{"id":"https://openalex.org/W7127065903","doi":"https://doi.org/10.1109/trustcom66490.2025.00170","title":"BayesFuzz: Bayesian-Based Greybox Fuzzing for Stateful Protocols","display_name":"BayesFuzz: Bayesian-Based Greybox Fuzzing for Stateful Protocols","publication_year":2025,"publication_date":"2025-11-14","ids":{"openalex":"https://openalex.org/W7127065903","doi":"https://doi.org/10.1109/trustcom66490.2025.00170"},"language":null,"primary_location":{"id":"doi:10.1109/trustcom66490.2025.00170","is_oa":false,"landing_page_url":"https://doi.org/10.1109/trustcom66490.2025.00170","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"2025 IEEE 24th International Conference on Trust, Security and Privacy in Computing and Communications (TrustCom)","raw_type":"proceedings-article"},"type":"conference-paper","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5124819534","display_name":"Jianwen Xiang","orcid":null},"institutions":[{"id":"https://openalex.org/I196699116","display_name":"Wuhan University of Technology","ror":"https://ror.org/03fe7t173","country_code":"CN","type":"education","lineage":["https://openalex.org/I196699116"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Jianwen Xiang","raw_affiliation_strings":["Wuhan University of Technology,Engineering Research Center of Transportation Information and Safety(ERCTIS), MoE of China School of Computer Science and Artificial Intelligence,Wuhan,China"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Wuhan University of Technology,Engineering Research Center of Transportation Information and Safety(ERCTIS), MoE of China School of Computer Science and Artificial Intelligence,Wuhan,China","institution_ids":["https://openalex.org/I196699116"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5124813622","display_name":"Junwei Jiang","orcid":null},"institutions":[{"id":"https://openalex.org/I196699116","display_name":"Wuhan University of Technology","ror":"https://ror.org/03fe7t173","country_code":"CN","type":"education","lineage":["https://openalex.org/I196699116"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Junwei Jiang","raw_affiliation_strings":["Wuhan University of Technology,Engineering Research Center of Transportation Information and Safety(ERCTIS), MoE of China School of Computer Science and Artificial Intelligence,Wuhan,China"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Wuhan University of Technology,Engineering Research Center of Transportation Information and Safety(ERCTIS), MoE of China School of Computer Science and Artificial Intelligence,Wuhan,China","institution_ids":["https://openalex.org/I196699116"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5014122952","display_name":"Songsong Liao","orcid":null},"institutions":[{"id":"https://openalex.org/I196699116","display_name":"Wuhan University of Technology","ror":"https://ror.org/03fe7t173","country_code":"CN","type":"education","lineage":["https://openalex.org/I196699116"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Songsong Liao","raw_affiliation_strings":["Wuhan University of Technology,Engineering Research Center of Transportation Information and Safety(ERCTIS), MoE of China School of Computer Science and Artificial Intelligence,Wuhan,China"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Wuhan University of Technology,Engineering Research Center of Transportation Information and Safety(ERCTIS), MoE of China School of Computer Science and Artificial Intelligence,Wuhan,China","institution_ids":["https://openalex.org/I196699116"]}]},{"author_position":"middle","author":{"id":null,"display_name":"Xueming Zhang","orcid":null},"institutions":[{"id":"https://openalex.org/I196699116","display_name":"Wuhan University of Technology","ror":"https://ror.org/03fe7t173","country_code":"CN","type":"education","lineage":["https://openalex.org/I196699116"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Xueming Zhang","raw_affiliation_strings":["Wuhan University of Technology,Engineering Research Center of Transportation Information and Safety(ERCTIS), MoE of China School of Computer Science and Artificial Intelligence,Wuhan,China"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Wuhan University of Technology,Engineering Research Center of Transportation Information and Safety(ERCTIS), MoE of China School of Computer Science and Artificial Intelligence,Wuhan,China","institution_ids":["https://openalex.org/I196699116"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5103119022","display_name":"Rui Hao","orcid":"https://orcid.org/0000-0003-3012-0276"},"institutions":[{"id":"https://openalex.org/I196699116","display_name":"Wuhan University of