{"id":"https://openalex.org/W4409659790","doi":"https://doi.org/10.1109/tifs.2025.3562704","title":"Yesterday Once MorE: Facilitating Linux Kernel Bug Reproduction via <i>Reverse Fuzzing</i>","display_name":"Yesterday Once MorE: Facilitating Linux Kernel Bug Reproduction via <i>Reverse Fuzzing</i>","publication_year":2025,"publication_date":"2025-01-01","ids":{"openalex":"https://openalex.org/W4409659790","doi":"https://doi.org/10.1109/tifs.2025.3562704"},"language":"en","primary_location":{"id":"doi:10.1109/tifs.2025.3562704","is_oa":false,"landing_page_url":"https://doi.org/10.1109/tifs.2025.3562704","pdf_url":null,"source":{"id":"https://openalex.org/S61310614","display_name":"IEEE Transactions on Information Forensics and Security","issn_l":"1556-6013","issn":["1556-6013","1556-6021"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310319808","host_organization_name":"Institute of Electrical and Electronics Engineers","host_organization_lineage":["https://openalex.org/P4310319808"],"host_organization_lineage_names":["Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Transactions on Information Forensics and Security","raw_type":"journal-article"},"type":"article","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5101820263","display_name":"Xingwei Li","orcid":"https://orcid.org/0000-0002-4671-6093"},"institutions":[{"id":"https://openalex.org/I169689159","display_name":"PLA Information Engineering University","ror":"https://ror.org/00mm1qk40","country_code":"CN","type":"education","lineage":["https://openalex.org/I169689159"]}],"countries":["CN"],"is_corresponding":true,"raw_author_name":"Xingwei Li","raw_affiliation_strings":["Information Engineering University, Zhengzhou, China"],"raw_orcid":"https://orcid.org/0000-0002-4671-6093","affiliations":[{"raw_affiliation_string":"Information Engineering University, Zhengzhou, China","institution_ids":["https://openalex.org/I169689159"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5100615074","display_name":"Yan Kang","orcid":"https://orcid.org/0000-0002-3439-551X"},"institutions":[{"id":"https://openalex.org/I4210090176","display_name":"Institute of Computing Technology","ror":"https://ror.org/0090r4d87","country_code":"CN","type":"facility","lineage":["https://openalex.org/I19820366","https://openalex.org/I4210090176"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Yan Kang","raw_affiliation_strings":["SKLP, Institute of Computing Technology, CAS, Beijing, China"],"raw_orcid":"https://orcid.org/0000-0002-3439-551X","affiliations":[{"raw_affiliation_string":"SKLP, Institute of Computing Technology, CAS, Beijing, China","institution_ids":["https://openalex.org/I4210090176"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5046439614","display_name":"Chenggang Wu","orcid":"https://orcid.org/0000-0003-1777-8110"},"institutions":[{"id":"https://openalex.org/I4210090176","display_name":"Institute of Computing Technology","ror":"https://ror.org/0090r4d87","country_code":"CN","type":"facility","lineage":["https://openalex.org/I19820366","https://openalex.org/I4210090176"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Chenggang Wu","raw_affiliation_strings":["SKLP, Institute of Computing Technology, CAS, Beijing, China"],"raw_orcid":"https://orcid.org/0000-0003-1777-8110","affiliations":[{"raw_affiliation_string":"SKLP, Institute of Computing Technology, CAS, Beijing, China","institution_ids":["https://openalex.org/I4210090176"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5073803603","display_name":"Danjun Liu","orcid":"https://orcid.org/0000-0002-5375-7598"},"institutions":[{"id":"https://openalex.org/I170215575","display_name":"National University of Defense Technology","ror":"https://ror.org/05d2yfz11","country_code":"CN","type":"education","lineage":["https://openalex.org/I170215575"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Danjun Liu","raw_affiliation_strings":["National University of Defense Technology, Changsha, China"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"National University of Defense Technology, Changsha, China","institution_ids":["https://openalex.org/I170215575"]}]},{"author_position":"middle","author":{"id":null,"display_name":"Jiming Wang","orcid":"https://orcid.org/0009-0002-5697-5600"},"institutions":[{"id":"https://openalex.org/I4210090176","display_name":"Institute of Computing