{"id":"https://openalex.org/W7093363291","doi":"https://doi.org/10.1109/sbft66712.2025.00018","title":"HFuzz: Havoc Mode Guided Fuzzing","display_name":"HFuzz: Havoc Mode Guided Fuzzing","publication_year":2025,"publication_date":"2025-04-28","ids":{"openalex":"https://openalex.org/W7093363291","doi":"https://doi.org/10.1109/sbft66712.2025.00018"},"language":"en","primary_location":{"id":"doi:10.1109/sbft66712.2025.00018","is_oa":false,"landing_page_url":"https://doi.org/10.1109/sbft66712.2025.00018","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"2025 IEEE/ACM International Workshop on Search-Based and Fuzz Testing (SBFT)","raw_type":"proceedings-article"},"type":"article","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":null,"display_name":"Yuchong Xie","orcid":null},"institutions":[{"id":"https://openalex.org/I200769079","display_name":"Hong Kong University of Science and Technology","ror":"https://ror.org/00q4vv597","country_code":"HK","type":"education","lineage":["https://openalex.org/I200769079"]},{"id":"https://openalex.org/I889458895","display_name":"University of Hong Kong","ror":"https://ror.org/02zhqgq86","country_code":"HK","type":"education","lineage":["https://openalex.org/I889458895"]}],"countries":["HK"],"is_corresponding":true,"raw_author_name":"Yuchong Xie","raw_affiliation_strings":["Hong Kong University of Science and Technology,Department of Computer Sciences and Engineering,Hong Kong SAR,China"],"affiliations":[{"raw_affiliation_string":"Hong Kong University of Science and Technology,Department of Computer Sciences and Engineering,Hong Kong SAR,China","institution_ids":["https://openalex.org/I200769079","https://openalex.org/I889458895"]}]},{"author_position":"last","author":{"id":null,"display_name":"Dongdong She","orcid":null},"institutions":[{"id":"https://openalex.org/I200769079","display_name":"Hong Kong University of Science and Technology","ror":"https://ror.org/00q4vv597","country_code":"HK","type":"education","lineage":["https://openalex.org/I200769079"]},{"id":"https://openalex.org/I889458895","display_name":"University of Hong Kong","ror":"https://ror.org/02zhqgq86","country_code":"HK","type":"education","lineage":["https://openalex.org/I889458895"]}],"countries":["HK"],"is_corresponding":false,"raw_author_name":"Dongdong She","raw_affiliation_strings":["Hong Kong University of Science and Technology,Department of Computer Sciences and Engineering,Hong Kong SAR,China"],"affiliations":[{"raw_affiliation_string":"Hong Kong University of Science and Technology,Department of Computer Sciences and Engineering,Hong Kong SAR,China","institution_ids":["https://openalex.org/I200769079","https://openalex.org/I889458895"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":2,"corresponding_author_ids":[],"corresponding_institution_ids":["https://openalex.org/I200769079","https://openalex.org/I889458895"],"apc_list":null,"apc_paid":null,"fwci":33.4328,"has_fulltext":false,"cited_by_count":1,"citation_normalized_percentile":{"value":0.99499214,"is_in_top_1_percent":true,"is_in_top_10_percent":true},"cited_by_percentile_year":{"min":96,"max":98},"biblio":{"volume":null,"issue":null,"first_page":"49","last_page":"50"},"is_retracted":false,"is_paratext":false,"is_xpac":true,"primary_topic":{"id":"https://openalex.org/T12575","display_name":"Medical History and Research","score":0.2401999980211258,"subfield":{"id":"https://openalex.org/subfields/1202","display_name":"History"},"field":{"id":"https://openalex.org/fields/12","display_name":"Arts and Humanities"},"domain":{"id":"https://openalex.org/domains/2","display_name":"Social Sciences"}},"topics":[{"id":"https://openalex.org/T12575","display_name":"Medical History and