{"id":"https://openalex.org/W2985495886","doi":"https://doi.org/10.1145/3319535.3363230","title":"Learning to Fuzz from Symbolic Execution with Application to Smart Contracts","display_name":"Learning to Fuzz from Symbolic Execution with Application to Smart Contracts","publication_year":2019,"publication_date":"2019-11-06","ids":{"openalex":"https://openalex.org/W2985495886","doi":"https://doi.org/10.1145/3319535.3363230","mag":"2985495886"},"language":"en","primary_location":{"id":"doi:10.1145/3319535.3363230","is_oa":false,"landing_page_url":"https://doi.org/10.1145/3319535.3363230","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the 2019 ACM SIGSAC Conference on Computer and Communications Security","raw_type":"proceedings-article"},"type":"conference-paper","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5101532408","display_name":"Jingxuan He","orcid":"https://orcid.org/0009-0003-9858-5640"},"institutions":[{"id":"https://openalex.org/I35440088","display_name":"ETH Zurich","ror":"https://ror.org/05a28rw58","country_code":"CH","type":"education","lineage":["https://openalex.org/I2799323385","https://openalex.org/I35440088"]}],"countries":["CH"],"is_corresponding":false,"raw_author_name":"Jingxuan He","raw_affiliation_strings":["ETH Zurich, Zurich, Switzerland"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"ETH Zurich, Zurich, Switzerland","institution_ids":["https://openalex.org/I35440088"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5018338894","display_name":"Mislav Balunovi\u0107","orcid":"https://orcid.org/0000-0002-7024-7688"},"institutions":[{"id":"https://openalex.org/I35440088","display_name":"ETH Zurich","ror":"https://ror.org/05a28rw58","country_code":"CH","type":"education","lineage":["https://openalex.org/I2799323385","https://openalex.org/I35440088"]}],"countries":["CH"],"is_corresponding":false,"raw_author_name":"Mislav Balunovi\u0107","raw_affiliation_strings":["ETH Zurich, Zurich, Switzerland"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"ETH Zurich, Zurich, Switzerland","institution_ids":["https://openalex.org/I35440088"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5036822779","display_name":"Nodar Ambroladze","orcid":null},"institutions":[{"id":"https://openalex.org/I35440088","display_name":"ETH Zurich","ror":"https://ror.org/05a28rw58","country_code":"CH","type":"education","lineage":["https://openalex.org/I2799323385","https://openalex.org/I35440088"]}],"countries":["CH"],"is_corresponding":false,"raw_author_name":"Nodar Ambroladze","raw_affiliation_strings":["ETH Zurich, Zurich, Switzerland"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"ETH Zurich, Zurich, Switzerland","institution_ids":["https://openalex.org/I35440088"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5073801126","display_name":"Petar Tsankov","orcid":null},"institutions":[{"id":"https://openalex.org/I35440088","display_name":"ETH Zurich","ror":"https://ror.org/05a28rw58","country_code":"CH","type":"education","lineage":["https://openalex.org/I2799323385","https://openalex.org/I35440088"]}],"countries":["CH"],"is_corresponding":false,"raw_author_name":"Petar Tsankov","raw_affiliation_strings":["ETH Zurich, Zurich, Switzerland"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"ETH Zurich, Zurich, Switzerland","institution_ids":["https://openalex.org/I35440088"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5069901599","display_name":"Martin Vechev","orcid":"https://orcid.org/0000-0002-0054-9568"},"institutions":[{"id":"https://openalex.org/I35440088","display_name":"ETH Zurich","ror":"https://ror.org/05a28rw58","country_code":"CH","type":"education","lineage":["https://openalex.org/I2799323385","https://openalex.org/I35440088"]}],"countries":["CH"],"is_corresponding":false,"raw_author_name":"Martin Vechev","raw_affiliation_strings":["ETH Zurich, Zurich, Switzerland"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"ETH Zurich, Zurich, Switzerland","institution_ids":["https://openalex.org/I35440088"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":1,"corresponding_author_ids":[],"corresponding_institution_ids":["https://openalex.org/I35440088"],"apc_list":null,"apc_paid":null,"fwci":null,"has_fulltext":false,"cited_by_count":267,"citation_normalized_percentile":null,"cited_by_percentile_year":null,"biblio":{"volume":null,"issue":null,"first_page":"531","last_page":"548"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":0.9991000294685364,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":0.9991000294685364,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":0.9987999796867371,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10743","display_name":"Software Testing and Debugging