Technology","ror":"https://ror.org/0090r4d87","country_code":"CN","type":"facility","lineage":["https://openalex.org/I19820366","https://openalex.org/I4210090176"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Jiming Wang","raw_affiliation_strings":["SKLP, Institute of Computing Technology, CAS, Beijing, China"],"raw_orcid":"https://orcid.org/0009-0002-5697-5600","affiliations":[{"raw_affiliation_string":"SKLP, Institute of Computing Technology, CAS, Beijing, China","institution_ids":["https://openalex.org/I4210090176"]}]},{"author_position":"middle","author":{"id":null,"display_name":"Yue Sun","orcid":"https://orcid.org/0009-0008-1151-0838"},"institutions":[{"id":"https://openalex.org/I4210090176","display_name":"Institute of Computing Technology","ror":"https://ror.org/0090r4d87","country_code":"CN","type":"facility","lineage":["https://openalex.org/I19820366","https://openalex.org/I4210090176"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Yue Sun","raw_affiliation_strings":["SKLP, Institute of Computing Technology, CAS, Beijing, China"],"raw_orcid":"https://orcid.org/0009-0008-1151-0838","affiliations":[{"raw_affiliation_string":"SKLP, Institute of Computing Technology, CAS, Beijing, China","institution_ids":["https://openalex.org/I4210090176"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5100546672","display_name":"Zehui Wu","orcid":null},"institutions":[{"id":"https://openalex.org/I169689159","display_name":"PLA Information Engineering University","ror":"https://ror.org/00mm1qk40","country_code":"CN","type":"education","lineage":["https://openalex.org/I169689159"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Zehui Wu","raw_affiliation_strings":["Information Engineering University, Zhengzhou, China"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Information Engineering University, Zhengzhou, China","institution_ids":["https://openalex.org/I169689159"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5101842129","display_name":"Yunchao Wang","orcid":"https://orcid.org/0000-0003-0457-0900"},"institutions":[{"id":"https://openalex.org/I169689159","display_name":"PLA Information Engineering University","ror":"https://ror.org/00mm1qk40","country_code":"CN","type":"education","lineage":["https://openalex.org/I169689159"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Yunchao Wang","raw_affiliation_strings":["Information Engineering University, Zhengzhou, China"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Information Engineering University, Zhengzhou, China","institution_ids":["https://openalex.org/I169689159"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5056524306","display_name":"Rongkuan Ma","orcid":"https://orcid.org/0000-0002-4791-6847"},"institutions":[{"id":"https://openalex.org/I169689159","display_name":"PLA Information Engineering University","ror":"https://ror.org/00mm1qk40","country_code":"CN","type":"education","lineage":["https://openalex.org/I169689159"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Rongkuan Ma","raw_affiliation_strings":["Information Engineering University, Zhengzhou, China"],"raw_orcid":"https://orcid.org/0000-0002-4791-6847","affiliations":[{"raw_affiliation_string":"Information Engineering University, Zhengzhou, China","institution_ids":["https://openalex.org/I169689159"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5011825909","display_name":"Qiang Wei","orcid":"https://orcid.org/0000-0003-4891-8657"},"institutions":[{"id":"https://openalex.org/I169689159","display_name":"PLA Information Engineering University","ror":"https://ror.org/00mm1qk40","country_code":"CN","type":"education","lineage":["https://openalex.org/I169689159"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Qiang Wei","raw_affiliation_strings":["Information Engineering University, Zhengzhou, China"],"raw_orcid":"https://orcid.org/0000-0003-4891-8657","affiliations":[{"raw_affiliation_string":"Information Engineering University, Zhengzhou, China","institution_ids":["https://openalex.org/I169689159"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":10,"corresponding_author_ids":["https://openalex.org/A5101820263"],"corresponding_institution_ids":["https://openalex.org/I169689159"],"apc_list":null,"apc_paid":null,"fwci":4.2517,"has_fulltext":false,"cited_by_count":2,"citation_normalized_percentile":{"value":0.92374772,"is_in_top_1_percent":false,"is_in_top_10_percent":true},"cited_by_percentile_year":{"min":91,"max":98},"biblio":{"volume":"20","issue":null,"first_page":"5224","last_page":"5239"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10743","display_name":"Software