{"id":"https://openalex.org/W2885332751","doi":"https://doi.org/10.1145/3230833.3230867","title":"Speeding Up Bug Finding using Focused Fuzzing","display_name":"Speeding Up Bug Finding using Focused Fuzzing","publication_year":2018,"publication_date":"2018-08-13","ids":{"openalex":"https://openalex.org/W2885332751","doi":"https://doi.org/10.1145/3230833.3230867","mag":"2885332751"},"language":"en","primary_location":{"id":"doi:10.1145/3230833.3230867","is_oa":false,"landing_page_url":"https://doi.org/10.1145/3230833.3230867","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the 13th International Conference on Availability, Reliability and Security","raw_type":"proceedings-article"},"type":"conference-paper","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5082932780","display_name":"Ulf Karg\u00e9n","orcid":"https://orcid.org/0000-0002-3009-4314"},"institutions":[{"id":"https://openalex.org/I102134673","display_name":"Link\u00f6ping University","ror":"https://ror.org/05ynxx418","country_code":"SE","type":"education","lineage":["https://openalex.org/I102134673"]}],"countries":["SE"],"is_corresponding":false,"raw_author_name":"Ulf Karg\u00e9n","raw_affiliation_strings":["Department of Computer and Information Science, Link\u00f6ping University, Link\u00f6ping, Sweden"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Department of Computer and Information Science, Link\u00f6ping University, Link\u00f6ping, Sweden","institution_ids":["https://openalex.org/I102134673"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5048152442","display_name":"Nahid Shahmehri","orcid":"https://orcid.org/0000-0002-0920-2157"},"institutions":[{"id":"https://openalex.org/I102134673","display_name":"Link\u00f6ping University","ror":"https://ror.org/05ynxx418","country_code":"SE","type":"education","lineage":["https://openalex.org/I102134673"]}],"countries":["SE"],"is_corresponding":false,"raw_author_name":"Nahid Shahmehri","raw_affiliation_strings":["Department of Computer and Information Science, Link\u00f6ping University, Link\u00f6ping, Sweden"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Department of Computer and Information Science, Link\u00f6ping University, Link\u00f6ping, Sweden","institution_ids":["https://openalex.org/I102134673"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":1,"corresponding_author_ids":[],"corresponding_institution_ids":["https://openalex.org/I102134673"],"apc_list":null,"apc_paid":null,"fwci":null,"has_fulltext":false,"cited_by_count":5,"citation_normalized_percentile":null,"cited_by_percentile_year":null,"biblio":{"volume":"9","issue":null,"first_page":"1","last_page":"10"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10743","display_name":"Software Testing and Debugging Techniques","score":0.9998999834060669,"subfield":{"id":"https://openalex.org/subfields/1712","display_name":"Software"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T10743","display_name":"Software Testing and Debugging Techniques","score":0.9998999834060669,"subfield":{"id":"https://openalex.org/subfields/1712","display_name":"Software"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":0.9983000159263611,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10260","display_name":"Software Engineering Research","score":0.9954000115394592,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/fuzz-testing","display_name":"Fuzz testing","score":0.9924526214599609},{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.8805904388427734},{"id":"https://openalex.org/keywords/byte","display_name":"Byte","score":0.7213927507400513},{"id":"https://openalex.org/keywords/software-bug","display_name":"Software bug","score":0.5585165023803711},{"id":"https://openalex.org/keywords/code-coverage","display_name":"Code coverage","score":0.5178025960922241},{"id":"https://openalex.org/keywords/code","display_name":"Code (set theory)","score":0.4737868010997772},{"id":"https://openalex.org/keywords/taint-checking","display_name":"Taint checking","score":0.4698174297809601},{"id":"https://openalex.org/keywords/overhead","display_name":"Overhead (engineering)","score":0.4681672751903534},{"id":"https://openalex.org/keywords/set","display_name":"Set (abstract data type)","score":0.46620973944664},{"id":"https://openalex.org/keywords/software","display_name":"Software","score":0.44514602422714233},{"id":"https://openalex.org/keywords/scalability","display_name":"Scalability","score":0.4131522476673126},{"id":"https://openalex.org/keywords/programming-language","display_name":"Programming language","score":0.38364943861961365},{"id":"https://openalex.org/keywords/operating-system","display_name":"Operating system","score":0.315557599067688}],"concepts":[{"id":"https://openalex.org/C111065885","wikidata":"https://www.wikidata.org/wiki/Q1189053","display_name":"Fuzz testing","level":3,"score":0.9924526214599609},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.8805904388427734},{"id":"https://openalex.org/C43364308","wikidata":"https://www.wikidata.org/wiki/Q8799","display_name":"Byte","level":2,"score":0.7213927507400513},{"id":"https://openalex.org/C1009929","wikidata":"https://www.wikidata.org/wiki/Q179550","display_name":"Software bug","level":3,"score":0.5585165023803711},{"id":"https://openalex.org/C53942775","wikidata":"https://www.wikidata.org/wiki/Q1211721","display_name":"Code coverage","level":3,"score":0.5178025960922241},{"id":"https://openalex.org/C2776760102","wikidata":"https://www.wikidata.org/wiki/Q5139990","display_name":"Code (set theory)","level":3,"score":0.4737868010997772},{"id":"https://openalex.org/C63116202","wikidata":"https://www.wikidata.org/wiki/Q7676227","display_name":"Taint checking","level":3,"score":0.4698174297809601},{"id":"https://openalex.org/C2779960059","wikidata":"https://www.wikidata.org/wiki/Q7113681","display_name":"Overhead (engineering)","level":2,"score":0.4681672751903534},{"id":"https://openalex.org/C177264268","wikidata":"https://www.wikidata.org/wiki/Q1514741","display_name":"Set (abstract data type)","level":2,"score":0.46620973944664},{"id":"https://openalex.org/C2777904410","wikidata":"https://www.wikidata.org/wiki/Q7397","display_name":"Software","level":2,"score":0.44514602422714233},{"id":"https://openalex.org/C48044578","wikidata":"https://www.wikidata.org/wiki/Q727490","display_name":"Scalability","level":2,"score":0.4131522476673126},{"id":"https://openalex.org/C199360897","wikidata":"https://www.wikidata.org/wiki/Q9143","display_name":"Programming language","level":1,"score":0.38364943861961365},{"id":"https://openalex.org/C111919701","wikidata":"https://www.wikidata.org/wiki/Q9135","display_name":"Operating system","level":1,"score":0.315557599067688}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1145/3230833.3230867","is_oa":false,"landing_page_url":"https://doi.org/10.1145/3230833.3230867","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the 13th International Conference on Availability, Reliability and Security","raw_type":"proceedings-article"}],"best_oa_location":null,"sustainable_development_goals":[],"awards":[],"funders":[],"has_content":{"pdf":false,"grobid_xml":false},"content_urls":null,"referenced_works_count":39,"referenced_works":["https://openalex.org/W157156687","https://openalex.org/W614438062","https://openalex.org/W1507845365","https://openalex.org/W1531203382","https://openalex.org/W1546956568","https://openalex.org/W1604599558","https://openalex.org/W1710734607","https://openalex.org/W1976878954","https://openalex.org/W1984248430","https://openalex.org/W1988524530","https://openalex.org/W2002934700","https://openalex.org/W2020213725","https://openalex.org/W2027718224","https://openalex.org/W2053597677","https://openalex.org/W2098456636","https://openalex.org/W2102970979","https://openalex.org/W2108747667","https://openalex.org/W2113864883","https://openalex.org/W2126762719","https://openalex.org/W2128128820","https://openalex.org/W2128985333","https://openalex.org/W2132196970","https://openalex.org/W2134633067","https://openalex.org/W2153315398","https://openalex.org/W2350778671","https://