{"id":"https://openalex.org/W4414198900","doi":"https://doi.org/10.1109/dac63849.2025.11132499","title":"DROIDFUZZ: Proprietary Driver Fuzzing for Embedded Android Devices","display_name":"DROIDFUZZ: Proprietary Driver Fuzzing for Embedded Android Devices","publication_year":2025,"publication_date":"2025-06-22","ids":{"openalex":"https://openalex.org/W4414198900","doi":"https://doi.org/10.1109/dac63849.2025.11132499"},"language":"en","primary_location":{"id":"doi:10.1109/dac63849.2025.11132499","is_oa":false,"landing_page_url":"https://doi.org/10.1109/dac63849.2025.11132499","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"2025 62nd ACM/IEEE Design Automation Conference (DAC)","raw_type":"proceedings-article"},"type":"article","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5100693298","display_name":"Jianzhong Liu","orcid":"https://orcid.org/0000-0003-3612-4315"},"institutions":[{"id":"https://openalex.org/I99065089","display_name":"Tsinghua University","ror":"https://ror.org/03cve4549","country_code":"CN","type":"education","lineage":["https://openalex.org/I99065089"]}],"countries":["CN"],"is_corresponding":true,"raw_author_name":"Jianzhong Liu","raw_affiliation_strings":["Tsinghua University,School of Software"],"affiliations":[{"raw_affiliation_string":"Tsinghua University,School of Software","institution_ids":["https://openalex.org/I99065089"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5031776155","display_name":"Yuheng Shen","orcid":"https://orcid.org/0000-0002-2667-5431"},"institutions":[{"id":"https://openalex.org/I99065089","display_name":"Tsinghua University","ror":"https://ror.org/03cve4549","country_code":"CN","type":"education","lineage":["https://openalex.org/I99065089"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Yuheng Shen","raw_affiliation_strings":["Tsinghua University,School of Software"],"affiliations":[{"raw_affiliation_string":"Tsinghua University,School of Software","institution_ids":["https://openalex.org/I99065089"]}]},{"author_position":"middle","author":{"id":null,"display_name":"Yifei Chu","orcid":null},"institutions":[{"id":"https://openalex.org/I99065089","display_name":"Tsinghua University","ror":"https://ror.org/03cve4549","country_code":"CN","type":"education","lineage":["https://openalex.org/I99065089"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Yifei Chu","raw_affiliation_strings":["Tsinghua University,School of Software"],"affiliations":[{"raw_affiliation_string":"Tsinghua University,School of Software","institution_ids":["https://openalex.org/I99065089"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5024778103","display_name":"Qiang Zhang","orcid":"https://orcid.org/0000-0002-8425-4803"},"institutions":[{"id":"https://openalex.org/I4210150944","display_name":"Hunan Software Vocational Institute","ror":"https://ror.org/04vrn7932","country_code":"CN","type":"education","lineage":["https://openalex.org/I4210150944"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Qiang Zhang","raw_affiliation_strings":["Hunan University,School of Software"],"affiliations":[{"raw_affiliation_string":"Hunan University,School of Software","institution_ids":["https://openalex.org/I4210150944"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5079764771","display_name":"Heyuan Shi","orcid":"https://orcid.org/0000-0002-9040-7247"},"institutions":[{"id":"https://openalex.org/I4210146352","display_name":"Software602 (Czechia)","ror":"https://ror.org/03decxd42","country_code":"CZ","type":"company","lineage":["https://openalex.org/I4210146352"]}],"countries":["CZ"],"is_corresponding":false,"raw_author_name":"Heyuan Shi","raw_affiliation_strings":["Central South University,School of Software"],"affiliations":[{"raw_affiliation_string":"Central South University,School of Software","institution_ids":["https://openalex.org/I4210146352"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5072023674","display_name":"Wanli Chang","orcid":"https://orcid.org/0000-0002-4053-8898"},"institutions":[{"id":"https://openalex.org/I4210150944","display_name":"Hunan