Testing and Debugging Techniques","score":0.9794999957084656,"subfield":{"id":"https://openalex.org/subfields/1712","display_name":"Software"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T10743","display_name":"Software Testing and Debugging Techniques","score":0.9794999957084656,"subfield":{"id":"https://openalex.org/subfields/1712","display_name":"Software"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T13382","display_name":"Robotics and Automated Systems","score":0.9398999810218811,"subfield":{"id":"https://openalex.org/subfields/2207","display_name":"Control and Systems Engineering"},"field":{"id":"https://openalex.org/fields/22","display_name":"Engineering"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":0.9308000206947327,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/fuzz-testing","display_name":"Fuzz testing","score":0.8415560126304626},{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.8154343962669373},{"id":"https://openalex.org/keywords/operating-system","display_name":"Operating system","score":0.6181710362434387},{"id":"https://openalex.org/keywords/kernel","display_name":"Kernel (algebra)","score":0.5714508295059204},{"id":"https://openalex.org/keywords/software-bug","display_name":"Software bug","score":0.4774385094642639},{"id":"https://openalex.org/keywords/embedded-system","display_name":"Embedded system","score":0.321212500333786},{"id":"https://openalex.org/keywords/software","display_name":"Software","score":0.1604434847831726}],"concepts":[{"id":"https://openalex.org/C111065885","wikidata":"https://www.wikidata.org/wiki/Q1189053","display_name":"Fuzz testing","level":3,"score":0.8415560126304626},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.8154343962669373},{"id":"https://openalex.org/C111919701","wikidata":"https://www.wikidata.org/wiki/Q9135","display_name":"Operating system","level":1,"score":0.6181710362434387},{"id":"https://openalex.org/C74193536","wikidata":"https://www.wikidata.org/wiki/Q574844","display_name":"Kernel (algebra)","level":2,"score":0.5714508295059204},{"id":"https://openalex.org/C1009929","wikidata":"https://www.wikidata.org/wiki/Q179550","display_name":"Software bug","level":3,"score":0.4774385094642639},{"id":"https://openalex.org/C149635348","wikidata":"https://www.wikidata.org/wiki/Q193040","display_name":"Embedded system","level":1,"score":0.321212500333786},{"id":"https://openalex.org/C2777904410","wikidata":"https://www.wikidata.org/wiki/Q7397","display_name":"Software","level":2,"score":0.1604434847831726},{"id":"https://openalex.org/C114614502","wikidata":"https://www.wikidata.org/wiki/Q76592","display_name":"Combinatorics","level":1,"score":0.0},{"id":"https://openalex.org/C33923547","wikidata":"https://www.wikidata.org/wiki/Q395","display_name":"Mathematics","level":0,"score":0.0}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1109/tifs.2025.3562704","is_oa":false,"landing_page_url":"https://doi.org/10.1109/tifs.2025.3562704","pdf_url":null,"source":{"id":"https://openalex.org/S61310614","display_name":"IEEE Transactions on Information Forensics and Security","issn_l":"1556-6013","issn":["1556-6013","1556-6021"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310319808","host_organization_name":"Institute of Electrical and Electronics Engineers","host_organization_lineage":["https://openalex.org/P4310319808"],"host_organization_lineage_names":["Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Transactions on Information Forensics and Security","raw_type":"journal-article"}],"best_oa_location":null,"sustainable_development_goals":[],"awards":[{"id":"https://openalex.org/G1169236570","display_name":null,"funder_award_id":"61902374","funder_id":"https://openalex.org/F4320321001","funder_display_name":"National Natural Science Foundation of China"},{"id":"https://openalex.org/G3461730934","display_name":null,"funder_award_id":"E161040","funder_id":"https://openalex.org/F4320321001","funder_display_name":"National Natural Science Foundation of China"},{"id":"https://openalex.org/G435252793","display_name":null,"funder_award_id":"62272442","funder_id":"https://openalex.org/F4320321001","funder_display_name":"National Natural Science Foundation of China"},{"id":"https://openalex.org/G7766097009","display_name":null,"funder_award_id":"U1736208","funder_id":"https://openalex.org/F4320321001","funder_display_name":"National