openalex.org/W2519952770","https://openalex.org/W2535617737","https://openalex.org/W2574017551","https://openalex.org/W2583649498","https://openalex.org/W2613534458","https://openalex.org/W2701225458","https://openalex.org/W2741068848","https://openalex.org/W2766540688","https://openalex.org/W2914209329","https://openalex.org/W4231040899","https://openalex.org/W4238083723","https://openalex.org/W4239813889","https://openalex.org/W4245421994","https://openalex.org/W4249902158"],"related_works":["https://openalex.org/W4282010060","https://openalex.org/W4225847901","https://openalex.org/W2179304688","https://openalex.org/W4381785649","https://openalex.org/W4226494072","https://openalex.org/W175863638","https://openalex.org/W4283736421","https://openalex.org/W4287849816","https://openalex.org/W2384504389","https://openalex.org/W2760842181"],"abstract_inverted_index":{"Greybox":[0],"fuzzing":[1,69,84,126,143,161,233,251],"has":[2,26,72],"recently":[3],"emerged":[4],"as":[5,151,162],"a":[6,46,74,88,96,163,209,224],"scalable":[7],"and":[8,45,111,168,188,238],"practical":[9,164],"approach":[10,101],"to":[11,52,65,92,183,197,219,223,257],"finding":[12,117],"security":[13],"bugs":[14],"in":[15,31,37],"software.":[16],"For":[17],"example,":[18],"AFL":[19,51,60,139],"---the":[20],"current":[21],"state-of-the-art":[22],"greybox":[23],"fuzzer":[24],"---":[25],"found":[27],"hundreds":[28],"of":[29,41,77,90,95,107,116,180,186,202,227,236],"vulnerabilities":[30],"popular":[32],"software":[33],"since":[34],"its":[35],"release":[36],"2013.":[38],"The":[39],"combination":[40],"lightweight":[42],"coverage":[43,182],"instrumentation":[44],"simple":[47],"evolutionary":[48],"algorithm":[49],"allows":[50,102],"quickly":[53],"generate":[54],"inputs":[55],"that":[56,133,172,205,249],"exercise":[57],"new":[58],"code.":[59],"also":[61,121],"obviates":[62],"the":[63,108,114,125,178,200],"need":[64],"manually":[66],"set":[67,89,201],"adhoc":[68],"ratios,":[70],"which":[71],"been":[73],"major":[75],"limitation":[76],"classical":[78],"black-box":[79],"fuzzers.":[80],"Instead,":[81],"AFL's":[82],"first":[83],"pass":[85],"exhaustively":[86],"applies":[87],"mutations":[91,222],"every":[93],"byte":[94],"program":[97,203],"input.":[98],"While":[99],"this":[100,156],"for":[103,128,142,170],"more":[104],"thorough":[105],"exploration":[106],"input":[109,144,174,211,228],"space,":[110],"therefore":[112],"improves":[113,253],"chances":[115],"complex":[118],"bugs,":[119],"it":[120,240],"drastically":[122],"slows":[123],"down":[124],"progress":[127],"\"heavyweight\"":[129],"programs,":[130],"or":[131],"programs":[132],"take":[134],"large":[135,147],"inputs.":[136],"This":[137,213],"makes":[138],"less":[140],"suitable":[141],"formats":[145],"with":[146],"size":[148],"overhead,":[149],"such":[150],"various":[152],"document":[153],"formats.":[154],"In":[155],"paper,":[157],"we":[158],"propose":[159],"focused":[160,232,250],"trade-off":[165],"between":[166],"thoroughness":[167],"speed,":[169],"fuzzers":[171],"employ":[173],"mutation.":[175],"We":[176,230],"extend":[177],"notion":[179],"code":[181],"individual":[184],"bytes":[185],"input,":[187],"show":[189],"how":[190],"forward":[191],"dynamic":[192],"slicing":[193],"can":[194,215],"be":[195,217],"used":[196,218],"efficiently":[198],"determine":[199],"instructions":[204],"are":[206],"affected":[207],"by":[208],"particular":[210],"byte.":[212],"information":[214],"then":[216],"restrict":[220],"expensive":[221],"small":[225],"subset":[226],"bytes.":[229],"implement":[231],"on":[234,241],"top":[235],"AFL,":[237],"evaluate":[239],"four":[242],"\"real-life\"":[243],"Linux":[244],"programs.":[245],"Our":[246],"evaluation":[247],"shows":[248],"noticeably":[252],"bug":[254],"discovery,":[255],"compared":[256],"vanilla":[258],"AFL.":[259]},"counts_by_year":[{"year":2025,"cited_by_count":1},{"year":2024,"cited_by_count":1},{"year":2022,"cited_by_count":1},{"year":2021,"cited_by_count":1},{"year":2019,"cited_by_count":1}],"updated_date":"2026-07-15T18:14:33.161393","created_date":"2025-10-10T00:00:00"}