Software Vocational Institute","ror":"https://ror.org/04vrn7932","country_code":"CN","type":"education","lineage":["https://openalex.org/I4210150944"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Wanli Chang","raw_affiliation_strings":["Hunan University,School of Software"],"affiliations":[{"raw_affiliation_string":"Hunan University,School of Software","institution_ids":["https://openalex.org/I4210150944"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5060117799","display_name":"Yu Jiang","orcid":"https://orcid.org/0000-0003-0955-503X"},"institutions":[{"id":"https://openalex.org/I99065089","display_name":"Tsinghua University","ror":"https://ror.org/03cve4549","country_code":"CN","type":"education","lineage":["https://openalex.org/I99065089"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Yu Jiang","raw_affiliation_strings":["Tsinghua University,School of Software"],"affiliations":[{"raw_affiliation_string":"Tsinghua University,School of Software","institution_ids":["https://openalex.org/I99065089"]}]}],"institutions":[],"countries_distinct_count":2,"institutions_distinct_count":7,"corresponding_author_ids":["https://openalex.org/A5100693298"],"corresponding_institution_ids":["https://openalex.org/I99065089"],"apc_list":null,"apc_paid":null,"fwci":0.0,"has_fulltext":false,"cited_by_count":0,"citation_normalized_percentile":{"value":0.29361789,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":null,"biblio":{"volume":null,"issue":null,"first_page":"1","last_page":"7"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":0.9983000159263611,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":0.9983000159263611,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10743","display_name":"Software Testing and Debugging Techniques","score":0.9958000183105469,"subfield":{"id":"https://openalex.org/subfields/1712","display_name":"Software"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T12799","display_name":"Mobile and Web Applications","score":0.9742000102996826,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/fuzz-testing","display_name":"Fuzz testing","score":0.8948000073432922},{"id":"https://openalex.org/keywords/android","display_name":"Android (operating system)","score":0.72079998254776},{"id":"https://openalex.org/keywords/implementation","display_name":"Implementation","score":0.46880000829696655},{"id":"https://openalex.org/keywords/linux-kernel","display_name":"Linux kernel","score":0.40209999680519104},{"id":"https://openalex.org/keywords/payload","display_name":"Payload (computing)","score":0.34040001034736633},{"id":"https://openalex.org/keywords/mobile-device","display_name":"Mobile device","score":0.2879999876022339}],"concepts":[{"id":"https://openalex.org/C111065885","wikidata":"https://www.wikidata.org/wiki/Q1189053","display_name":"Fuzz testing","level":3,"score":0.8948000073432922},{"id":"https://openalex.org/C557433098","wikidata":"https://www.wikidata.org/wiki/Q94","display_name":"Android (operating system)","level":2,"score":0.72079998254776},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.6919000148773193},{"id":"https://openalex.org/C149635348","wikidata":"https://www.wikidata.org/wiki/Q193040","display_name":"Embedded system","level":1,"score":0.6809999942779541},{"id":"https://openalex.org/C111919701","wikidata":"https://www.wikidata.org/wiki/Q9135","display_name":"Operating system","level":1,"score":0.6241999864578247},{"id":"https://openalex.org/C26713055","wikidata":"https://www.wikidata.org/wiki/Q245962","display_name":"Implementation","level":2,"score":0.46880000829696655},{"id":"https://openalex.org/C553261973","wikidata":"https://www.wikidata.org/wiki/Q14579","display_name":"Linux kernel","level":2,"score":0.40209999680519104},{"id":"https://openalex.org/C134066672","wikidata":"https://www.wikidata.org/wiki/Q1424639","display_name":"Payload (computing)","level":3,"score":0.34040001034736633},{"id":"https://openalex.org/C186967261","wikidata":"https://www.wikidata.org/wiki/Q5082128","display_name":"Mobile