{"id":"https://openalex.org/W2910035989","doi":"https://doi.org/10.1142/s0218194018400247","title":"Expediting Binary Fuzzing with Symbolic Analysis","display_name":"Expediting Binary Fuzzing with Symbolic Analysis","publication_year":2018,"publication_date":"2018-11-01","ids":{"openalex":"https://openalex.org/W2910035989","doi":"https://doi.org/10.1142/s0218194018400247","mag":"2910035989"},"language":"en","primary_location":{"id":"doi:10.1142/s0218194018400247","is_oa":false,"landing_page_url":"https://doi.org/10.1142/s0218194018400247","pdf_url":null,"source":{"id":"https://openalex.org/S131442419","display_name":"International Journal of Software Engineering and Knowledge Engineering","issn_l":"0218-1940","issn":["0218-1940","1793-6403"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310319815","host_organization_name":"World Scientific","host_organization_lineage":["https://openalex.org/P4310319815"],"host_organization_lineage_names":["World Scientific"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"International Journal of Software Engineering and Knowledge Engineering","raw_type":"journal-article"},"type":"article","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5081369876","display_name":"Luhang Xu","orcid":null},"institutions":[{"id":"https://openalex.org/I170215575","display_name":"National University of Defense Technology","ror":"https://ror.org/05d2yfz11","country_code":"CN","type":"education","lineage":["https://openalex.org/I170215575"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Luhang Xu","raw_affiliation_strings":["Laboratory of Software Engineering for Complex Systems, National University of Defense Technology, Changsha, Hunan 410073, P. R. China"],"affiliations":[{"raw_affiliation_string":"Laboratory of Software Engineering for Complex Systems, National University of Defense Technology, Changsha, Hunan 410073, P. R. China","institution_ids":["https://openalex.org/I170215575"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5101846770","display_name":"Liangze Yin","orcid":"https://orcid.org/0000-0002-1645-2787"},"institutions":[{"id":"https://openalex.org/I170215575","display_name":"National University of Defense Technology","ror":"https://ror.org/05d2yfz11","country_code":"CN","type":"education","lineage":["https://openalex.org/I170215575"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Liangze Yin","raw_affiliation_strings":["Laboratory of Software Engineering for Complex Systems, National University of Defense Technology, Changsha, Hunan 410073, P. R. China"],"affiliations":[{"raw_affiliation_string":"Laboratory of Software Engineering for Complex Systems, National University of Defense Technology, Changsha, Hunan 410073, P. R. China","institution_ids":["https://openalex.org/I170215575"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5100654380","display_name":"Wei Dong","orcid":"https://orcid.org/0000-0002-8033-7943"},"institutions":[{"id":"https://openalex.org/I170215575","display_name":"National University of Defense Technology","ror":"https://ror.org/05d2yfz11","country_code":"CN","type":"education","lineage":["https://openalex.org/I170215575"]}],"countries":["CN"],"is_corresponding":true,"raw_author_name":"Wei Dong","raw_affiliation_strings":["Laboratory of Software Engineering for Complex Systems, National University of Defense Technology, Changsha, Hunan 410073, P. R. China"],"affiliations":[{"raw_affiliation_string":"Laboratory of Software Engineering for Complex Systems, National University of Defense Technology, Changsha, Hunan 410073, P. R. China","institution_ids":["https://openalex.org/I170215575"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5046877088","display_name":"Weixi Jia","orcid":null},"institutions":[{"id":"https://openalex.org/I170215575","display_name":"National University of Defense Technology","ror":"https://ror.org/05d2yfz11","country_code":"CN","type":"education","lineage":["https://openalex.org/I170215575"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Weixi Jia","raw_affiliation_strings":["Laboratory of Software Engineering for Complex Systems, National University of Defense Technology, Changsha, Hunan 410073, P. R. China"],"affiliations":[{"raw_affiliation_string":"Laboratory of Software Engineering for Complex Systems, National University of Defense Technology, Changsha, Hunan 410073, P. R. China","institution_ids":["https://openalex.org/I170215575"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5100376875","display_name":"Yongjun Li","orcid":"https://orcid.org/0000-0002-3184-6805"},"institutions":[{"id":"https://openalex.org/I17145004","display_name":"Northwestern