{"id":"https://openalex.org/W4392122318","doi":"https://doi.org/10.1109/tifs.2024.3369479","title":"Fuzzing Android Native System Libraries via Dynamic Data Dependency Graph","display_name":"Fuzzing Android Native System Libraries via Dynamic Data Dependency Graph","publication_year":2024,"publication_date":"2024-01-01","ids":{"openalex":"https://openalex.org/W4392122318","doi":"https://doi.org/10.1109/tifs.2024.3369479"},"language":"en","primary_location":{"id":"doi:10.1109/tifs.2024.3369479","is_oa":false,"landing_page_url":"https://doi.org/10.1109/tifs.2024.3369479","pdf_url":null,"source":{"id":"https://openalex.org/S61310614","display_name":"IEEE Transactions on Information Forensics and Security","issn_l":"1556-6013","issn":["1556-6013","1556-6021"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310319808","host_organization_name":"Institute of Electrical and Electronics Engineers","host_organization_lineage":["https://openalex.org/P4310319808"],"host_organization_lineage_names":["Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Transactions on Information Forensics and Security","raw_type":"journal-article"},"type":"article","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5015792635","display_name":"Xiaogang Zhu","orcid":"https://orcid.org/0000-0002-0647-4747"},"institutions":[{"id":"https://openalex.org/I57093077","display_name":"Swinburne University of Technology","ror":"https://ror.org/031rekg67","country_code":"AU","type":"education","lineage":["https://openalex.org/I57093077"]}],"countries":["AU"],"is_corresponding":true,"raw_author_name":"Xiaogang Zhu","raw_affiliation_strings":["School of Software and Electrical Engineering, Swinburne University of Technology, Melbourne, VIC, Australia"],"affiliations":[{"raw_affiliation_string":"School of Software and Electrical Engineering, Swinburne University of Technology, Melbourne, VIC, Australia","institution_ids":["https://openalex.org/I57093077"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5100347391","display_name":"Siyu Zhang","orcid":"https://orcid.org/0009-0008-0324-6870"},"institutions":[{"id":"https://openalex.org/I57093077","display_name":"Swinburne University of Technology","ror":"https://ror.org/031rekg67","country_code":"AU","type":"education","lineage":["https://openalex.org/I57093077"]}],"countries":["AU"],"is_corresponding":false,"raw_author_name":"Siyu Zhang","raw_affiliation_strings":["School of Software and Electrical Engineering, Swinburne University of Technology, Melbourne, VIC, Australia"],"affiliations":[{"raw_affiliation_string":"School of Software and Electrical Engineering, Swinburne University of Technology, Melbourne, VIC, Australia","institution_ids":["https://openalex.org/I57093077"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5006173142","display_name":"Chaoran Li","orcid":"https://orcid.org/0000-0001-9118-5386"},"institutions":[{"id":"https://openalex.org/I57093077","display_name":"Swinburne University of Technology","ror":"https://ror.org/031rekg67","country_code":"AU","type":"education","lineage":["https://openalex.org/I57093077"]}],"countries":["AU"],"is_corresponding":false,"raw_author_name":"Chaoran Li","raw_affiliation_strings":["School of Software and Electrical Engineering, Swinburne University of Technology, Melbourne, VIC, Australia"],"affiliations":[{"raw_affiliation_string":"School of Software and Electrical Engineering, Swinburne University of Technology, Melbourne, VIC, Australia","institution_ids":["https://openalex.org/I57093077"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5076576641","display_name":"Sheng Wen","orcid":"https://orcid.org/0000-0003-0655-666X"},"institutions":[{"id":"https://openalex.org/I57093077","display_name":"Swinburne University of Technology","ror":"https://ror.org/031rekg67","country_code":"AU","type":"education","lineage":["https://openalex.org/I57093077"]}],"countries":["AU"],"is_corresponding":false,"raw_author_name":"Sheng Wen","raw_affiliation_strings":["School of Software and Electrical Engineering, Swinburne University of Technology, Melbourne, VIC, Australia"],"affiliations":[{"raw_affiliation_string":"School of Software and Electrical Engineering, Swinburne University of Technology, Melbourne, VIC, Australia","institution_ids":["https://openalex.org/I57093077"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5100666554","display_name":"Yang Xiang","orcid":"https://orcid.org/0000-0001-5252-0831"},"institutions":[{"id":"https://openalex.org/I57093077","display_name":"Swinburne University of Technology","ror":"https://ror.org/031rekg67","country_code":"AU","type":"education","lineage":["https://openalex.org/I57093077"]}],"countries":["AU"],"is_corresponding":false,"raw_author_name":"Yang Xiang","raw_affiliation_strings":["School of Software and Electrical Engineering, Swinburne University of