{"id":"https://openalex.org/W2989201839","doi":"https://doi.org/10.1145/3338502.3359762","title":"Exploring Effective Fuzzing Strategies to Analyze Communication Protocols","display_name":"Exploring Effective Fuzzing Strategies to Analyze Communication Protocols","publication_year":2019,"publication_date":"2019-11-08","ids":{"openalex":"https://openalex.org/W2989201839","doi":"https://doi.org/10.1145/3338502.3359762","mag":"2989201839"},"language":"en","primary_location":{"id":"doi:10.1145/3338502.3359762","is_oa":false,"landing_page_url":"https://doi.org/10.1145/3338502.3359762","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the 3rd ACM Workshop on Forming an Ecosystem Around Software Transformation","raw_type":"proceedings-article"},"type":"article","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5100652862","display_name":"Yurong Chen","orcid":null},"institutions":[{"id":"https://openalex.org/I193531525","display_name":"George Washington University","ror":"https://ror.org/00y4zzh67","country_code":"US","type":"education","lineage":["https://openalex.org/I193531525"]}],"countries":["US"],"is_corresponding":true,"raw_author_name":"Yurong Chen","raw_affiliation_strings":["George Washington University, Washington, DC, USA"],"affiliations":[{"raw_affiliation_string":"George Washington University, Washington, DC, USA","institution_ids":["https://openalex.org/I193531525"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5018464968","display_name":"Tian Lan","orcid":"https://orcid.org/0000-0003-3010-8090"},"institutions":[{"id":"https://openalex.org/I193531525","display_name":"George Washington University","ror":"https://ror.org/00y4zzh67","country_code":"US","type":"education","lineage":["https://openalex.org/I193531525"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Tian lan","raw_affiliation_strings":["George Washington University, Washington, DC, USA"],"affiliations":[{"raw_affiliation_string":"George Washington University, Washington, DC, USA","institution_ids":["https://openalex.org/I193531525"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5045879054","display_name":"Guru Venkataramani","orcid":"https://orcid.org/0000-0002-7084-7560"},"institutions":[{"id":"https://openalex.org/I193531525","display_name":"George Washington University","ror":"https://ror.org/00y4zzh67","country_code":"US","type":"education","lineage":["https://openalex.org/I193531525"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Guru Venkataramani","raw_affiliation_strings":["George Washington University, Washington, DC, USA"],"affiliations":[{"raw_affiliation_string":"George Washington University, Washington, DC, USA","institution_ids":["https://openalex.org/I193531525"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":3,"corresponding_author_ids":["https://openalex.org/A5100652862"],"corresponding_institution_ids":["https://openalex.org/I193531525"],"apc_list":null,"apc_paid":null,"fwci":2.8784,"has_fulltext":false,"cited_by_count":22,"citation_normalized_percentile":{"value":0.91048706,"is_in_top_1_percent":false,"is_in_top_10_percent":true},"cited_by_percentile_year":{"min":95,"max":98},"biblio":{"volume":null,"issue":null,"first_page":"17","last_page":"23"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10743","display_name":"Software Testing and Debugging Techniques","score":0.9998999834060669,"subfield":{"id":"https://openalex.org/subfields/1712","display_name":"Software"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T10743","display_name":"Software Testing and Debugging Techniques","score":0.9998999834060669,"subfield":{"id":"https://openalex.org/subfields/1712","display_name":"Software"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":0.9994000196456909,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T12423","display_name":"Software Reliability and Analysis Research","score":0.9937999844551086,"subfield":{"id":"https://openalex.org/subfields/1712","display_name":"Software"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/fuzz-testing","display_name":"Fuzz