{"id":"https://openalex.org/W4221162498","doi":"https://doi.org/10.1109/tifs.2022.3192991","title":"SNPSFuzzer: A Fast Greybox Fuzzer for Stateful Network Protocols Using Snapshots","display_name":"SNPSFuzzer: A Fast Greybox Fuzzer for Stateful Network Protocols Using Snapshots","publication_year":2022,"publication_date":"2022-01-01","ids":{"openalex":"https://openalex.org/W4221162498","doi":"https://doi.org/10.1109/tifs.2022.3192991"},"language":"en","primary_location":{"id":"doi:10.1109/tifs.2022.3192991","is_oa":false,"landing_page_url":"https://doi.org/10.1109/tifs.2022.3192991","pdf_url":null,"source":{"id":"https://openalex.org/S61310614","display_name":"IEEE Transactions on Information Forensics and Security","issn_l":"1556-6013","issn":["1556-6013","1556-6021"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310319808","host_organization_name":"Institute of Electrical and Electronics Engineers","host_organization_lineage":["https://openalex.org/P4310319808"],"host_organization_lineage_names":["Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Transactions on Information Forensics and Security","raw_type":"journal-article"},"type":"article","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5100633035","display_name":"Junqiang Li","orcid":"https://orcid.org/0000-0002-8454-996X"},"institutions":[{"id":"https://openalex.org/I150229711","display_name":"University of Electronic Science and Technology of China","ror":"https://ror.org/04qr3zq92","country_code":"CN","type":"education","lineage":["https://openalex.org/I150229711"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Junqiang Li","raw_affiliation_strings":["School of Information and Communication Engineering, University of Electronic Science and Technology of China, Chengdu, China"],"raw_orcid":"https://orcid.org/0000-0002-8454-996X","affiliations":[{"raw_affiliation_string":"School of Information and Communication Engineering, University of Electronic Science and Technology of China, Chengdu, China","institution_ids":["https://openalex.org/I150229711"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5020292808","display_name":"Senyi Li","orcid":"https://orcid.org/0000-0003-1597-2702"},"institutions":[{"id":"https://openalex.org/I150229711","display_name":"University of Electronic Science and Technology of China","ror":"https://ror.org/04qr3zq92","country_code":"CN","type":"education","lineage":["https://openalex.org/I150229711"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Senyi Li","raw_affiliation_strings":["School of Information and Communication Engineering, University of Electronic Science and Technology of China, Chengdu, China"],"raw_orcid":"https://orcid.org/0000-0003-1597-2702","affiliations":[{"raw_affiliation_string":"School of Information and Communication Engineering, University of Electronic Science and Technology of China, Chengdu, China","institution_ids":["https://openalex.org/I150229711"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5053945147","display_name":"Gang Sun","orcid":"https://orcid.org/0000-0002-2448-8915"},"institutions":[{"id":"https://openalex.org/I150229711","display_name":"University of Electronic Science and Technology of China","ror":"https://ror.org/04qr3zq92","country_code":"CN","type":"education","lineage":["https://openalex.org/I150229711"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Gang Sun","raw_affiliation_strings":["Key Laboratory of Optical Fiber Sensing and Communications (Ministry of Education), University of Electronic Science and Technology of China, Chengdu, China","Agile and Intelligent Computing Key Laboratory of Sichuan Province, Chengdu, China"],"raw_orcid":"https://orcid.org/0000-0002-2448-8915","affiliations":[{"raw_affiliation_string":"Key Laboratory of Optical Fiber Sensing and Communications (Ministry of Education), University of Electronic Science and Technology of China, Chengdu, China","institution_ids":["https://openalex.org/I150229711"]},{"raw_affiliation_string":"Agile and Intelligent Computing Key Laboratory of Sichuan