Technology, Melbourne, VIC, Australia"],"affiliations":[{"raw_affiliation_string":"School of Software and Electrical Engineering, Swinburne University of Technology, Melbourne, VIC, Australia","institution_ids":["https://openalex.org/I57093077"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":5,"corresponding_author_ids":["https://openalex.org/A5015792635"],"corresponding_institution_ids":["https://openalex.org/I57093077"],"apc_list":null,"apc_paid":null,"fwci":2.3383,"has_fulltext":false,"cited_by_count":3,"citation_normalized_percentile":{"value":0.89513122,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":{"min":96,"max":97},"biblio":{"volume":"19","issue":null,"first_page":"3733","last_page":"3744"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T12016","display_name":"Web Data Mining and Analysis","score":0.9915000200271606,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T12016","display_name":"Web Data Mining and Analysis","score":0.9915000200271606,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T12799","display_name":"Mobile and Web Applications","score":0.9704999923706055,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":0.9693999886512756,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.8504470586776733},{"id":"https://openalex.org/keywords/fuzz-testing","display_name":"Fuzz testing","score":0.8268637657165527},{"id":"https://openalex.org/keywords/android","display_name":"Android (operating system)","score":0.6808537244796753},{"id":"https://openalex.org/keywords/dependency-graph","display_name":"Dependency graph","score":0.5551335215568542},{"id":"https://openalex.org/keywords/graph","display_name":"Graph","score":0.5011661052703857},{"id":"https://openalex.org/keywords/dependency","display_name":"Dependency (UML)","score":0.47739166021347046},{"id":"https://openalex.org/keywords/call-graph","display_name":"Call graph","score":0.42910927534103394},{"id":"https://openalex.org/keywords/theoretical-computer-science","display_name":"Theoretical computer science","score":0.2942902445793152},{"id":"https://openalex.org/keywords/operating-system","display_name":"Operating system","score":0.25196734070777893},{"id":"https://openalex.org/keywords/artificial-intelligence","display_name":"Artificial intelligence","score":0.22795823216438293},{"id":"https://openalex.org/keywords/software","display_name":"Software","score":0.1080617606639862}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.8504470586776733},{"id":"https://openalex.org/C111065885","wikidata":"https://www.wikidata.org/wiki/Q1189053","display_name":"Fuzz testing","level":3,"score":0.8268637657165527},{"id":"https://openalex.org/C557433098","wikidata":"https://www.wikidata.org/wiki/Q94","display_name":"Android (operating system)","level":2,"score":0.6808537244796753},{"id":"https://openalex.org/C16311509","wikidata":"https://www.wikidata.org/wiki/Q4148050","display_name":"Dependency graph","level":3,"score":0.5551335215568542},{"id":"https://openalex.org/C132525143","wikidata":"https://www.wikidata.org/wiki/Q141488","display_name":"Graph","level":2,"score":0.5011661052703857},{"id":"https://openalex.org/C19768560","wikidata":"https://www.wikidata.org/wiki/Q320727","display_name":"Dependency (UML)","level":2,"score":0.47739166021347046},{"id":"https://openalex.org/C102379954","wikidata":"https://www.wikidata.org/wiki/Q2589940","display_name":"Call graph","level":2,"score":0.42910927534103394},{"id":"https://openalex.org/C80444323","wikidata":"https://www.wikidata.org/wiki/Q2878974","display_name":"Theoretical computer science","level":1,"score":0.2942902445793152},{"id":"https://openalex.org/C111919701","wikidata":"https://www.wikidata.org/wiki/Q9135","display_name":"Operating system","level":1,"score":0.25196734070777893},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.22795823216438293},{"id":"https://openalex.org/C2777904410","wikidata":"https://www.wikidata.org/wiki/Q7397","display_name":"Software","level":2,"score":0.1080617606639862}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1109/tifs.2024.3369479","is_oa":false,"landing_page_url":"https://doi.org/10.1109/tifs.2024.3369479","pdf_url":null,"source":{"id":"https://openalex.org/S61310614","display_name":"IEEE Transactions on Information Forensics and Security","issn_l":"1556-6013","issn":["1556-6013","1556-6021"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310319808","host_organization_name":"Institute of Electrical and Electronics Engineers","host_organization_lineage":["https://openalex.org/P4310319808"],"host_organization_lineage_names":["Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Transactions on Information Forensics and Security","raw_type":"journal-article"}],"best_oa_location":null,"sustainable_development_goals":[{"display_name":"Reduced