{"id":"https://openalex.org/W2053597677","doi":"https://doi.org/10.1145/2786805.2786844","title":"Turning programs against each other: high coverage fuzz-testing using binary-code mutation and dynamic slicing","display_name":"Turning programs against each other: high coverage fuzz-testing using binary-code mutation and dynamic slicing","publication_year":2015,"publication_date":"2015-08-26","ids":{"openalex":"https://openalex.org/W2053597677","doi":"https://doi.org/10.1145/2786805.2786844","mag":"2053597677"},"language":"en","primary_location":{"id":"doi:10.1145/2786805.2786844","is_oa":false,"landing_page_url":"https://doi.org/10.1145/2786805.2786844","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the 2015 10th Joint Meeting on Foundations of Software Engineering","raw_type":"proceedings-article"},"type":"conference-paper","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5082932780","display_name":"Ulf Karg\u00e9n","orcid":"https://orcid.org/0000-0002-3009-4314"},"institutions":[{"id":"https://openalex.org/I102134673","display_name":"Link\u00f6ping University","ror":"https://ror.org/05ynxx418","country_code":"SE","type":"education","lineage":["https://openalex.org/I102134673"]}],"countries":["SE"],"is_corresponding":false,"raw_author_name":"Ulf Karg\u00e9n","raw_affiliation_strings":["Link\u00f6ping University, Sweden"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Link\u00f6ping University, Sweden","institution_ids":["https://openalex.org/I102134673"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5048152442","display_name":"Nahid Shahmehri","orcid":"https://orcid.org/0000-0002-0920-2157"},"institutions":[{"id":"https://openalex.org/I102134673","display_name":"Link\u00f6ping University","ror":"https://ror.org/05ynxx418","country_code":"SE","type":"education","lineage":["https://openalex.org/I102134673"]}],"countries":["SE"],"is_corresponding":false,"raw_author_name":"Nahid Shahmehri","raw_affiliation_strings":["Link\u00f6ping University, Sweden"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Link\u00f6ping University, Sweden","institution_ids":["https://openalex.org/I102134673"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":1,"corresponding_author_ids":[],"corresponding_institution_ids":["https://openalex.org/I102134673"],"apc_list":null,"apc_paid":null,"fwci":null,"has_fulltext":false,"cited_by_count":61,"citation_normalized_percentile":null,"cited_by_percentile_year":null,"biblio":{"volume":null,"issue":null,"first_page":"782","last_page":"792"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10743","display_name":"Software Testing and Debugging Techniques","score":0.9998999834060669,"subfield":{"id":"https://openalex.org/subfields/1712","display_name":"Software"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T10743","display_name":"Software Testing and Debugging Techniques","score":0.9998999834060669,"subfield":{"id":"https://openalex.org/subfields/1712","display_name":"Software"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T12423","display_name":"Software Reliability and Analysis Research","score":0.9968000054359436,"subfield":{"id":"https://openalex.org/subfields/1712","display_name":"Software"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":0.9945999979972839,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/fuzz-testing","display_name":"Fuzz testing","score":0.925857424736023},{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.8561999797821045},{"id":"https://openalex.org/keywords/code-coverage","display_name":"Code coverage","score":0.8097402453422546},{"id":"https://openalex.org/keywords/leverage","display_name":"Leverage (statistics)","score":0.5840128660202026},{"id":"https://openalex.org/keywords/source-code","display_name":"Source