Province, Chengdu, China","institution_ids":[]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5100443178","display_name":"Ting Chen","orcid":"https://orcid.org/0000-0001-9165-8331"},"institutions":[{"id":"https://openalex.org/I150229711","display_name":"University of Electronic Science and Technology of China","ror":"https://ror.org/04qr3zq92","country_code":"CN","type":"education","lineage":["https://openalex.org/I150229711"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Ting Chen","raw_affiliation_strings":["Center for Cybersecurity, University of Electronic Science and Technology of China, Chengdu, China"],"raw_orcid":"https://orcid.org/0000-0001-9165-8331","affiliations":[{"raw_affiliation_string":"Center for Cybersecurity, University of Electronic Science and Technology of China, Chengdu, China","institution_ids":["https://openalex.org/I150229711"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5101507232","display_name":"Hongfang Yu","orcid":"https://orcid.org/0000-0002-5219-1780"},"institutions":[{"id":"https://openalex.org/I150229711","display_name":"University of Electronic Science and Technology of China","ror":"https://ror.org/04qr3zq92","country_code":"CN","type":"education","lineage":["https://openalex.org/I150229711"]},{"id":"https://openalex.org/I4210136793","display_name":"Peng Cheng Laboratory","ror":"https://ror.org/03qdqbt06","country_code":"CN","type":"facility","lineage":["https://openalex.org/I4210136793"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Hongfang Yu","raw_affiliation_strings":["Key Laboratory of Optical Fiber Sensing and Communications (Ministry of Education), University of Electronic Science and Technology of China, Chengdu, China","Peng Cheng Laboratory, Shenzhen, China"],"raw_orcid":"https://orcid.org/0000-0002-5219-1780","affiliations":[{"raw_affiliation_string":"Key Laboratory of Optical Fiber Sensing and Communications (Ministry of Education), University of Electronic Science and Technology of China, Chengdu, China","institution_ids":["https://openalex.org/I150229711"]},{"raw_affiliation_string":"Peng Cheng Laboratory, Shenzhen, China","institution_ids":["https://openalex.org/I4210136793"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":5,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":16.0683,"has_fulltext":false,"cited_by_count":64,"citation_normalized_percentile":{"value":0.99538745,"is_in_top_1_percent":true,"is_in_top_10_percent":true},"cited_by_percentile_year":{"min":90,"max":100},"biblio":{"volume":"17","issue":null,"first_page":"2673","last_page":"2687"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10743","display_name":"Software Testing and Debugging Techniques","score":0.9998999834060669,"subfield":{"id":"https://openalex.org/subfields/1712","display_name":"Software"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T10743","display_name":"Software Testing and Debugging Techniques","score":0.9998999834060669,"subfield":{"id":"https://openalex.org/subfields/1712","display_name":"Software"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":0.9983000159263611,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T12127","display_name":"Software System Performance and Reliability","score":0.996399998664856,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/stateful-firewall","display_name":"Stateful firewall","score":0.9546916484832764},{"id":"https://openalex.org/keywords/fuzz-testing","display_name":"Fuzz testing","score":0.9433692693710327},{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.9045818448066711},{"id":"https://openalex.org/keywords/stateless-protocol","display_name":"Stateless protocol","score":0.7169071435928345},{"id":"https://openalex.org/keywords/protocol","display_name":"Protocol (science)","score":0.5753428936004639},{"id":"https://openalex.org/keywords/computer-network","display_name":"Computer network","score":0.5724499225616455},{"id":"https://openalex.org/keywords/state","display_name":"State (computer science)","score":0.4657267928123474},{"id":"https://openalex.org/keywords/communications-protocol","display_name":"Communications