device","level":2,"score":0.2879999876022339},{"id":"https://openalex.org/C20574231","wikidata":"https://www.wikidata.org/wiki/Q844605","display_name":"Backward compatibility","level":2,"score":0.28110000491142273},{"id":"https://openalex.org/C165696696","wikidata":"https://www.wikidata.org/wiki/Q11287","display_name":"Exploit","level":2,"score":0.27790001034736633},{"id":"https://openalex.org/C74193536","wikidata":"https://www.wikidata.org/wiki/Q574844","display_name":"Kernel (algebra)","level":2,"score":0.2775000035762787},{"id":"https://openalex.org/C9390403","wikidata":"https://www.wikidata.org/wiki/Q3966","display_name":"Computer hardware","level":1,"score":0.26460000872612},{"id":"https://openalex.org/C1009929","wikidata":"https://www.wikidata.org/wiki/Q179550","display_name":"Software bug","level":3,"score":0.26440000534057617},{"id":"https://openalex.org/C3017891749","wikidata":"https://www.wikidata.org/wiki/Q94","display_name":"Android application","level":3,"score":0.262800008058548},{"id":"https://openalex.org/C127413603","wikidata":"https://www.wikidata.org/wiki/Q11023","display_name":"Engineering","level":0,"score":0.25859999656677246}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1109/dac63849.2025.11132499","is_oa":false,"landing_page_url":"https://doi.org/10.1109/dac63849.2025.11132499","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"2025 62nd ACM/IEEE Design Automation Conference (DAC)","raw_type":"proceedings-article"}],"best_oa_location":null,"sustainable_development_goals":[],"awards":[],"funders":[{"id":"https://openalex.org/F4320337504","display_name":"Research and Development","ror":"https://ror.org/027s68j25"}],"has_content":{"grobid_xml":false,"pdf":false},"content_urls":null,"referenced_works_count":16,"referenced_works":["https://openalex.org/W2141855472","https://openalex.org/W2766540688","https://openalex.org/W2766711930","https://openalex.org/W2964097210","https://openalex.org/W2985896598","https://openalex.org/W3111332788","https://openalex.org/W3155065762","https://openalex.org/W3206697238","https://openalex.org/W3206846523","https://openalex.org/W3207016455","https://openalex.org/W4308477756","https://openalex.org/W4385664955","https://openalex.org/W4386569390","https://openalex.org/W4389158575","https://openalex.org/W4402442749","https://openalex.org/W4404134023"],"related_works":[],"abstract_inverted_index":{"Embedded":[0],"Android":[1,59,111],"Devices":[2],"have":[3,123],"proliferated":[4],"in":[5,93],"many":[6],"security-critical":[7,116],"embedded":[8,58,110],"scenarios,":[9],"requiring":[10],"sufficient":[11],"testing":[12,34],"to":[13,18,68],"root":[14],"out":[15],"vulnerabilities.":[16],"Due":[17],"Android\u2019s":[19],"architecture,":[20],"which":[21,45,122],"uses":[22],"a":[23],"Hardware":[24],"ion":[25],"Layer":[26],"(HAL)":[27],"for":[28],"vendor-specific":[29,65],"driver":[30,43,66,76],"implementations,":[31],"traditional":[32],"kernel":[33,96],"techniques":[35],"cannot":[36],"detect":[37],"such":[38,64,70],"bugs":[39],"within":[40],"the":[41,90,95,98,127],"actual":[42],"logic,":[44],"are":[46],"commonly":[47],"proprietary":[48,91],"and":[49,82,97,104,113],"vendorspecific.":[50],"In":[51],"this":[52],"paper,":[53],"we":[54,87],"propose":[55],"DroidFuzz,":[56],"an":[57],"system":[60],"fuzzer":[61],"that":[62],"targets":[63],"implementations":[67],"find":[69],"bugs.":[71],"Through":[72],"leveraging":[73],"pre-testing":[74],"HAL":[75,99],"probing,":[77],"kernel-user":[78],"relational":[79],"payload":[80],"generation,":[81],"cross-boundary":[83],"execution":[84],"state":[85],"feedback,":[86],"effectively":[88],"test":[89],"drivers":[92],"both":[94],"layer.":[100],"We":[101],"implemented":[102],"DroidFuzz":[103],"evaluated":[105],"its":[106],"effectiveness":[107],"on":[108],"7":[109],"devices,":[112],"found":[114],"12":[115],"previously":[117],"unknown":[118],"bugs,":[119],"all":[120],"of":[121],"been":[124],"confirmed":[125],"by":[126],"respective":[128],"vendors.":[129]},"counts_by_year":[],"updated_date":"2026-04-21T08:09:41.155169","created_date":"2025-10-10T00:00:00"}