code","score":0.5370743274688721},{"id":"https://openalex.org/keywords/robustness","display_name":"Robustness (evolution)","score":0.5231400728225708},{"id":"https://openalex.org/keywords/taint-checking","display_name":"Taint checking","score":0.5028852820396423},{"id":"https://openalex.org/keywords/test-suite","display_name":"Test suite","score":0.502204418182373},{"id":"https://openalex.org/keywords/unreachable-code","display_name":"Unreachable code","score":0.453222393989563},{"id":"https://openalex.org/keywords/code","display_name":"Code (set theory)","score":0.4450087249279022},{"id":"https://openalex.org/keywords/dead-code","display_name":"Dead code","score":0.4430111050605774},{"id":"https://openalex.org/keywords/test-case","display_name":"Test case","score":0.43063318729400635},{"id":"https://openalex.org/keywords/white-box-testing","display_name":"White-box testing","score":0.4223484992980957},{"id":"https://openalex.org/keywords/redundant-code","display_name":"Redundant code","score":0.41856855154037476},{"id":"https://openalex.org/keywords/software","display_name":"Software","score":0.3795187473297119},{"id":"https://openalex.org/keywords/programming-language","display_name":"Programming language","score":0.3646206855773926},{"id":"https://openalex.org/keywords/computer-engineering","display_name":"Computer engineering","score":0.36454668641090393},{"id":"https://openalex.org/keywords/code-generation","display_name":"Code generation","score":0.27950555086135864},{"id":"https://openalex.org/keywords/operating-system","display_name":"Operating system","score":0.2586084008216858},{"id":"https://openalex.org/keywords/artificial-intelligence","display_name":"Artificial intelligence","score":0.1959170699119568},{"id":"https://openalex.org/keywords/machine-learning","display_name":"Machine learning","score":0.1792183220386505},{"id":"https://openalex.org/keywords/software-development","display_name":"Software development","score":0.14204081892967224}],"concepts":[{"id":"https://openalex.org/C111065885","wikidata":"https://www.wikidata.org/wiki/Q1189053","display_name":"Fuzz testing","level":3,"score":0.925857424736023},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.8561999797821045},{"id":"https://openalex.org/C53942775","wikidata":"https://www.wikidata.org/wiki/Q1211721","display_name":"Code coverage","level":3,"score":0.8097402453422546},{"id":"https://openalex.org/C153083717","wikidata":"https://www.wikidata.org/wiki/Q6535263","display_name":"Leverage (statistics)","level":2,"score":0.5840128660202026},{"id":"https://openalex.org/C43126263","wikidata":"https://www.wikidata.org/wiki/Q128751","display_name":"Source code","level":2,"score":0.5370743274688721},{"id":"https://openalex.org/C63479239","wikidata":"https://www.wikidata.org/wiki/Q7353546","display_name":"Robustness (evolution)","level":3,"score":0.5231400728225708},{"id":"https://openalex.org/C63116202","wikidata":"https://www.wikidata.org/wiki/Q7676227","display_name":"Taint checking","level":3,"score":0.5028852820396423},{"id":"https://openalex.org/C151552104","wikidata":"https://www.wikidata.org/wiki/Q7705809","display_name":"Test suite","level":4,"score":0.502204418182373},{"id":"https://openalex.org/C50951305","wikidata":"https://www.wikidata.org/wiki/Q2482534","display_name":"Unreachable code","level":5,"score":0.453222393989563},{"id":"https://openalex.org/C2776760102","wikidata":"https://www.wikidata.org/wiki/Q5139990","display_name":"Code (set theory)","level":3,"score":0.4450087249279022},{"id":"https://openalex.org/C47434764","wikidata":"https://www.wikidata.org/wiki/Q1770035","display_name":"Dead code","level":5,"score":0.4430111050605774},{"id":"https://openalex.org/C128942645","wikidata":"https://www.wikidata.org/wiki/Q1568346","display_name":"Test