protocol","score":0.4293854534626007},{"id":"https://openalex.org/keywords/distributed-computing","display_name":"Distributed computing","score":0.3988792300224304},{"id":"https://openalex.org/keywords/operating-system","display_name":"Operating system","score":0.2113727629184723},{"id":"https://openalex.org/keywords/programming-language","display_name":"Programming language","score":0.19389009475708008},{"id":"https://openalex.org/keywords/software","display_name":"Software","score":0.12022650241851807},{"id":"https://openalex.org/keywords/network-packet","display_name":"Network packet","score":0.08711963891983032}],"concepts":[{"id":"https://openalex.org/C22927095","wikidata":"https://www.wikidata.org/wiki/Q1784206","display_name":"Stateful firewall","level":3,"score":0.9546916484832764},{"id":"https://openalex.org/C111065885","wikidata":"https://www.wikidata.org/wiki/Q1189053","display_name":"Fuzz testing","level":3,"score":0.9433692693710327},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.9045818448066711},{"id":"https://openalex.org/C103613024","wikidata":"https://www.wikidata.org/wiki/Q230924","display_name":"Stateless protocol","level":3,"score":0.7169071435928345},{"id":"https://openalex.org/C2780385302","wikidata":"https://www.wikidata.org/wiki/Q367158","display_name":"Protocol (science)","level":3,"score":0.5753428936004639},{"id":"https://openalex.org/C31258907","wikidata":"https://www.wikidata.org/wiki/Q1301371","display_name":"Computer network","level":1,"score":0.5724499225616455},{"id":"https://openalex.org/C48103436","wikidata":"https://www.wikidata.org/wiki/Q599031","display_name":"State (computer science)","level":2,"score":0.4657267928123474},{"id":"https://openalex.org/C12269588","wikidata":"https://www.wikidata.org/wiki/Q132364","display_name":"Communications protocol","level":2,"score":0.4293854534626007},{"id":"https://openalex.org/C120314980","wikidata":"https://www.wikidata.org/wiki/Q180634","display_name":"Distributed computing","level":1,"score":0.3988792300224304},{"id":"https://openalex.org/C111919701","wikidata":"https://www.wikidata.org/wiki/Q9135","display_name":"Operating system","level":1,"score":0.2113727629184723},{"id":"https://openalex.org/C199360897","wikidata":"https://www.wikidata.org/wiki/Q9143","display_name":"Programming language","level":1,"score":0.19389009475708008},{"id":"https://openalex.org/C2777904410","wikidata":"https://www.wikidata.org/wiki/Q7397","display_name":"Software","level":2,"score":0.12022650241851807},{"id":"https://openalex.org/C158379750","wikidata":"https://www.wikidata.org/wiki/Q214111","display_name":"Network packet","level":2,"score":0.08711963891983032},{"id":"https://openalex.org/C142724271","wikidata":"https://www.wikidata.org/wiki/Q7208","display_name":"Pathology","level":1,"score":0.0},{"id":"https://openalex.org/C71924100","wikidata":"https://www.wikidata.org/wiki/Q11190","display_name":"Medicine","level":0,"score":0.0},{"id":"https://openalex.org/C204787440","wikidata":"https://www.wikidata.org/wiki/Q188504","display_name":"Alternative medicine","level":2,"score":0.0}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1109/tifs.2022.3192991","is_oa":false,"landing_page_url":"https://doi.org/10.1109/tifs.2022.3192991","pdf_url":null,"source":{"id":"https://openalex.org/S61310614","display_name":"IEEE Transactions on Information Forensics and Security","issn_l":"1556-6013","issn":["1556-6013","1556-6021"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310319808","host_organization_name":"Institute of Electrical and Electronics Engineers","host_organization_lineage":["https://openalex.org/P4310319808"],"host_organization_lineage_names":["Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Transactions on Information Forensics and Security","raw_type":"journal-article"}],"best_oa_location":null,"sustainable_development_goals":[{"score":0.5,"id":"https://metadata.un.org/sdg/16","display_name":"Peace, Justice and strong