{"id":"https://openalex.org/W4220806723","doi":"https://doi.org/10.1145/3510003.3510208","title":"\u03bcAFL","display_name":"\u03bcAFL","publication_year":2022,"publication_date":"2022-05-21","ids":{"openalex":"https://openalex.org/W4220806723","doi":"https://doi.org/10.1145/3510003.3510208"},"language":"en","primary_location":{"id":"doi:10.1145/3510003.3510208","is_oa":true,"landing_page_url":"https://doi.org/10.1145/3510003.3510208","pdf_url":"https://dl.acm.org/doi/pdf/10.1145/3510003.3510208","source":{"id":"https://openalex.org/S4363608872","display_name":"Proceedings of the 44th International Conference on Software Engineering","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":null,"host_organization_name":null,"host_organization_lineage":[],"host_organization_lineage_names":[],"type":"conference"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the 44th International Conference on Software Engineering","raw_type":"proceedings-article"},"type":"conference-paper","indexed_in":["arxiv","crossref"],"open_access":{"is_oa":true,"oa_status":"bronze","oa_url":"https://dl.acm.org/doi/pdf/10.1145/3510003.3510208","any_repository_has_fulltext":true},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5100363908","display_name":"Wenqiang Li","orcid":"https://orcid.org/0000-0002-9592-4454"},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Wenqiang Li","raw_affiliation_strings":["UCAS, Beijing, China"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"UCAS, Beijing, China","institution_ids":[]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5051515898","display_name":"Jiameng Shi","orcid":null},"institutions":[{"id":"https://openalex.org/I165733156","display_name":"University of Georgia","ror":"https://ror.org/00te3t702","country_code":"US","type":"education","lineage":["https://openalex.org/I165733156"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Jiameng Shi","raw_affiliation_strings":["the University of Georgia"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"the University of Georgia","institution_ids":["https://openalex.org/I165733156"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5014556254","display_name":"Fengjun Li","orcid":"https://orcid.org/0000-0003-4079-2228"},"institutions":[{"id":"https://openalex.org/I146416000","display_name":"University of Kansas","ror":"https://ror.org/001tmjg57","country_code":"US","type":"education","lineage":["https://openalex.org/I146416000"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Fengjun Li","raw_affiliation_strings":["the University of Kansas"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"the University of Kansas","institution_ids":["https://openalex.org/I146416000"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5036002145","display_name":"Jingqiang Lin","orcid":"https://orcid.org/0000-0003-1508-4879"},"institutions":[{"id":"https://openalex.org/I126520041","display_name":"University of Science and Technology of China","ror":"https://ror.org/04c4dkn09","country_code":"CN","type":"education","lineage":["https://openalex.org/I126520041","https://openalex.org/I19820366"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Jingqiang Lin","raw_affiliation_strings":["University of Science and Technology of China, Hefei, Anhui, China"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"University of Science and Technology of China, Hefei, Anhui, China","institution_ids":["https://openalex.org/I126520041"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5116337743","display_name":"Wei Wang","orcid":"https://orcid.org/0000-0002-2411-7399"},"institutions":[{"id":"https://openalex.org/I19820366","display_name":"Chinese Academy of Sciences","ror":"https://ror.org/034t30j35","country_code":"CN","type":"government","lineage":["https://openalex.org/I19820366"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Wei Wang","raw_affiliation_strings":["Chinese Academy of Sciences, Beijing, China"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Chinese Academy of Sciences, Beijing, China","institution_ids":["https://openalex.org/I19820366"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5057991555","display_name":"Le Guan","orcid":"https://orcid.org/0000-0002-8205-5616"},"institutions":[{"id":"https://openalex.org/I165733156","display_name":"University of Georgia","ror":"https://ror.org/00te3t702","country_code":"US","type":"education","lineage":["https://openalex.org/I165733156"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Le Guan","raw_affiliation_strings":["the University of Georgia"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"the