Technology","ror":"https://ror.org/03fe7t173","country_code":"CN","type":"education","lineage":["https://openalex.org/I196699116"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Rui Hao","raw_affiliation_strings":["Wuhan University of Technology,Engineering Research Center of Transportation Information and Safety(ERCTIS), MoE of China School of Computer Science and Artificial Intelligence,Wuhan,China"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Wuhan University of Technology,Engineering Research Center of Transportation Information and Safety(ERCTIS), MoE of China School of Computer Science and Artificial Intelligence,Wuhan,China","institution_ids":["https://openalex.org/I196699116"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":1,"corresponding_author_ids":[],"corresponding_institution_ids":["https://openalex.org/I196699116"],"apc_list":null,"apc_paid":null,"fwci":0.0,"has_fulltext":false,"cited_by_count":0,"citation_normalized_percentile":{"value":0.61403509,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":null,"biblio":{"volume":null,"issue":null,"first_page":"1466","last_page":"1471"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10743","display_name":"Software Testing and Debugging Techniques","score":0.8669000267982483,"subfield":{"id":"https://openalex.org/subfields/1712","display_name":"Software"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T10743","display_name":"Software Testing and Debugging Techniques","score":0.8669000267982483,"subfield":{"id":"https://openalex.org/subfields/1712","display_name":"Software"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T12479","display_name":"Web Application Security Vulnerabilities","score":0.03759999945759773,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T12127","display_name":"Software System Performance and Reliability","score":0.00989999994635582,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/fuzz-testing","display_name":"Fuzz testing","score":0.9904000163078308},{"id":"https://openalex.org/keywords/stateful-firewall","display_name":"Stateful firewall","score":0.8831999897956848},{"id":"https://openalex.org/keywords/protocol","display_name":"Protocol (science)","score":0.6284000277519226},{"id":"https://openalex.org/keywords/communications-protocol","display_name":"Communications protocol","score":0.4690000116825104},{"id":"https://openalex.org/keywords/state","display_name":"State (computer science)","score":0.4449000060558319},{"id":"https://openalex.org/keywords/vulnerability","display_name":"Vulnerability (computing)","score":0.41659998893737793},{"id":"https://openalex.org/keywords/inference","display_name":"Inference","score":0.4047999978065491},{"id":"https://openalex.org/keywords/stateless-protocol","display_name":"Stateless protocol","score":0.3896999955177307}],"concepts":[{"id":"https://openalex.org/C111065885","wikidata":"https://www.wikidata.org/wiki/Q1189053","display_name":"Fuzz testing","level":3,"score":0.9904000163078308},{"id":"https://openalex.org/C22927095","wikidata":"https://www.wikidata.org/wiki/Q1784206","display_name":"Stateful firewall","level":3,"score":0.8831999897956848},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.8302000164985657},{"id":"https://openalex.org/C2780385302","wikidata":"https://www.wikidata.org/wiki/Q367158","display_name":"Protocol (science)","level":3,"score":0.6284000277519226},{"id":"https://openalex.org/C12269588","wikidata":"https://www.wikidata.org/wiki/Q132364","display_name":"Communications protocol","level":2,"score":0.4690000116825104},{"id":"https://openalex.org/C48103436","wikidata":"https://www.wikidata.org/wiki/Q599031","display_name":"State (computer science)","level":2,"score":0.4449000060558319},{"id":"https://openalex.org/C95713431","wikidata":"https://www.wikidata.org/wiki/Q631425","display_name":"Vulnerability (computing)","level":2,"score":0.41659998893737793},{"id":"https://openalex.org/C2776214188","wikidata":"https://www.wikidata.org/wiki/Q408386","display_name":"Inference","level":2,"score":0.4047999978065491},{"id":"https://openalex.org/C103613024","wikidata":"https://www.wikidata.org/wiki/Q230924","display_name":"Stateless protocol","level":3,"score":0.3896999955177307},{"id":"https://openalex.org/C45235069","wikidata":"https://www.wikidata.org/wiki/Q278425","display_name":"Table (database)","level":2,"score":0.376800000667572},{"id":"https://openalex.org/C49937458","wikidata":"https://www.wikidata.org/wiki/Q2599292","display_name":"Probabilistic logic","level":2,"score":0.3192000091075897},{"id":"https://openalex.org/C33884865","wikidata":"https://www.wikidata.org/wiki/Q1254335","display_name":"Cryptographic protocol","level":3,"score":0.31290000677108765},{"id":"https://openalex.org/C120314980","wikidata":"https://www.wikidata.org/wiki/Q180634","display_name":"Distributed