institutions"}],"awards":[{"id":"https://openalex.org/G429777077","display_name":null,"funder_award_id":"2022ZDZX0006","funder_id":"https://openalex.org/F4320336596","funder_display_name":"Key Research and Development Program of Sichuan Province"}],"funders":[{"id":"https://openalex.org/F4320336596","display_name":"Key Research and Development Program of Sichuan Province","ror":null}],"has_content":{"grobid_xml":false,"pdf":false},"content_urls":null,"referenced_works_count":27,"referenced_works":["https://openalex.org/W2107147876","https://openalex.org/W2128985333","https://openalex.org/W2340281863","https://openalex.org/W2584230735","https://openalex.org/W2777430404","https://openalex.org/W2799698353","https://openalex.org/W2806377938","https://openalex.org/W2952151241","https://openalex.org/W3008477014","https://openalex.org/W3020105429","https://openalex.org/W3047947484","https://openalex.org/W3049735680","https://openalex.org/W3091889505","https://openalex.org/W3101845936","https://openalex.org/W3136918966","https://openalex.org/W3181528482","https://openalex.org/W3207926955","https://openalex.org/W3213837676","https://openalex.org/W6639560864","https://openalex.org/W6683398033","https://openalex.org/W6753913213","https://openalex.org/W6766204418","https://openalex.org/W6781883526","https://openalex.org/W6782130387","https://openalex.org/W6793973236","https://openalex.org/W6799764708","https://openalex.org/W6803508645"],"related_works":["https://openalex.org/W2035312053","https://openalex.org/W2908539414","https://openalex.org/W2129975948","https://openalex.org/W2591875911","https://openalex.org/W112987992","https://openalex.org/W4287833485","https://openalex.org/W2736754676","https://openalex.org/W4401906987","https://openalex.org/W4400727979","https://openalex.org/W4401907763"],"abstract_inverted_index":{"Greybox":[0],"fuzzing":[1,29,166],"has":[2,10],"been":[3],"widely":[4],"used":[5],"in":[6,28,114,188],"stateless":[7],"programs":[8,52],"and":[9,23,39,64,118,139,169],"achieved":[11],"great":[12],"success.":[13],"However,":[14],"most":[15],"stateof-":[16],"the-art":[17],"greybox":[18,47,95,154],"fuzzers":[19,48],"have":[20],"slow":[21],"speed":[22,162],"shallow":[24],"state":[25,73,117,123],"depth":[26],"coverage":[27,173],"stateful":[30,76,98],"network":[31,50,77,99,110,141,152,164],"protocol":[32,51,111,142,153,165],"programs,":[33],"which":[34],"are":[35],"able":[36],"to":[37,69,82,125,136],"remember":[38],"store":[40],"the":[41,71,105,109,122,150,159,171,189],"details":[42],"of":[43,57,61,74,163],"interactions.":[44],"The":[45],"existing":[46],"for":[49,97],"first":[53],"send":[54,66],"a":[55,75,83,93,115,131,184],"series":[56],"well-defined":[58],"prefix":[59],"sequences":[60],"input":[62],"messages":[63,68],"then":[65],"mutated":[67],"test":[70],"target":[72],"protocol.":[78],"This":[79],"process":[80],"leads":[81],"high":[84],"time":[85],"cost.":[86],"In":[87],"this":[88],"paper,":[89],"we":[90,129],"propose":[91],"SNPSFuzzer,":[92],"fast":[94],"fuzzer":[96,155],"protocols":[100],"using":[101],"snapshots.":[102],"SNPSFuzzer":[103,157,182],"dumps":[104],"context":[106],"information":[107],"when":[108,121],"program":[112,190],"is":[113],"specific":[116],"restores":[119],"it":[120],"needs":[124],"be":[126],"fuzzed.":[127],"Furthermore,":[128],"design":[130],"message":[132,160],"chain":[133],"analysis":[134],"algorithm":[135],"explore":[137],"more":[138],"deeper":[140],"states.":[143],"Our":[144],"evaluation":[145],"shows":[146],"that":[147],"compared":[148],"with":[149],"state-of-the-art":[151],"AFLNET,":[156],"improves":[158],"processing":[161],"by":[167,174],"70.7%":[168],"increases":[170],"path":[172],"20.9%":[175],"on":[176],"average":[177],"within":[178],"24":[179],"hours.":[180],"Moreover,":[181],"exposes":[183],"previously":[185],"unreported":[186],"vulnerability":[187],"Tinydtls.":[191]},"counts_by_year":[{"year":2026,"cited_by_count":6},{"year":2025,"cited_by_count":30},{"year":2024,"cited_by_count":21},{"year":2023,"cited_by_count":6},{"year":2022,"cited_by_count":1}],"updated_date":"2026-06-11T09:08:48.828518","created_date":"2025-10-10T00:00:00"}