Polytechnical University","ror":"https://ror.org/01y0j0j86","country_code":"CN","type":"education","lineage":["https://openalex.org/I17145004"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Yongjun Li","raw_affiliation_strings":["Northwestern Polytechnical University, Xi\u2019an, Shaanxi 710000, P. R. China"],"affiliations":[{"raw_affiliation_string":"Northwestern Polytechnical University, Xi\u2019an, Shaanxi 710000, P. R. China","institution_ids":["https://openalex.org/I17145004"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":5,"corresponding_author_ids":["https://openalex.org/A5100654380"],"corresponding_institution_ids":["https://openalex.org/I170215575"],"apc_list":null,"apc_paid":null,"fwci":1.1789,"has_fulltext":false,"cited_by_count":4,"citation_normalized_percentile":{"value":0.82060013,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":{"min":89,"max":97},"biblio":{"volume":"28","issue":"11n12","first_page":"1701","last_page":"1718"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10743","display_name":"Software Testing and Debugging Techniques","score":1.0,"subfield":{"id":"https://openalex.org/subfields/1712","display_name":"Software"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T10743","display_name":"Software Testing and Debugging Techniques","score":1.0,"subfield":{"id":"https://openalex.org/subfields/1712","display_name":"Software"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":0.9987999796867371,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T12423","display_name":"Software Reliability and Analysis Research","score":0.9987000226974487,"subfield":{"id":"https://openalex.org/subfields/1712","display_name":"Software"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/fuzz-testing","display_name":"Fuzz testing","score":0.9749929308891296},{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.7763389348983765},{"id":"https://openalex.org/keywords/symbolic-execution","display_name":"Symbolic execution","score":0.4955188035964966},{"id":"https://openalex.org/keywords/tinker","display_name":"Tinker","score":0.4613724946975708},{"id":"https://openalex.org/keywords/benchmark","display_name":"Benchmark (surveying)","score":0.4296179413795471},{"id":"https://openalex.org/keywords/control-flow-graph","display_name":"Control flow graph","score":0.42917585372924805},{"id":"https://openalex.org/keywords/tracing","display_name":"Tracing","score":0.4147694408893585},{"id":"https://openalex.org/keywords/data-mining","display_name":"Data mining","score":0.35733139514923096},{"id":"https://openalex.org/keywords/theoretical-computer-science","display_name":"Theoretical computer science","score":0.27715057134628296},{"id":"https://openalex.org/keywords/programming-language","display_name":"Programming language","score":0.1951662003993988},{"id":"https://openalex.org/keywords/software","display_name":"Software","score":0.13922473788261414}],"concepts":[{"id":"https://openalex.org/C111065885","wikidata":"https://www.wikidata.org/wiki/Q1189053","display_name":"Fuzz testing","level":3,"score":0.9749929308891296},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.7763389348983765},{"id":"https://openalex.org/C2779639559","wikidata":"https://www.wikidata.org/wiki/Q7661178","display_name":"Symbolic execution","level":3,"score":0.4955188035964966},{"id":"https://openalex.org/C2778828181","wikidata":"https://www.wikidata.org/wiki/Q338221","display_name":"Tinker","level":2,"score":0.4613724946975708},{"id":"https://openalex.org/C185798385","wikidata":"https://www.wikidata.org/wiki/Q1161707","display_name":"Benchmark (surveying)","level":2,"score":0.4296179413795471},{"id":"https://openalex.org/C27458966","wikidata":"https://www.wikidata.org/wiki/Q1187693","display_name":"Control flow graph","level":2,"score":0.42917585372924805},{"id":"https://openalex.org/C138673069","wikidata":"https://www.wikidata.org/wiki/Q322229","display_name":"Tracing","level":2,"score":0.4147694408893585},{"id":"https://openalex.org/C124101348","wikidata":"https://www.wikidata.org/wiki/Q172491","display_name":"Data mining","level":1,"score":0.35733139514923096},{"id":"https://openalex.org/C80444323","wikidata":"https://www.wikidata.org/wiki/Q2878974","display_name":"Theoretical computer science","level":1,"score":0.27715057134628296},{"id":"https://openalex.org/C199360897","wikidata":"https://www.wikidata.org/wiki/Q9143","display_name":"Programming