computing","level":1,"score":0.2964000105857849},{"id":"https://openalex.org/C132868160","wikidata":"https://www.wikidata.org/wiki/Q10322548","display_name":"MQTT","level":3,"score":0.2944999933242798},{"id":"https://openalex.org/C160234255","wikidata":"https://www.wikidata.org/wiki/Q812535","display_name":"Bayesian inference","level":3,"score":0.29260000586509705},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.28870001435279846},{"id":"https://openalex.org/C107673813","wikidata":"https://www.wikidata.org/wiki/Q812534","display_name":"Bayesian probability","level":2,"score":0.2872999906539917},{"id":"https://openalex.org/C31258907","wikidata":"https://www.wikidata.org/wiki/Q1301371","display_name":"Computer network","level":1,"score":0.2856999933719635},{"id":"https://openalex.org/C39920170","wikidata":"https://www.wikidata.org/wiki/Q693083","display_name":"Soundness","level":2,"score":0.2799000144004822},{"id":"https://openalex.org/C167063184","wikidata":"https://www.wikidata.org/wiki/Q1400839","display_name":"Vulnerability assessment","level":3,"score":0.2770000100135803}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1109/trustcom66490.2025.00170","is_oa":false,"landing_page_url":"https://doi.org/10.1109/trustcom66490.2025.00170","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"2025 IEEE 24th International Conference on Trust, Security and Privacy in Computing and Communications (TrustCom)","raw_type":"proceedings-article"}],"best_oa_location":null,"sustainable_development_goals":[{"display_name":"Peace, Justice and strong institutions","id":"https://metadata.un.org/sdg/16","score":0.6914486885070801}],"awards":[],"funders":[{"id":"https://openalex.org/F4320337504","display_name":"Research and Development","ror":"https://ror.org/027s68j25"}],"has_content":{"grobid_xml":false,"pdf":false},"content_urls":null,"referenced_works_count":7,"referenced_works":["https://openalex.org/W3047947484","https://openalex.org/W3091889505","https://openalex.org/W3181528482","https://openalex.org/W3207926955","https://openalex.org/W3213837676","https://openalex.org/W4221162498","https://openalex.org/W4308479228"],"related_works":[],"abstract_inverted_index":{"Protocols":[0],"serve":[1],"as":[2],"the":[3,57,69,103,115,138,142,160,191],"foundation":[4],"for":[5,52,67,93,141],"communication":[6],"between":[7],"devices":[8],"and":[9,79,109,169,178],"systems":[10],"in":[11,28,114,153,190],"modern":[12],"computing":[13],"environments.":[14],"However,":[15,56],"their":[16],"widespread":[17],"use":[18],"also":[19],"exposes":[20],"them":[21],"to":[22,34,39,76,101,136],"various":[23],"security":[24],"threats.":[25],"A":[26],"flaw":[27],"protocol":[29,53,59,71,193],"implementation":[30],"can":[31],"be":[32],"exploited":[33],"compromise":[35],"system":[36],"security,":[37],"leading":[38],"severe":[40],"disruptions":[41],"or":[42],"unauthorized":[43],"access.":[44],"Fuzzing":[45],"has":[46],"become":[47],"a":[48,88,98],"widely":[49],"used":[50],"technique":[51],"vulnerability":[54,189],"detection.":[55],"existing":[58],"fuzzing":[60,91,130,151],"approaches":[61],"often":[62],"lack":[63],"effective":[64],"guidance":[65],"strategies":[66],"exploring":[68],"complex":[70,154],"state":[72,112,144],"space,":[73],"which":[74],"leads":[75],"limited":[77],"coverage":[78,174],"suboptimal":[80],"testing":[81],"efficiency.In":[82],"this":[83],"paper,":[84],"we":[85],"propose":[86],"BayesFuzz,":[87],"Bayesian-guided":[89],"greybox":[90],"approach":[92],"stateful":[94,155],"protocols.":[95,156],"It":[96],"maintains":[97],"probability":[99,104],"table":[100,119],"record":[102],"of":[105,162],"sending":[106],"different":[107,111],"messages":[108],"triggering":[110],"transitions":[113],"current":[116,143],"state.":[117],"This":[118],"is":[120,134],"updated":[121],"via":[122],"Bayesian":[123],"inference":[124],"based":[125],"on":[126],"feedback":[127],"from":[128],"each":[129],"iteration.":[131],"Accordingly,":[132],"BayesFuzz":[133,171],"able":[135],"select":[137],"optimal":[139],"message":[140],"during":[145],"test":[146],"case":[147],"generation,":[148],"thereby":[149],"improving":[150],"efficiency":[152],"Experimental":[157],"results":[158],"confirm":[159],"effectiveness":[161],"BayesFuzz.":[163],"Compared":[164],"with":[165],"state-of-the-art":[166],"fuzzers":[167],"BooFuzz":[168],"AFLNET,":[170],"increases":[172],"branch":[173],"by":[175],"averagely":[176],"23.18%":[177],"45.3%":[179],"within":[180],"24":[181],"hours.":[182],"Furthermore,":[183],"it":[184],"successfully":[185],"discovered":[186],"an":[187],"unknown":[188],"MQTT":[192],"implementation.":[194]},"counts_by_year":[],"updated_date":"2026-07-29T14:22:42.915294","created_date":"2026-02-03T00:00:00"}