{"id":"https://openalex.org/W4412623675","doi":"https://doi.org/10.1109/tifs.2025.3592562","title":"Detecting Lifecycle-Related Concurrency Bugs in ROS Programs via Coverage-Guided Fuzzing","display_name":"Detecting Lifecycle-Related Concurrency Bugs in ROS Programs via Coverage-Guided Fuzzing","publication_year":2025,"publication_date":"2025-01-01","ids":{"openalex":"https://openalex.org/W4412623675","doi":"https://doi.org/10.1109/tifs.2025.3592562"},"language":"en","primary_location":{"id":"doi:10.1109/tifs.2025.3592562","is_oa":false,"landing_page_url":"https://doi.org/10.1109/tifs.2025.3592562","pdf_url":null,"source":{"id":"https://openalex.org/S61310614","display_name":"IEEE Transactions on Information Forensics and Security","issn_l":"1556-6013","issn":["1556-6013","1556-6021"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310319808","host_organization_name":"Institute of Electrical and Electronics Engineers","host_organization_lineage":["https://openalex.org/P4310319808"],"host_organization_lineage_names":["Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Transactions on Information Forensics and Security","raw_type":"journal-article"},"type":"article","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":null,"display_name":"Si-Miao Gao","orcid":"https://orcid.org/0009-0001-8619-7152"},"institutions":[{"id":"https://openalex.org/I82880672","display_name":"Beihang University","ror":"https://ror.org/00wk2mp56","country_code":"CN","type":"education","lineage":["https://openalex.org/I82880672"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Si-Miao Gao","raw_affiliation_strings":["School of Cyber Science and Technology, Beihang University, Beijing, China"],"raw_orcid":"https://orcid.org/0009-0001-8619-7152","affiliations":[{"raw_affiliation_string":"School of Cyber Science and Technology, Beihang University, Beijing, China","institution_ids":["https://openalex.org/I82880672"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5109578650","display_name":"Pengcheng Wang","orcid":"https://orcid.org/0000-0002-2103-0554"},"institutions":[{"id":"https://openalex.org/I82880672","display_name":"Beihang University","ror":"https://ror.org/00wk2mp56","country_code":"CN","type":"education","lineage":["https://openalex.org/I82880672"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Pengcheng Wang","raw_affiliation_strings":["School of Cyber Science and Technology, Beihang University, Beijing, China"],"raw_orcid":"https://orcid.org/0000-0002-2103-0554","affiliations":[{"raw_affiliation_string":"School of Cyber Science and Technology, Beihang University, Beijing, China","institution_ids":["https://openalex.org/I82880672"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5017174482","display_name":"Jia-Ju Bai","orcid":"https://orcid.org/0000-0002-9500-6100"},"institutions":[{"id":"https://openalex.org/I82880672","display_name":"Beihang University","ror":"https://ror.org/00wk2mp56","country_code":"CN","type":"education","lineage":["https://openalex.org/I82880672"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Jia-Ju Bai","raw_affiliation_strings":["School of Cyber Science and Technology, Beihang University, Beijing, China"],"raw_orcid":"https://orcid.org/0000-0002-9500-6100","affiliations":[{"raw_affiliation_string":"School of Cyber Science and Technology, Beihang University, Beijing, China","institution_ids":["https://openalex.org/I82880672"]}]},{"author_position":"middle","author":{"id":null,"display_name":"Jia-Wei Yu","orcid":"https://orcid.org/0009-0001-2554-5723"},"institutions":[{"id":"https://openalex.org/I82880672","display_name":"Beihang University","ror":"https://ror.org/00wk2mp56","country_code":"CN","type":"education","lineage":["https://openalex.org/I82880672"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Jia-Wei Yu","raw_affiliation_strings":["School of Cyber Science and Technology, Beihang University, Beijing, China"],"raw_orcid":"https://orcid.org/0009-0001-2554-5723","affiliations":[{"raw_affiliation_string":"School of Cyber Science and Technology, Beihang University, Beijing, China","institution_ids":["https://openalex.org/I82880672"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5101769227","display_name":"Haizhou Wang","orcid":"https://orcid.org/0000-0003-1197-5906"},"institutions":[{"id":"https://openalex.org/I24185976","display_name":"Sichuan University","ror":"https://ror.org/011ashp19","country_code":"CN","type":"education","lineage":["https://openalex.org/I24185976"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Haizhou Wang","raw_affiliation_strings":["School of Cyber Science and Engineering, Sichuan