Natural Science Foundation of China"}],"funders":[{"id":"https://openalex.org/F4320321001","display_name":"National Natural Science Foundation of China","ror":"https://ror.org/01h0zpd94"}],"has_content":{"pdf":false,"grobid_xml":false},"content_urls":null,"referenced_works_count":24,"referenced_works":["https://openalex.org/W2766540688","https://openalex.org/W2766711930","https://openalex.org/W2933883078","https://openalex.org/W2981689050","https://openalex.org/W3175044348","https://openalex.org/W3207016455","https://openalex.org/W4220830491","https://openalex.org/W4226099632","https://openalex.org/W4284702560","https://openalex.org/W4288057707","https://openalex.org/W4288057782","https://openalex.org/W4385679777","https://openalex.org/W4388857643","https://openalex.org/W4391724807","https://openalex.org/W4391725304","https://openalex.org/W4402263592","https://openalex.org/W4402263940","https://openalex.org/W4402955715","https://openalex.org/W6754182100","https://openalex.org/W6782445929","https://openalex.org/W6793945956","https://openalex.org/W6800370399","https://openalex.org/W6803490195","https://openalex.org/W7045352932"],"related_works":["https://openalex.org/W614438062","https://openalex.org/W3173990398","https://openalex.org/W4205454537","https://openalex.org/W4226494072","https://openalex.org/W4385301282","https://openalex.org/W3170526652","https://openalex.org/W4381785649","https://openalex.org/W3105061167","https://openalex.org/W4287849816","https://openalex.org/W3006186133"],"abstract_inverted_index":{"The":[0],"Linux":[1],"kernel":[2,25,35,181],"remains":[3],"vulnerable":[4],"to":[5,66,94,131,145,165],"numerous":[6],"bugs,":[7,22,26,202],"with":[8,161,203],"approximately":[9],"65%":[10],"detected":[11],"by":[12,69,85],"Syzkaller":[13],"lacking":[14],"Proof-of-Concept":[15],"(PoC),":[16],"hampering":[17],"risk":[18],"mitigation":[19],"efforts.":[20],"These":[21],"termed":[23],"irreproducible":[24],"highlight":[27],"the":[28,56,63,101,113,196],"challenge":[29],"of":[30,62,195],"statefulness":[31],"issue-related":[32],"irreproducibility":[33],"in":[34,53,187],"fuzzing,":[36,127],"which":[37,104,111,128],"is":[38,55],"an":[39,77],"open":[40],"research":[41],"without":[42],"definitive":[43],"solutions.":[44],"Our":[45,170],"investigation":[46],"reveals":[47],"that":[48,80,173],"suboptimal":[49],"seed":[50,167],"quality":[51,168],"distribution":[52],"fuzzing":[54,150],"root":[57],"obstacle":[58],"preventing":[59],"effective":[60],"tracking":[61],"states":[64,84,93,135],"leading":[65],"crashes.":[67],"Inspired":[68],"this":[70],"insight,":[71],"we":[72],"introduce":[73],"Reverse":[74],"Fuzzing":[75],"(RF),":[76],"innovative":[78],"approach":[79],"infers":[81],"hard-to-":[82],"reach":[83],"continuously":[86],"reverse-oriented":[87],"deriving":[88],"from":[89,136],"subsequently":[90],"encountered":[91],"bridge":[92],"increase":[95],"reproduction":[96],"probability.":[97],"RF":[98,144],"differentiates":[99],"between":[100,149],"\u201ctrigger\u201d":[102],"seed,":[103],"directly":[105],"causes":[106],"crashes,":[107],"and":[108,123,152,157,183,198,206],"\u201cactivator\u201d":[109],"seeds,":[110],"establish":[112],"necessary":[114],"preconditions,":[115],"prioritizing":[116],"exploration":[117],"around":[118],"trigger":[119],"while":[120],"simultaneously":[121],"regenerating":[122],"maintaining":[124],"activators":[125],"during":[126],"effectively":[129],"facilitate":[130],"restructure":[132],"such":[133],"elusive":[134],"\u201cyesterday\u201d.":[137],"We":[138],"implement":[139],"YOME,":[140],"a":[141,147,162],"prototype":[142],"leveraging":[143],"strike":[146],"balance":[148],"efficiency":[151],"effectiveness":[153],"through":[154],"customized":[155],"scheduling":[156],"mutation":[158],"strategies,":[159],"armed":[160],"refinement":[163],"mechanism":[164],"improve":[166],"distribution.":[169],"evaluations":[171],"validate":[172],"YOME":[174,190],"reproduce":[175],"110%":[176],"more":[177],"bugs":[178],"than":[179],"previous":[180],"fuzzers":[182],"demonstrate":[184],"its":[185],"practicality":[186],"real-world":[188],"scenarios.":[189],"generated":[191],"125":[192],"PoCs":[193],"(30.1%":[194],"total)":[197],"uncovered":[199],"23":[200],"unique":[201],"40":[204],"confirmed":[205],"5":[207],"assigned":[208],"CVEs.":[209]},"counts_by_year":[{"year":2026,"cited_by_count":1},{"year":2025,"cited_by_count":1}],"updated_date":"2026-03-27T05:58:40.876381","created_date":"2025-10-10T00:00:00"}