Techniques","score":0.996999979019165,"subfield":{"id":"https://openalex.org/subfields/1712","display_name":"Software"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/fuzz-testing","display_name":"Fuzz testing","score":0.9897701144218445},{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.8894057273864746},{"id":"https://openalex.org/keywords/symbolic-execution","display_name":"Symbolic execution","score":0.671936571598053},{"id":"https://openalex.org/keywords/scalability","display_name":"Scalability","score":0.5775509476661682},{"id":"https://openalex.org/keywords/task","display_name":"Task (project management)","score":0.459684818983078},{"id":"https://openalex.org/keywords/artificial-intelligence","display_name":"Artificial intelligence","score":0.45887625217437744},{"id":"https://openalex.org/keywords/imitation","display_name":"Imitation","score":0.44249558448791504},{"id":"https://openalex.org/keywords/machine-learning","display_name":"Machine learning","score":0.37638604640960693},{"id":"https://openalex.org/keywords/software","display_name":"Software","score":0.3380777835845947},{"id":"https://openalex.org/keywords/programming-language","display_name":"Programming language","score":0.3217473328113556},{"id":"https://openalex.org/keywords/operating-system","display_name":"Operating system","score":0.1291489601135254}],"concepts":[{"id":"https://openalex.org/C111065885","wikidata":"https://www.wikidata.org/wiki/Q1189053","display_name":"Fuzz testing","level":3,"score":0.9897701144218445},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.8894057273864746},{"id":"https://openalex.org/C2779639559","wikidata":"https://www.wikidata.org/wiki/Q7661178","display_name":"Symbolic execution","level":3,"score":0.671936571598053},{"id":"https://openalex.org/C48044578","wikidata":"https://www.wikidata.org/wiki/Q727490","display_name":"Scalability","level":2,"score":0.5775509476661682},{"id":"https://openalex.org/C2780451532","wikidata":"https://www.wikidata.org/wiki/Q759676","display_name":"Task (project management)","level":2,"score":0.459684818983078},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.45887625217437744},{"id":"https://openalex.org/C126388530","wikidata":"https://www.wikidata.org/wiki/Q1131737","display_name":"Imitation","level":2,"score":0.44249558448791504},{"id":"https://openalex.org/C119857082","wikidata":"https://www.wikidata.org/wiki/Q2539","display_name":"Machine learning","level":1,"score":0.37638604640960693},{"id":"https://openalex.org/C2777904410","wikidata":"https://www.wikidata.org/wiki/Q7397","display_name":"Software","level":2,"score":0.3380777835845947},{"id":"https://openalex.org/C199360897","wikidata":"https://www.wikidata.org/wiki/Q9143","display_name":"Programming language","level":1,"score":0.3217473328113556},{"id":"https://openalex.org/C111919701","wikidata":"https://www.wikidata.org/wiki/Q9135","display_name":"Operating system","level":1,"score":0.1291489601135254},{"id":"https://openalex.org/C162324750","wikidata":"https://www.wikidata.org/wiki/Q8134","display_name":"Economics","level":0,"score":0.0},{"id":"https://openalex.org/C15744967","wikidata":"https://www.wikidata.org/wiki/Q9418","display_name":"Psychology","level":0,"score":0.0},{"id":"https://openalex.org/C77805123","wikidata":"https://www.wikidata.org/wiki/Q161272","display_name":"Social psychology","level":1,"score":0.0},{"id":"https://openalex.org/C187736073","wikidata":"https://www.wikidata.org/wiki/Q2920921","display_name":"Management","level":1,"score":0.0}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1145/3319535.3363230","is_oa":false,"landing_page_url":"https://doi.org/10.1145/3319535.3363230","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the 2019 ACM SIGSAC Conference on Computer and Communications Security","raw_type":"proceedings-article"}],"best_oa_location":null,"sustainable_development_goals":[{"display_name":"Peace, Justice and strong institutions","id":"https://metadata.un.org/sdg/16","score":0.5799999833106995}],"awards":[],"funders":[],"has_content":{"grobid_xml":false,"pdf":false},"content_urls":null,"referenced_works_count":66,"referenced_works":["https://openalex.org/W157156687","https://openalex.org/W646354405","https://openalex.org/W1412775481","https://openalex.org/W1531203382","https://openalex.org/W1710734607","https://openalex.org/W2009489720","https://openalex.org/W2048417351","https://openalex.org/W2065948900","https://openalex.org/W2081468517","https://openalex.org/W2098456636","https://openalex.org/W2132897303","https://openalex.org/W2134491302","https://openalex.org/W2144112223","https://openalex.org/W2167224731","https://openalex.org/W2170737051","https://openalex.org/W2257979135","https://openalex.org/W2499791918","https://openalex.org/W2514578992","https://openalex.org/W2519887557","https://openalex.org/W2535617737","https://openalex