Research","score":0.2401999980211258,"subfield":{"id":"https://openalex.org/subfields/1202","display_name":"History"},"field":{"id":"https://openalex.org/fields/12","display_name":"Arts and Humanities"},"domain":{"id":"https://openalex.org/domains/2","display_name":"Social Sciences"}},{"id":"https://openalex.org/T12854","display_name":"Neurology and Historical Studies","score":0.08619999885559082,"subfield":{"id":"https://openalex.org/subfields/2808","display_name":"Neurology"},"field":{"id":"https://openalex.org/fields/28","display_name":"Neuroscience"},"domain":{"id":"https://openalex.org/domains/1","display_name":"Life Sciences"}},{"id":"https://openalex.org/T12445","display_name":"Twentieth Century Scientific Developments","score":0.06019999831914902,"subfield":{"id":"https://openalex.org/subfields/1207","display_name":"History and Philosophy of Science"},"field":{"id":"https://openalex.org/fields/12","display_name":"Arts and Humanities"},"domain":{"id":"https://openalex.org/domains/2","display_name":"Social Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/fuzz-testing","display_name":"Fuzz testing","score":0.9861000180244446},{"id":"https://openalex.org/keywords/taint-checking","display_name":"Taint checking","score":0.7404000163078308},{"id":"https://openalex.org/keywords/scalability","display_name":"Scalability","score":0.6172000169754028},{"id":"https://openalex.org/keywords/byte","display_name":"Byte","score":0.5522000193595886},{"id":"https://openalex.org/keywords/instrumentation","display_name":"Instrumentation (computer programming)","score":0.4916999936103821},{"id":"https://openalex.org/keywords/component","display_name":"Component (thermodynamics)","score":0.47769999504089355},{"id":"https://openalex.org/keywords/inference","display_name":"Inference","score":0.3878999948501587}],"concepts":[{"id":"https://openalex.org/C111065885","wikidata":"https://www.wikidata.org/wiki/Q1189053","display_name":"Fuzz testing","level":3,"score":0.9861000180244446},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.8384000062942505},{"id":"https://openalex.org/C63116202","wikidata":"https://www.wikidata.org/wiki/Q7676227","display_name":"Taint checking","level":3,"score":0.7404000163078308},{"id":"https://openalex.org/C48044578","wikidata":"https://www.wikidata.org/wiki/Q727490","display_name":"Scalability","level":2,"score":0.6172000169754028},{"id":"https://openalex.org/C43364308","wikidata":"https://www.wikidata.org/wiki/Q8799","display_name":"Byte","level":2,"score":0.5522000193595886},{"id":"https://openalex.org/C118530786","wikidata":"https://www.wikidata.org/wiki/Q1134732","display_name":"Instrumentation (computer programming)","level":2,"score":0.4916999936103821},{"id":"https://openalex.org/C168167062","wikidata":"https://www.wikidata.org/wiki/Q1117970","display_name":"Component (thermodynamics)","level":2,"score":0.47769999504089355},{"id":"https://openalex.org/C2776214188","wikidata":"https://www.wikidata.org/wiki/Q408386","display_name":"Inference","level":2,"score":0.3878999948501587},{"id":"https://openalex.org/C48677424","wikidata":"https://www.wikidata.org/wiki/Q6888088","display_name":"Mode (computer interface)","level":2,"score":0.37459999322891235},{"id":"https://openalex.org/C26517878","wikidata":"https://www.wikidata.org/wiki/Q228039","display_name":"Key (lock)","level":2,"score":0.351500004529953},{"id":"https://openalex.org/C124101348","wikidata":"https://www.wikidata.org/wiki/Q172491","display_name":"Data mining","level":1,"score":0.3089999854564667},{"id":"https://openalex.org/C98183937","wikidata":"https://www.wikidata.org/wiki/Q2112188","display_name":"Program analysis","level":2,"score":0.2874999940395355},{"id":"https://openalex.org/C97686452","wikidata":"https://www.wikidata.org/wiki/Q7604153","display_name":"Static