language","level":1,"score":0.1951662003993988},{"id":"https://openalex.org/C2777904410","wikidata":"https://www.wikidata.org/wiki/Q7397","display_name":"Software","level":2,"score":0.13922473788261414},{"id":"https://openalex.org/C205649164","wikidata":"https://www.wikidata.org/wiki/Q1071","display_name":"Geography","level":0,"score":0.0},{"id":"https://openalex.org/C144024400","wikidata":"https://www.wikidata.org/wiki/Q21201","display_name":"Sociology","level":0,"score":0.0},{"id":"https://openalex.org/C19165224","wikidata":"https://www.wikidata.org/wiki/Q23404","display_name":"Anthropology","level":1,"score":0.0},{"id":"https://openalex.org/C13280743","wikidata":"https://www.wikidata.org/wiki/Q131089","display_name":"Geodesy","level":1,"score":0.0}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1142/s0218194018400247","is_oa":false,"landing_page_url":"https://doi.org/10.1142/s0218194018400247","pdf_url":null,"source":{"id":"https://openalex.org/S131442419","display_name":"International Journal of Software Engineering and Knowledge Engineering","issn_l":"0218-1940","issn":["0218-1940","1793-6403"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310319815","host_organization_name":"World Scientific","host_organization_lineage":["https://openalex.org/P4310319815"],"host_organization_lineage_names":["World Scientific"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"International Journal of Software Engineering and Knowledge Engineering","raw_type":"journal-article"}],"best_oa_location":null,"sustainable_development_goals":[],"awards":[],"funders":[],"has_content":{"pdf":false,"grobid_xml":false},"content_urls":null,"referenced_works_count":4,"referenced_works":["https://openalex.org/W1988524530","https://openalex.org/W2101512909","https://openalex.org/W2192387223","https://openalex.org/W2568392743"],"related_works":["https://openalex.org/W2886234360","https://openalex.org/W2785720764","https://openalex.org/W2801797726","https://openalex.org/W2186070848","https://openalex.org/W4285245977","https://openalex.org/W3203826058","https://openalex.org/W2780750120","https://openalex.org/W3104446232","https://openalex.org/W2914996832","https://openalex.org/W4385965400"],"abstract_inverted_index":{"Fuzzing":[0],"is":[1,19,95,169,215],"an":[2,59],"important":[3],"method":[4],"for":[5,41],"binary":[6,12,35,223],"vulnerability":[7,219,224],"mining.":[8],"It":[9,67],"can":[10,103,198],"analyze":[11],"programs":[13],"without":[14],"their":[15],"source":[16],"codes,":[17],"which":[18,102,184],"not":[20],"easy":[21],"to":[22,29,75,97,121,133,158,162,175],"do":[23],"by":[24],"other":[25],"technologies.":[26],"But":[27],"due":[28],"the":[30,46,69,77,83,105,110,113,123,134,177,193,206],"blindness":[31],"of":[32,72,80,109,137,179,195],"input":[33,101,168],"generation,":[34],"fuzzing":[36,63,84,106],"often":[37],"falls":[38,85],"into":[39,86],"traps":[40],"a":[42,91,99,166],"long":[43],"time":[44],"when":[45],"new":[47,100,167],"mutated":[48],"inputs":[49,183],"cannot":[50],"generate":[51,98,182],"unexplored":[52],"paths.":[53],"In":[54,112],"this":[55],"paper,":[56],"we":[57,117,152,181],"propose":[58],"efficient":[60,217],"and":[61,165,205],"flexible":[62],"framework":[64],"named":[65],"Tinker.":[66],"defines":[68],"growth":[70],"rate":[71],"path":[73],"coverage":[74],"measure":[76],"current":[78],"state":[79],"fuzzing.":[81],"If":[82],"low-speed":[87],"or":[88],"blocked":[89],"states,":[90],"symbolic":[92,114,172],"analysis":[93,115],"procedure":[94],"invoked":[96],"help":[104],"jump":[107],"out":[108],"trap.":[111],"procedure,":[116],"employ":[118,153],"dynamic":[119],"execution":[120],"track":[122],"traversed":[124],"nodes.":[125],"The":[126],"untraversed":[127],"branches":[128,164],"are":[129],"then":[130],"identified":[131],"according":[132],"recorded":[135],"data":[136],"American":[138,144],"Fuzzy":[139,145],"Lop":[140,146],"(AFL)":[141],"[M.":[142],"Zalewski,":[143],"(2014),":[147],"http://lcamtuf.coredump.cx/afl/":[148],"].":[149],"At":[150],"last,":[151],"control":[154],"flow":[155],"graph":[156],"(CFG)":[157],"construct":[159],"complete":[160],"paths":[161],"these":[163],"generated":[170],"using":[171],"execution.":[173],"Moreover,":[174],"expedite":[176],"detection":[178],"vulnerabilities,":[180],"trigger":[185],"more":[186,216],"high-risk":[187],"system":[188],"calls":[189],"first,":[190],"such":[191],"that":[192,213],"possibility":[194],"finding":[196],"vulnerabilities":[197],"be":[199],"improved.":[200],"Tinker":[201,214],"has":[202],"been":[203],"implemented":[204],"experiments":[207],"on":[208],"DARPA":[209],"CGC":[210],"benchmark":[211],"show":[212],"in":[218],"mining":[220,225],"than":[221],"state-of-the-art":[222],"tools.":[226]},"counts_by_year":[{"year":2021,"cited_by_count":1},{"year":2020,"cited_by_count":3}],"updated_date":"2025-11-06T03:46:38.306776","created_date":"2025-10-10T00:00:00"}