testing","score":0.9920676946640015},{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.8215315341949463},{"id":"https://openalex.org/keywords/stateful-firewall","display_name":"Stateful firewall","score":0.8022732734680176},{"id":"https://openalex.org/keywords/protocol","display_name":"Protocol (science)","score":0.6264494061470032},{"id":"https://openalex.org/keywords/handshake","display_name":"Handshake","score":0.5756238698959351},{"id":"https://openalex.org/keywords/network-packet","display_name":"Network packet","score":0.4933294355869293},{"id":"https://openalex.org/keywords/communications-protocol","display_name":"Communications protocol","score":0.4826508164405823},{"id":"https://openalex.org/keywords/code","display_name":"Code (set theory)","score":0.4114300012588501},{"id":"https://openalex.org/keywords/computer-network","display_name":"Computer network","score":0.3973369598388672},{"id":"https://openalex.org/keywords/programming-language","display_name":"Programming language","score":0.2212820053100586},{"id":"https://openalex.org/keywords/software","display_name":"Software","score":0.16779795289039612}],"concepts":[{"id":"https://openalex.org/C111065885","wikidata":"https://www.wikidata.org/wiki/Q1189053","display_name":"Fuzz testing","level":3,"score":0.9920676946640015},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.8215315341949463},{"id":"https://openalex.org/C22927095","wikidata":"https://www.wikidata.org/wiki/Q1784206","display_name":"Stateful firewall","level":3,"score":0.8022732734680176},{"id":"https://openalex.org/C2780385302","wikidata":"https://www.wikidata.org/wiki/Q367158","display_name":"Protocol (science)","level":3,"score":0.6264494061470032},{"id":"https://openalex.org/C2778000800","wikidata":"https://www.wikidata.org/wiki/Q830043","display_name":"Handshake","level":3,"score":0.5756238698959351},{"id":"https://openalex.org/C158379750","wikidata":"https://www.wikidata.org/wiki/Q214111","display_name":"Network packet","level":2,"score":0.4933294355869293},{"id":"https://openalex.org/C12269588","wikidata":"https://www.wikidata.org/wiki/Q132364","display_name":"Communications protocol","level":2,"score":0.4826508164405823},{"id":"https://openalex.org/C2776760102","wikidata":"https://www.wikidata.org/wiki/Q5139990","display_name":"Code (set theory)","level":3,"score":0.4114300012588501},{"id":"https://openalex.org/C31258907","wikidata":"https://www.wikidata.org/wiki/Q1301371","display_name":"Computer network","level":1,"score":0.3973369598388672},{"id":"https://openalex.org/C199360897","wikidata":"https://www.wikidata.org/wiki/Q9143","display_name":"Programming language","level":1,"score":0.2212820053100586},{"id":"https://openalex.org/C2777904410","wikidata":"https://www.wikidata.org/wiki/Q7397","display_name":"Software","level":2,"score":0.16779795289039612},{"id":"https://openalex.org/C204787440","wikidata":"https://www.wikidata.org/wiki/Q188504","display_name":"Alternative medicine","level":2,"score":0.0},{"id":"https://openalex.org/C177264268","wikidata":"https://www.wikidata.org/wiki/Q1514741","display_name":"Set (abstract data type)","level":2,"score":0.0},{"id":"https://openalex.org/C142724271","wikidata":"https://www.wikidata.org/wiki/Q7208","display_name":"Pathology","level":1,"score":0.0},{"id":"https://openalex.org/C151319957","wikidata":"https://www.wikidata.org/wiki/Q752739","display_name":"Asynchronous communication","level":2,"score":0.0},{"id":"https://openalex.org/C71924100","wikidata":"https://www.wikidata.org/wiki/Q11190","display_name":"Medicine","level":0,"score":0.0}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1145/3338502.3359762","is_oa":false,"landing_page_url":"https://doi.org/10.1145/3338502.3359762","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the 3rd ACM Workshop on Forming an Ecosystem Around Software