inequalities","id":"https://metadata.un.org/sdg/10","score":0.46000000834465027}],"awards":[{"id":"https://openalex.org/G5934180555","display_name":null,"funder_award_id":"220102784","funder_id":"https://openalex.org/F4320334704","funder_display_name":"Australian Research Council"},{"id":"https://openalex.org/G7944052141","display_name":null,"funder_award_id":"200100084","funder_id":"https://openalex.org/F4320334704","funder_display_name":"Australian Research Council"}],"funders":[{"id":"https://openalex.org/F4320334704","display_name":"Australian Research Council","ror":"https://ror.org/05mmh0f86"}],"has_content":{"grobid_xml":false,"pdf":false},"content_urls":null,"referenced_works_count":33,"referenced_works":["https://openalex.org/W1988737164","https://openalex.org/W1994931937","https://openalex.org/W2015933956","https://openalex.org/W2127723417","https://openalex.org/W2140095007","https://openalex.org/W2140462040","https://openalex.org/W2185329476","https://openalex.org/W2343570721","https://openalex.org/W2404429541","https://openalex.org/W2508433864","https://openalex.org/W2514974017","https://openalex.org/W2533311740","https://openalex.org/W2535617737","https://openalex.org/W2557385690","https://openalex.org/W2770003285","https://openalex.org/W2890190663","https://openalex.org/W2890664869","https://openalex.org/W2963298680","https://openalex.org/W2966342255","https://openalex.org/W3033777149","https://openalex.org/W3042563546","https://openalex.org/W3120074996","https://openalex.org/W3140570045","https://openalex.org/W3200780444","https://openalex.org/W3212565000","https://openalex.org/W4210660460","https://openalex.org/W4284673343","https://openalex.org/W4284694562","https://openalex.org/W4284695897","https://openalex.org/W4294811443","https://openalex.org/W6704395186","https://openalex.org/W6721237251","https://openalex.org/W6777101196"],"related_works":["https://openalex.org/W4283392482","https://openalex.org/W2327631927","https://openalex.org/W2093568763","https://openalex.org/W1985166372","https://openalex.org/W3000246040","https://openalex.org/W2003096546","https://openalex.org/W2430210575","https://openalex.org/W4289354592","https://openalex.org/W2099112646","https://openalex.org/W2165069859"],"abstract_inverted_index":{"Google":[0],"suggests":[1],"using":[2,39],"only":[3,103],"the":[4,26,80,87,111,127,129,134,145,158,163,185],"APIs":[5],"documented":[6],"in":[7,34,51,82,210],"Android":[8,57,190],"SDK.":[9],"However,":[10,38],"many":[11],"app":[12],"developers":[13,67],"still":[14],"choose":[15],"Java":[16,166],"Native":[17],"Interface":[18],"(JNI)":[19],"to":[20,56,68,85,101,171],"access":[21],"system":[22,52,83,97,211],"libraries":[23,53],"because":[24],"of":[25,89,92,113,118,131,137,147,165,189],"flexibility":[27],"and":[28,59,64,123,149,176],"freedom":[29],"that":[30,78],"non-SDK":[31],"methods":[32],"provide":[33],"implementing":[35],"complex":[36],"functions.":[37],"JNI":[40,84,212],"may":[41],"have":[42],"unexpected":[43],"consequences,":[44],"including":[45],"low-level":[46],"bug-driven":[47],"crashes.":[48],"The":[49],"bugs":[50,81,209],"can":[54],"propagate":[55],"apps,":[58],"further":[60],"cost":[61],"much":[62],"time":[63],"energy":[65],"for":[66],"debug":[69],"them.":[70],"We":[71,181],"develop":[72],"a":[73,96,115,138],"fuzzing":[74],"tool,":[75],"called":[76],"JDYNUZZ,":[77],"exposes":[79],"mitigate":[86],"aftermath":[88],"direct":[90],"invocation":[91],"JNI.":[93],"To":[94,125],"fuzz":[95],"library,":[98],"one":[99],"needs":[100],"not":[102],"prepare":[104],"appropriate":[105],"inputs,":[106],"but":[107],"also":[108],"deal":[109],"with":[110],"challenge":[112],"maintaining":[114],"correct":[116],"sequence":[117],"API":[119,154,174],"calls,":[120],"both":[121],"syntactically":[122],"semantically.":[124],"solve":[126],"challenge,":[128],"crux":[130],"JDYNUZZ":[132,156,183,205],"is":[133],"dynamic":[135,159],"refinement":[136,160],"data":[139],"dependency":[140],"graph,":[141],"which":[142,168],"gradually":[143],"resolves":[144],"problem":[146],"syntactic":[148],"semantic":[150],"incorrectness":[151],"when":[152],"constructing":[153],"sequences.":[155],"achieves":[157],"based":[161],"on":[162,184],"feature":[164],"reflection,":[167],"enables":[169],"us":[170],"dynamically":[172],"modify":[173],"sequences":[175],"test":[177],"different":[178],"code":[179],"regions.":[180],"evaluate":[182],"most":[186],"recent":[187],"version":[188,199],"Open":[191],"Source":[192],"Project":[193],"(AOSP),":[194],"<italic":[195],"xmlns:mml=\"http://www.w3.org/1998/Math/MathML\"":[196],"xmlns:xlink=\"http://www.w3.org/1999/xlink\">i.e</i>":[197],".,":[198],"android-12.0.0":[200],"r31.":[201],"In":[202],"our":[203],"experiments,":[204],"discovers":[206],"34":[207],"new":[208],"libraries,":[213],"all":[214],"confirmed":[215],"by":[216],"Google.":[217]},"counts_by_year":[{"year":2025,"cited_by_count":3}],"updated_date":"2026-03-27T05:58:40.876381","created_date":"2025-10-10T00:00:00"}