University, Chengdu, China"],"raw_orcid":"https://orcid.org/0000-0003-1197-5906","affiliations":[{"raw_affiliation_string":"School of Cyber Science and Engineering, Sichuan University, Chengdu, China","institution_ids":["https://openalex.org/I24185976"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":5,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":1.7117,"has_fulltext":false,"cited_by_count":1,"citation_normalized_percentile":{"value":0.85062737,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":{"min":95,"max":98},"biblio":{"volume":"20","issue":null,"first_page":"7940","last_page":"7953"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10743","display_name":"Software Testing and Debugging Techniques","score":0.9988999962806702,"subfield":{"id":"https://openalex.org/subfields/1712","display_name":"Software"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T10743","display_name":"Software Testing and Debugging Techniques","score":0.9988999962806702,"subfield":{"id":"https://openalex.org/subfields/1712","display_name":"Software"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11032","display_name":"VLSI and Analog Circuit Testing","score":0.9975000023841858,"subfield":{"id":"https://openalex.org/subfields/1708","display_name":"Hardware and Architecture"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11005","display_name":"Radiation Effects in Electronics","score":0.9936000108718872,"subfield":{"id":"https://openalex.org/subfields/2208","display_name":"Electrical and Electronic Engineering"},"field":{"id":"https://openalex.org/fields/22","display_name":"Engineering"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/fuzz-testing","display_name":"Fuzz testing","score":0.9373528957366943},{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.8132612705230713},{"id":"https://openalex.org/keywords/concurrency","display_name":"Concurrency","score":0.722034215927124},{"id":"https://openalex.org/keywords/software-bug","display_name":"Software bug","score":0.48344430327415466},{"id":"https://openalex.org/keywords/programming-language","display_name":"Programming language","score":0.35369303822517395},{"id":"https://openalex.org/keywords/software","display_name":"Software","score":0.2869836688041687}],"concepts":[{"id":"https://openalex.org/C111065885","wikidata":"https://www.wikidata.org/wiki/Q1189053","display_name":"Fuzz testing","level":3,"score":0.9373528957366943},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.8132612705230713},{"id":"https://openalex.org/C193702766","wikidata":"https://www.wikidata.org/wiki/Q1414548","display_name":"Concurrency","level":2,"score":0.722034215927124},{"id":"https://openalex.org/C1009929","wikidata":"https://www.wikidata.org/wiki/Q179550","display_name":"Software bug","level":3,"score":0.48344430327415466},{"id":"https://openalex.org/C199360897","wikidata":"https://www.wikidata.org/wiki/Q9143","display_name":"Programming language","level":1,"score":0.35369303822517395},{"id":"https://openalex.org/C2777904410","wikidata":"https://www.wikidata.org/wiki/Q7397","display_name":"Software","level":2,"score":0.2869836688041687}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1109/tifs.2025.3592562","is_oa":false,"landing_page_url":"https://doi.org/10.1109/tifs.2025.3592562","pdf_url":null,"source":{"id":"https://openalex.org/S61310614","display_name":"IEEE Transactions on Information Forensics and Security","issn_l":"1556-6013","issn":["1556-6013","1556-6021"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310319808","host_organization_name":"Institute of Electrical and Electronics Engineers","host_organization_lineage":["https://openalex.org/P4310319808"],"host_organization_lineage_names":["Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Transactions on Information Forensics and Security","raw_type":"journal-article"}],"best_oa_location":null,"sustainable_development_goals":[],"awards":[{"id":"https://openalex.org/G2790649864","display_name":null,"funder_award_id":"2023YFC3805404","funder_id":"https://openalex.org/F4320335777","funder_display_name":"National Key Research and Development Program of China"},{"id":"https://openalex.org/G4150175171","display_name":null,"funder_award_id":"4252019","funder_id":"https://openalex.org/F4320334977","funder_display_name":"Beijing Municipal Natural Science Foundation"}],"funders":[{"id":"https://openalex.org/F4320334977","display_name":"Beijing Municipal Natural Science Foundation","ror":null},{"id":"https://openalex.org/F4320335777","display_name":"National Key Research and Development Program of