case","level":3,"score":0.43063318729400635},{"id":"https://openalex.org/C162443782","wikidata":"https://www.wikidata.org/wiki/Q1066228","display_name":"White-box testing","level":5,"score":0.4223484992980957},{"id":"https://openalex.org/C151578736","wikidata":"https://www.wikidata.org/wiki/Q1251793","display_name":"Redundant code","level":4,"score":0.41856855154037476},{"id":"https://openalex.org/C2777904410","wikidata":"https://www.wikidata.org/wiki/Q7397","display_name":"Software","level":2,"score":0.3795187473297119},{"id":"https://openalex.org/C199360897","wikidata":"https://www.wikidata.org/wiki/Q9143","display_name":"Programming language","level":1,"score":0.3646206855773926},{"id":"https://openalex.org/C113775141","wikidata":"https://www.wikidata.org/wiki/Q428691","display_name":"Computer engineering","level":1,"score":0.36454668641090393},{"id":"https://openalex.org/C133162039","wikidata":"https://www.wikidata.org/wiki/Q1061077","display_name":"Code generation","level":3,"score":0.27950555086135864},{"id":"https://openalex.org/C111919701","wikidata":"https://www.wikidata.org/wiki/Q9135","display_name":"Operating system","level":1,"score":0.2586084008216858},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.1959170699119568},{"id":"https://openalex.org/C119857082","wikidata":"https://www.wikidata.org/wiki/Q2539","display_name":"Machine learning","level":1,"score":0.1792183220386505},{"id":"https://openalex.org/C529173508","wikidata":"https://www.wikidata.org/wiki/Q638608","display_name":"Software development","level":3,"score":0.14204081892967224},{"id":"https://openalex.org/C185592680","wikidata":"https://www.wikidata.org/wiki/Q2329","display_name":"Chemistry","level":0,"score":0.0},{"id":"https://openalex.org/C26517878","wikidata":"https://www.wikidata.org/wiki/Q228039","display_name":"Key (lock)","level":2,"score":0.0},{"id":"https://openalex.org/C177264268","wikidata":"https://www.wikidata.org/wiki/Q1514741","display_name":"Set (abstract data type)","level":2,"score":0.0},{"id":"https://openalex.org/C186846655","wikidata":"https://www.wikidata.org/wiki/Q3398377","display_name":"Software construction","level":4,"score":0.0},{"id":"https://openalex.org/C104317684","wikidata":"https://www.wikidata.org/wiki/Q7187","display_name":"Gene","level":2,"score":0.0},{"id":"https://openalex.org/C55493867","wikidata":"https://www.wikidata.org/wiki/Q7094","display_name":"Biochemistry","level":1,"score":0.0},{"id":"https://openalex.org/C152877465","wikidata":"https://www.wikidata.org/wiki/Q208042","display_name":"Regression analysis","level":2,"score":0.0}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1145/2786805.2786844","is_oa":false,"landing_page_url":"https://doi.org/10.1145/2786805.2786844","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the 2015 10th Joint Meeting on Foundations of Software Engineering","raw_type":"proceedings-article"}],"best_oa_location":null,"sustainable_development_goals":[{"score":0.5600000023841858,"id":"https://metadata.un.org/sdg/1","display_name":"No poverty"}],"awards":[],"funders":[],"has_content":{"pdf":false,"grobid_xml":false},"content_urls":null,"referenced_works_count":28,"referenced_works":["https://openalex.org/W157156687","https://openalex.org/W614438062","https://openalex.org/W1427242644","https://openalex.org/W1531203382","https://openalex.org/W1976878954","https://openalex.org/W1988524530","https://openalex.org/W2002934700","https://openalex.org/W2020213725","https://openalex.org/W2037017056","https://openalex.org/W2049867480","https://openalex.org/W2098456636","https://openalex.org/W2113864883","https://openalex.org/W2115675703","https://openalex.org/W2116818527","https://openalex.org/W2121084350","https://openalex.org/W2128128820","https://openalex.org/W2134633067","https://openalex.org/W2135531618","https://openalex.org/W2135841285","https://openalex.org/W2140839850","https://openalex.org/W2153315398","https://openalex.org/W2156858199","https://openalex.org/W4238083723","https://openalex.org/W4239813889","https://openalex.org/W4249902158","https://openalex.org/W6606430823","https://openalex.org/W6619192471","https://openalex.org/W6647398271"],"related_works":["https://openalex.org/W2036000779","https://openalex.org/W2161969548","https://openalex.org/W2112669344","https://openalex.org/W116913286","https://openalex.org/W4244016640","https://openalex.org/W3008325674","https://openalex.org/W1141223778","https://openalex.org/W1539844444","https://openalex.org/W2045218056","https://openalex.org/W1616591788"],"abstract_inverted_index":{"Mutation-based":[0],"fuzzing":[1,65],"is":[2,32,115,139],"a":[3,28,100,238],"popular":[4,208],"and":[5,14,49,80,89,203],"widely":[6],"employed":[7],"black-box":[8,192],"testing":[9,52],"technique":[10],"for":[11,46,103,110,122,214],"finding":[12],"security":[13,51],"robustness":[15,111],"bugs":[16],"in":[17,160,174,199],"software.":[18],"It":[19],"owes":[20],"much":[21],"of":[22,54,63,70,76,92,106,148,170,225,240],"its":[23,26],"success":[24],"to":[25,38,136,164,190,230],"simplicity;":[27],"well-formed":[29,134],"seed":[30,93],"input":[31,59,127,157],"mutated,":[33],"e.g.":[34],"through":[35],"random":[36],"bit-flipping,":[37],"produce":[39,165],"test":[40,108,167],"inputs.":[41,94],"While":[42],"reducing":[43],"the":[44,61,68,81,90,118,137,145,156,161,175,184,197],"need":[45],"human":[47],"effort,":[48],"enabling":[50,187],"even":[53,121],"closed-source":[55,123],"programs":[56,124],"with":[57,125],"undocumented":[58],"formats,":[60,128],"simplicity":[62],"mutation-based":[64,233],"comes":[66],"at":[67,183],"cost":[69],"poor":[71],"code":[72,147,220],"coverage.":[73],"Often":[74],"millions":[75],"iterations":[77],"are":[78,83],"needed,":[79],"results":[82],"highly":[84],"dependent":[85],"on":[86,117,206],"configuration":[87],"parameters":[88],"choice":[91],"In":[95],"this":[96],"paper":[97],"we":[98,152],"propose":[99],"novel":[101],"method":[102,114,180,198,218],"automated":[104],"generation":[105],"high-coverage":[107,166],"cases":[109],"testing.":[112],"Our":[113,179],"based":[116],"observation":[119],"that,":[120,213],"proprietary":[126],"an":[129],"implementation":[130],"that":[131],"can":[132],"generate":[133],"inputs":[135],"program":[138,146,163,176],"typically":[140],"available.":[141],"By":[142],"systematically":[143],"mutating":[144],"such":[149],"generating":[150,162],"programs,":[151,216],"leverage":[153],"information":[154],"about":[155],"format":[158],"encoded":[159],"inputs,":[168],"capable":[169],"reaching":[171],"deep":[172],"states":[173],"under":[177],"test.":[178],"works":[181],"entirely":[182],"machine-code":[185],"level,":[186],"use-cases":[188],"similar":[189],"traditional":[191],"fuzzing.":[193],"We":[194,211,235],"have":[195],"implemented":[196],"our":[200,217],"tool":[201],"MutaGen,":[202],"evaluated":[204],"it":[205],"7":[207],"Linux":[209],"programs.":[210],"found":[212,237],"most":[215],"improves":[219],"coverage":[221],"by":[222],"one":[223],"order":[224],"magnitude":[226],"or":[227],"more,":[228],"compared":[229],"two":[231],"well-known":[232],"fuzzers.":[234],"also":[236],"total":[239],"8":[241],"unique":[242],"bugs.":[243]},"counts_by_year":[{"year":2026,"cited_by_count":1},{"year":2025,"cited_by_count":2},{"year":2024,"cited_by_count":5},{"year":2023,"cited_by_count":4},{"year":2022,"cited_by_count":6},{"year":2021,"cited_by_count":3},{"year":2020,"cited_by_count":5},{"year":2019,"cited_by_count":14},{"year":2018,"cited_by_count":16},{"year":2017,"cited_by_count":4},{"year":2016,"cited_by_count":1}],"updated_date":"2026-07-15T18:14:33.161393","created_date":"2025-10-10T00:00:00"}