analysis","level":2,"score":0.27070000767707825},{"id":"https://openalex.org/C9652623","wikidata":"https://www.wikidata.org/wiki/Q190109","display_name":"Field (mathematics)","level":2,"score":0.266400009393692},{"id":"https://openalex.org/C126042441","wikidata":"https://www.wikidata.org/wiki/Q1324888","display_name":"Frame (networking)","level":2,"score":0.2630000114440918},{"id":"https://openalex.org/C46743427","wikidata":"https://www.wikidata.org/wiki/Q1341685","display_name":"Inference engine","level":3,"score":0.257099986076355},{"id":"https://openalex.org/C149635348","wikidata":"https://www.wikidata.org/wiki/Q193040","display_name":"Embedded system","level":1,"score":0.25519999861717224},{"id":"https://openalex.org/C192209626","wikidata":"https://www.wikidata.org/wiki/Q190909","display_name":"Focus (optics)","level":2,"score":0.2529999911785126}],"mesh":[],"locations_count":2,"locations":[{"id":"doi:10.1109/sbft66712.2025.00018","is_oa":false,"landing_page_url":"https://doi.org/10.1109/sbft66712.2025.00018","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"2025 IEEE/ACM International Workshop on Search-Based and Fuzz Testing (SBFT)","raw_type":"proceedings-article"},{"id":"pmh:oai:repository.hkust.edu.hk:1783.1-170631","is_oa":false,"landing_page_url":"http://repository.hkust.edu.hk/ir/Record/1783.1-170631","pdf_url":null,"source":{"id":"https://openalex.org/S4306401796","display_name":"Rare & Special e-Zone (The Hong Kong University of Science and Technology)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I200769079","host_organization_name":"Hong Kong University of Science and Technology","host_organization_lineage":["https://openalex.org/I200769079"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"Conference paper"}],"best_oa_location":null,"sustainable_development_goals":[{"score":0.7706342339515686,"display_name":"Affordable and clean energy","id":"https://metadata.un.org/sdg/7"}],"awards":[],"funders":[],"has_content":{"grobid_xml":false,"pdf":false},"content_urls":null,"referenced_works_count":3,"referenced_works":["https://openalex.org/W2927166905","https://openalex.org/W2964097210","https://openalex.org/W4308632293"],"related_works":[],"abstract_inverted_index":{"Taint":[0],"analysis":[1,20],"plays":[2],"a":[3,37,48],"crucial":[4],"role":[5],"in":[6,51,63],"fuzzing":[7,39,84],"by":[8],"identifying":[9,67],"input":[10],"bytes":[11],"that":[12,41],"significantly":[13],"influence":[14],"program":[15],"behavior.":[16],"However,":[17],"existing":[18,83],"taint":[19,58,94],"approaches":[21],"either":[22],"require":[23],"heavyweight":[24],"instrumentation":[25],"or":[26],"incur":[27],"substantial":[28],"runtime":[29],"overhead.":[30],"In":[31],"this":[32,75],"paper,":[33],"we":[34],"propose":[35],"HFuzz,":[36],"novel":[38],"approach":[40,61],"leverages":[42],"the":[43,98],"havoc":[44],"mutation":[45],"mode":[46],"-":[47,54],"fundamental":[49],"component":[50],"modern":[52],"fuzzers":[53],"to":[55,77],"perform":[56],"lightweight":[57],"inference.":[59],"Our":[60],"operates":[62],"two":[64],"phases:":[65],"first":[66],"\"hot":[68],"bytes\"":[69],"through":[70],"havoc-based":[71],"sampling,":[72],"then":[73],"using":[74],"information":[76],"guide":[78],"subsequent":[79],"mutations.":[80],"By":[81],"utilizing":[82],"components":[85],"rather":[86],"than":[87],"adding":[88],"extra":[89],"execution,":[90],"HFuzz":[91],"achieves":[92],"efficient":[93],"inference":[95],"while":[96],"maintaining":[97],"simplicity":[99],"and":[100],"scalability":[101],"of":[102],"conventional":[103],"fuzzers.":[104]},"counts_by_year":[{"year":2026,"cited_by_count":1}],"updated_date":"2026-04-24T08:23:43.765630","created_date":"2025-10-24T00:00:00"}