.org/W2538848838","https://openalex.org/W2539190473","https://openalex.org/W2551437525","https://openalex.org/W2574017551","https://openalex.org/W2583649498","https://openalex.org/W2613534458","https://openalex.org/W2632775315","https://openalex.org/W2701225458","https://openalex.org/W2734713605","https://openalex.org/W2741068848","https://openalex.org/W2769609281","https://openalex.org/W2778144710","https://openalex.org/W2790202156","https://openalex.org/W2795192879","https://openalex.org/W2805052744","https://openalex.org/W2808279976","https://openalex.org/W2846896781","https://openalex.org/W2883065350","https://openalex.org/W2884243532","https://openalex.org/W2885034081","https://openalex.org/W2888787871","https://openalex.org/W2888875512","https://openalex.org/W2888928288","https://openalex.org/W2890313205","https://openalex.org/W2891160484","https://openalex.org/W2891688103","https://openalex.org/W2892187814","https://openalex.org/W2898569715","https://openalex.org/W2898656313","https://openalex.org/W2902373132","https://openalex.org/W2908007588","https://openalex.org/W2914452207","https://openalex.org/W2914982603","https://openalex.org/W2950133940","https://openalex.org/W2962957031","https://openalex.org/W2963499994","https://openalex.org/W2963610883","https://openalex.org/W2964091827","https://openalex.org/W2964097210","https://openalex.org/W2964144608","https://openalex.org/W2997653900","https://openalex.org/W3016155638","https://openalex.org/W3140949594","https://openalex.org/W3151748982","https://openalex.org/W4232485878","https://openalex.org/W4238083723"],"related_works":["https://openalex.org/W2785720764","https://openalex.org/W2801797726","https://openalex.org/W2186070848","https://openalex.org/W4285245977","https://openalex.org/W3203826058","https://openalex.org/W2780750120","https://openalex.org/W3104446232","https://openalex.org/W2914996832","https://openalex.org/W4385965400","https://openalex.org/W2768829148"],"abstract_inverted_index":{"Fuzzing":[0,12],"and":[1,15,36,58,144,161,194,203],"symbolic":[2,62,78,204],"execution":[3,31,79,205],"are":[4],"two":[5],"complementary":[6],"techniques":[7],"for":[8,207],"discovering":[9],"software":[10],"vulnerabilities.":[11],"is":[13,32,106,146,173,177],"fast":[14,59],"scalable,":[16],"but":[17,34],"can":[18,115],"be":[19,117],"ineffective":[20],"when":[21],"it":[22,176,185,196],"fails":[23],"to":[24,41,54,119,127],"randomly":[25],"select":[26],"the":[27,66,70,109,128],"right":[28],"inputs.":[29],"Symbolic":[30],"thorough":[33],"slow":[35],"often":[37,138],"does":[38],"not":[39],"scale":[40],"deep":[42],"program":[43],"paths":[44],"with":[45,99],"complex":[46],"path":[47],"conditions.":[48],"In":[49],"this":[50],"work,":[51],"we":[52],"propose":[53],"learn":[55],"an":[56,152,162],"effective":[57],"fuzzer":[60],"from":[61],"execution,":[63],"by":[64],"phrasing":[65],"learning":[67],"task":[68],"in":[69],"framework":[71],"of":[72,85,92,103,130,147],"imitation":[73],"learning.":[74],"During":[75],"learning,":[76],"a":[77,82,95,100,134],"expert":[80],"generates":[81],"large":[83],"number":[84],"quality":[86],"inputs":[87],"improving":[88],"coverage":[89],"on":[90,108],"thousands":[91],"programs.":[93,122],"Then,":[94],"fuzzing":[96,131,202],"policy,":[97],"represented":[98],"suitable":[101],"architecture":[102],"neural":[104],"networks,":[105],"trained":[107],"generated":[110],"dataset.":[111],"The":[112],"learned":[113],"policy":[114],"then":[116],"used":[118],"fuzz":[120],"new":[121],"We":[123,150],"instantiate":[124],"our":[125],"approach":[126],"problem":[129],"smart":[132],"contracts,":[133],"domain":[135],"where":[136],"contracts":[137],"implement":[139],"similar":[140],"functionality":[141],"(facilitating":[142],"learning)":[143],"security":[145],"utmost":[148],"importance.":[149],"present":[151],"end-to-end":[153],"system,":[154],"ILF":[155,172],"(for":[156],"Imitation":[157],"Learning":[158],"based":[159],"Fuzzer),":[160],"extensive":[163],"evaluation":[164],"over":[165],">18K":[166],"contracts.":[167],"Our":[168],"results":[169],"show":[170],"that":[171],"effective:":[174],"(i)":[175],"fast,":[178],"generating":[179],"148":[180],"transactions":[181],"per":[182],"second,":[183],"(ii)":[184],"outperforms":[186],"existing":[187,201],"fuzzers":[188],"(e.g.,":[189],"achieving":[190],"33%":[191],"more":[192,198],"coverage),":[193],"(iii)":[195],"detects":[197],"vulnerabilities":[199],"than":[200],"tools":[206],"Ethereum.":[208]},"counts_by_year":[{"year":2026,"cited_by_count":11},{"year":2025,"cited_by_count":48},{"year":2024,"cited_by_count":52},{"year":2023,"cited_by_count":57},{"year":2022,"cited_by_count":39},{"year":2021,"cited_by_count":39},{"year":2020,"cited_by_count":21}],"updated_date":"2026-07-14T23:27:15.235271","created_date":"2025-10-10T00:00:00"}