119],"approaches":[43],"are":[44],"limited":[45],"network":[47,76,88,156],"printer":[48,59,103,131],"testing,":[49],"due":[50],"important":[52],"difficulties":[53],"including":[54],"unavailable":[55],"source":[56,95],"code":[57],"of":[58,75,87,94,102,109,167],"firmware,":[60],"ineffective":[61],"input":[62],"generation,":[63],"etc.":[64],"In":[65],"this":[66],"paper,":[67],"we":[68],"design":[69],"NetPuzz,":[70],"feedback-guided":[72],"framework":[74],"automated":[79],"vulnerability":[80,110],"detection.":[81],"It":[82],"performs":[83],"fully":[84],"black-box":[85],"printing":[89],"protocols,":[90],"without":[91],"the":[92,143],"requirement":[93],"code,":[96],"reverse":[97],"engineering":[98],"or":[99],"virtual":[100],"execution":[101],"firmware.":[104],"To":[105],"achieve":[106],"good":[107],"results":[108],"detection,":[111],"NetPuzz":[112,151],"utilizes":[113],"two":[114],"key":[115],"techniques:":[116],"(1)":[117],"asequence-tree-based":[118],"approachthat":[120],"generates":[121],"effective":[122],"input-packet":[123,145],"sequences":[124,141,146],"based":[125],"on":[126],"sequence":[127,133],"tree":[128],"mutation":[129],"and":[130,158,163],"response":[132],"guidance;":[134],"(2)":[135],"abisection-based":[136],"strategythat":[137],"extracts":[138],"minimal":[139],"PoC":[140],"from":[142],"original":[144],"triggering":[147],"vulnerabilities.":[148],"We":[149],"use":[150],"test":[153],"seven":[154],"commercial":[155],"printers,":[157],"it":[159],"finds":[160],"25":[161],"new":[162],"unique":[164],"vulnerabilities,":[165],"23":[166],"which":[168],"assigned":[171],"with":[172],"CVE/CNVD":[173],"IDs.":[174]},"counts_by_year":[],"updated_date":"2026-08-21T09:56:20.448147","created_date":"2026-03-26T00:00:00"}