University of Georgia","institution_ids":["https://openalex.org/I165733156"]}]}],"institutions":[],"countries_distinct_count":2,"institutions_distinct_count":4,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":null,"has_fulltext":true,"cited_by_count":29,"citation_normalized_percentile":null,"cited_by_percentile_year":null,"biblio":{"volume":null,"issue":null,"first_page":"1","last_page":"12"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10743","display_name":"Software Testing and Debugging Techniques","score":0.9994999766349792,"subfield":{"id":"https://openalex.org/subfields/1712","display_name":"Software"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T10743","display_name":"Software Testing and Debugging Techniques","score":0.9994999766349792,"subfield":{"id":"https://openalex.org/subfields/1712","display_name":"Software"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11005","display_name":"Radiation Effects in Electronics","score":0.9991999864578247,"subfield":{"id":"https://openalex.org/subfields/2208","display_name":"Electrical and Electronic Engineering"},"field":{"id":"https://openalex.org/fields/22","display_name":"Engineering"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11032","display_name":"VLSI and Analog Circuit Testing","score":0.9969000220298767,"subfield":{"id":"https://openalex.org/subfields/1708","display_name":"Hardware and Architecture"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/fuzz-testing","display_name":"Fuzz testing","score":0.8980782628059387},{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.8604977130889893},{"id":"https://openalex.org/keywords/firmware","display_name":"Firmware","score":0.8414946794509888},{"id":"https://openalex.org/keywords/debugging","display_name":"Debugging","score":0.6422497034072876},{"id":"https://openalex.org/keywords/embedded-system","display_name":"Embedded system","score":0.5654386281967163},{"id":"https://openalex.org/keywords/microcontroller","display_name":"Microcontroller","score":0.5180611610412598},{"id":"https://openalex.org/keywords/block","display_name":"Block (permutation group theory)","score":0.4887218475341797},{"id":"https://openalex.org/keywords/operating-system","display_name":"Operating system","score":0.466291606426239},{"id":"https://openalex.org/keywords/code","display_name":"Code (set theory)","score":0.42444297671318054},{"id":"https://openalex.org/keywords/software","display_name":"Software","score":0.3740910589694977},{"id":"https://openalex.org/keywords/computer-hardware","display_name":"Computer hardware","score":0.3225020170211792},{"id":"https://openalex.org/keywords/programming-language","display_name":"Programming language","score":0.2418106198310852}],"concepts":[{"id":"https://openalex.org/C111065885","wikidata":"https://www.wikidata.org/wiki/Q1189053","display_name":"Fuzz testing","level":3,"score":0.8980782628059387},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.8604977130889893},{"id":"https://openalex.org/C67212190","wikidata":"https://www.wikidata.org/wiki/Q104851","display_name":"Firmware","level":2,"score":0.8414946794509888},{"id":"https://openalex.org/C168065819","wikidata":"https://www.wikidata.org/wiki/Q845566","display_name":"Debugging","level":2,"score":0.6422497034072876},{"id":"https://openalex.org/C149635348","wikidata":"https://www.wikidata.org/wiki/Q193040","display_name":"Embedded system","level":1,"score":0.5654386281967163},{"id":"https://openalex.org/C173018170","wikidata":"https://www.wikidata.org/wiki/Q165678","display_name":"Microcontroller","level":2,"score":0.5180611610412598},{"id":"https://openalex.org/C2777210771","wikidata":"https://www.wikidata.org/wiki/Q4927124","display_name":"Block (permutation group theory)","level":2,"score":0.4887218475341797},{"id":"https://openalex.org/C111919701","wikidata":"https://www.wikidata.org/wiki/Q9135","display_name":"Operating system","level":1,"score":0.466291606426239},{"id":"https://openalex.org/C2776760102","wikidata":"https://www.wikidata.org/wiki/Q5139990","display_name":"Code (set theory)","level":3,"score":0.42444297671318054},{"id":"https://openalex.org/C2777904410","wikidata":"https://www.wikidata.org/wiki/Q7397","display_name":"Software","level":2,"score":0.3740910589694977},{"id":"https://openalex.org/C9390403","wikidata":"https://www.wikidata.org/wiki/Q3966","display_name":"Computer hardware","level":1,"score":0.3225020170211792},{"id":"https://openalex.org/C199360897","wikidata":"https://www.wikidata.org/wiki/Q9143","display_name":"Programming