China","ror":null}],"has_content":{"grobid_xml":false,"pdf":false},"content_urls":null,"referenced_works_count":34,"referenced_works":["https://openalex.org/W1992355588","https://openalex.org/W2047068447","https://openalex.org/W2078864816","https://openalex.org/W2152618970","https://openalex.org/W2162630235","https://openalex.org/W2169958633","https://openalex.org/W2740268627","https://openalex.org/W2761662547","https://openalex.org/W2927543040","https://openalex.org/W2964241064","https://openalex.org/W2991920445","https://openalex.org/W3007469703","https://openalex.org/W3133018151","https://openalex.org/W3205715944","https://openalex.org/W3207470659","https://openalex.org/W3207634985","https://openalex.org/W4226163636","https://openalex.org/W4243075948","https://openalex.org/W4284687346","https://openalex.org/W4285102495","https://openalex.org/W4308244727","https://openalex.org/W4308731476","https://openalex.org/W4312516075","https://openalex.org/W4385080390","https://openalex.org/W4387321141","https://openalex.org/W4394998872","https://openalex.org/W4394998982","https://openalex.org/W4402443217","https://openalex.org/W4405200155","https://openalex.org/W6600049303","https://openalex.org/W6639248035","https://openalex.org/W6717433430","https://openalex.org/W6752217413","https://openalex.org/W6781274470"],"related_works":["https://openalex.org/W4385478034","https://openalex.org/W614438062","https://openalex.org/W3173990398","https://openalex.org/W4205454537","https://openalex.org/W4226494072","https://openalex.org/W4385301282","https://openalex.org/W3170526652","https://openalex.org/W4381785649","https://openalex.org/W3105061167","https://openalex.org/W4287849816"],"abstract_inverted_index":{"Robot":[0],"Operating":[1],"System":[2],"(ROS)":[3],"is":[4,67],"very":[5],"popular":[6,205],"in":[7,52,128,208],"robotic":[8,206],"software":[9],"development.":[10],"To":[11],"ease":[12],"the":[13,31,75,91,189],"process":[14],"management":[15],"of":[16,33,61,78,93,165,220],"ROS":[17,19,54,62,129,166,226],"programs,":[18,63,130],"provides":[20],"a":[21,64,112,138,152,172],"special":[22],"<italic":[23,139,146,173],"xmlns:mml=\"http://www.w3.org/1998/Math/MathML\"":[24,140,147,174],"xmlns:xlink=\"http://www.w3.org/1999/xlink\">lifecycle</i>":[25],"mechanism":[26,47],"that":[27,144,178,183],"can":[28,120,184],"conveniently":[29],"manage":[30],"state":[32],"each":[34],"running":[35],"process,":[36],"which":[37,119,221],"often":[38],"involves":[39],"resource":[40],"allocation,":[41],"initialization,":[42],"and":[43,45,85,103,110,123,186,197,210,215,228],"release;":[44],"this":[46,106],"has":[48],"been":[49,223,231],"widely":[50],"used":[51],"real-world":[53],"programs.":[55],"However,":[56],"due":[57],"to":[58,90,101,156],"code":[59],"concurrency":[60,80,97,126,167,191,217],"lifecycle-related":[65,125,159],"function":[66],"inevitably":[68],"concurrently":[69],"executed":[70],"with":[71,131,193],"other":[72],"functions,":[73],"introducing":[74],"security":[76],"risk":[77],"dangerous":[79],"bugs":[81,98,127],"involving":[82],"null-pointer":[83],"dereference":[84],"use":[86],"after":[87],"free.":[88],"Due":[89],"non-determinism":[92],"thread":[94,160],"scheduling,":[95],"these":[96],"are":[99],"difficult":[100],"find":[102],"reproduce.":[104],"In":[105],"paper,":[107],"we":[108,136,170],"design":[109],"implement":[111],"new":[113,153,214],"coverage-guided":[114],"fuzzing":[115,142],"framework":[116],"named":[117],"ROCF,":[118],"effectively":[121,157],"detect":[122],"reproduce":[124,188],"two":[132],"novel":[133],"techniques.":[134],"First,":[135],"propose":[137,171],"xmlns:xlink=\"http://www.w3.org/1999/xlink\">lifecycle-aware":[141],"approach</i>":[143],"uses":[145],"xmlns:xlink=\"http://www.w3.org/1999/xlink\">lifecycle":[148],"pair":[149],"sequence</i>":[150],"as":[151],"coverage":[154],"metric":[155],"describe":[158],"interleavings,":[161],"for":[162],"input-mutation":[163],"guidance":[164],"fuzzing.":[168],"Second,":[169],"xmlns:xlink=\"http://www.w3.org/1999/xlink\">heuristic-based":[175],"reproducing":[176],"method</i>":[177],"identifies":[179],"minimal":[180],"input":[181,195],"sequences":[182],"stably":[185],"efficiently":[187],"found":[190],"bugs,":[192,218],"strategical":[194],"pruning":[196],"delay":[198],"injection.":[199],"We":[200],"evaluate":[201],"ROCF":[202],"on":[203],"eight":[204],"programs":[207],"ROS2,":[209],"it":[211],"finds":[212],"32":[213],"real":[216],"all":[219],"have":[222,230],"confirmed":[224],"by":[225],"developers,":[227],"19":[229],"assigned":[232],"CVE":[233],"IDs.":[234]},"counts_by_year":[{"year":2026,"cited_by_count":1}],"updated_date":"2026-06-11T09:08:48.828518","created_date":"2025-10-10T00:00:00"}