Transformation","raw_type":"proceedings-article"}],"best_oa_location":null,"sustainable_development_goals":[{"score":0.46000000834465027,"display_name":"Peace, Justice and strong institutions","id":"https://metadata.un.org/sdg/16"}],"awards":[],"funders":[],"has_content":{"grobid_xml":false,"pdf":false},"content_urls":null,"referenced_works_count":29,"referenced_works":["https://openalex.org/W1522250664","https://openalex.org/W1546956568","https://openalex.org/W1710734607","https://openalex.org/W1769343819","https://openalex.org/W2053597677","https://openalex.org/W2141175718","https://openalex.org/W2295974667","https://openalex.org/W2490096331","https://openalex.org/W2535617737","https://openalex.org/W2574017551","https://openalex.org/W2583649498","https://openalex.org/W2584230735","https://openalex.org/W2611422138","https://openalex.org/W2750625138","https://openalex.org/W2752929869","https://openalex.org/W2766494751","https://openalex.org/W2766540688","https://openalex.org/W2766647240","https://openalex.org/W2773441963","https://openalex.org/W2777430404","https://openalex.org/W2794670092","https://openalex.org/W2795192879","https://openalex.org/W2806157698","https://openalex.org/W2808279976","https://openalex.org/W2888617017","https://openalex.org/W2897338212","https://openalex.org/W2964097210","https://openalex.org/W3104446232","https://openalex.org/W4290048282"],"related_works":["https://openalex.org/W2511770387","https://openalex.org/W2129975948","https://openalex.org/W2591875911","https://openalex.org/W2736754676","https://openalex.org/W4287833485","https://openalex.org/W4401906987","https://openalex.org/W4401907763","https://openalex.org/W4387191767","https://openalex.org/W4385412215","https://openalex.org/W3194450632"],"abstract_inverted_index":{"In":[0,38,72,88],"recent":[1],"years,":[2],"coverage-based":[3],"greybox":[4,86],"fuzzing":[5,27,35,59,99,161],"has":[6],"become":[7],"popular":[8],"forvulnerability":[9],"detection":[10],"due":[11,28],"to":[12,25,29,90,104,109,125],"its":[13],"simplicity":[14],"and":[15,79,127,154],"efficiency.":[16],"However,":[17],"it":[18],"is":[19],"less":[20],"powerful":[21],"when":[22,158],"applied":[23],"directly":[24],"protocol":[26,98,111,135,167],"the":[30,40,62,81,106,162],"unique":[31,156],"challenges":[32,78],"involved":[33],"in":[34],"communication":[36,41,102],"protocols.":[37],"particular,":[39],"among":[42],"multiple":[43],"ends":[44],"contains":[45,115],"more":[46,151],"than":[47],"one":[48],"packet,":[49],"which":[50],"are":[51],"not":[52],"necessarily":[53],"dependent":[54],"upon":[55],"each":[56],"other,":[57],"i.e.,":[58],"single":[60],"(usually":[61],"first)":[63],"packet":[64,164],"can":[65],"only":[66],"achieve":[67,91],"extremely":[68],"limited":[69],"code":[70,93,107,152],"coverage.":[71],"this":[73],"paper,":[74],"we":[75,95],"study":[76],"such":[77],"demonstrate":[80],"limitation":[82],"of":[83,132,149],"current":[84],"non-stateful":[85],"fuzzer.":[87],"order":[89],"higher":[92],"coverage,":[94],"design":[96],"stateful":[97],"strategies":[100],"for":[101],"protocols":[103],"explore":[105],"related":[108],"different":[110,130],"states.":[112],"Our":[113,137],"approach":[114,145],"a":[116,122,166],"state":[117],"switching":[118],"engine,":[119],"together":[120],"with":[121],"multi-state":[123],"forkserver":[124],"consistently":[126],"flexibly":[128],"fuzz":[129],"states":[131],"an":[133,147],"compiler-instrumented":[134],"program.":[136],"experimental":[138],"results":[139],"on":[140],"OpenSSL":[141],"show":[142],"that":[143],"our":[144],"achieves":[146],"improvement":[148],"73%":[150],"coverage":[153],"2x":[155],"crashes":[157],"comparing":[159],"against":[160],"first":[163],"during":[165],"handshake.":[168]},"counts_by_year":[{"year":2025,"cited_by_count":2},{"year":2024,"cited_by_count":6},{"year":2023,"cited_by_count":5},{"year":2022,"cited_by_count":3},{"year":2021,"cited_by_count":3},{"year":2020,"cited_by_count":3}],"updated_date":"2025-11-06T03:46:38.306776","created_date":"2025-10-10T00:00:00"}