language","level":1,"score":0.2418106198310852},{"id":"https://openalex.org/C177264268","wikidata":"https://www.wikidata.org/wiki/Q1514741","display_name":"Set (abstract data type)","level":2,"score":0.0},{"id":"https://openalex.org/C33923547","wikidata":"https://www.wikidata.org/wiki/Q395","display_name":"Mathematics","level":0,"score":0.0},{"id":"https://openalex.org/C2524010","wikidata":"https://www.wikidata.org/wiki/Q8087","display_name":"Geometry","level":1,"score":0.0}],"mesh":[],"locations_count":2,"locations":[{"id":"doi:10.1145/3510003.3510208","is_oa":true,"landing_page_url":"https://doi.org/10.1145/3510003.3510208","pdf_url":"https://dl.acm.org/doi/pdf/10.1145/3510003.3510208","source":{"id":"https://openalex.org/S4363608872","display_name":"Proceedings of the 44th International Conference on Software Engineering","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":null,"host_organization_name":null,"host_organization_lineage":[],"host_organization_lineage_names":[],"type":"conference"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the 44th International Conference on Software Engineering","raw_type":"proceedings-article"},{"id":"pmh:oai:arXiv.org:2202.03013","is_oa":true,"landing_page_url":"http://arxiv.org/abs/2202.03013","pdf_url":"https://arxiv.org/pdf/2202.03013","source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":null,"issn":null,"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"text"}],"best_oa_location":{"id":"doi:10.1145/3510003.3510208","is_oa":true,"landing_page_url":"https://doi.org/10.1145/3510003.3510208","pdf_url":"https://dl.acm.org/doi/pdf/10.1145/3510003.3510208","source":{"id":"https://openalex.org/S4363608872","display_name":"Proceedings of the 44th International Conference on Software Engineering","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":null,"host_organization_name":null,"host_organization_lineage":[],"host_organization_lineage_names":[],"type":"conference"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the 44th International Conference on Software Engineering","raw_type":"proceedings-article"},"sustainable_development_goals":[{"score":0.5,"display_name":"Industry, innovation and infrastructure","id":"https://metadata.un.org/sdg/9"}],"awards":[{"id":"https://openalex.org/G8216956235","display_name":"SCH: INT: Collaborative Research: Privacy-Preserving Federated Transfer Learning for Early Acute Kidney Injury Risk Prediction","funder_award_id":"2014552","funder_id":"https://openalex.org/F4320306076","funder_display_name":"National Science Foundation"}],"funders":[{"id":"https://openalex.org/F4320306076","display_name":"National Science Foundation","ror":"https://ror.org/021nxhr62"},{"id":"https://openalex.org/F4320310010","display_name":"University of Georgia","ror":"https://ror.org/00te3t702"},{"id":"https://openalex.org/F4320318547","display_name":"Baidu","ror":"https://ror.org/03vs3wt56"},{"id":"https://openalex.org/F4320333321","display_name":"University of Georgia Research Foundation","ror":null}],"has_content":{"pdf":true,"grobid_xml":true},"content_urls":{"pdf":"https://content.openalex.org/works/W4220806723.pdf","grobid_xml":"https://content.openalex.org/works/W4220806723.grobid-xml"},"referenced_works_count":11,"referenced_works":["https://openalex.org/W2039069948","https://openalex.org/W2043118292","https://openalex.org/W2146280225","https://openalex.org/W2606014062","https://openalex.org/W2734941459","https://openalex.org/W2753873057","https://openalex.org/W2884769489","https://openalex.org/W2960121311","https://openalex.org/W3103269073","https://openalex.org/W3113108440","https://openalex.org/W4230613728"],"related_works":["https://openalex.org/W2511770387","https://openalex.org/W3120811337","https://openalex.org/W2766647240","https://openalex.org/W4385301282","https://openalex.org/W2990186179","https://openalex.org/W4378373752","https://openalex.org/W1973637778","https://openalex.org/W1535498519","https://openalex.org/W3176369637","https://openalex.org/W1028914837"],"abstract_inverted_index":{"Fuzzing":[0],"is":[1,127],"one":[2],"of":[3,146,191,224,233,246],"the":[4,37,72,77,81,84,88,103,112,117,120,123,136,151,156,165,178,182,217,222,231,243],"most":[5],"effective":[6],"approaches":[7],"to":[8,15,35,50,63,75,119,134,186],"finding":[9],"software":[10],"flaws.":[11],"However,":[12,122],"applying":[13],"it":[14],"microcontroller":[16,52,89],"firmware":[17,86],"incurs":[18],"many":[19],"challenges.":[20],"For":[21],"example,":[22],"rehosting-based":[23],"solutions":[24],"cannot":[25,32],"accurately":[26],"model":[27],"peripheral":[28],"behaviors":[29],"and":[30,83,115,129,206,226],"thus":[31],"be":[33],"used":[34],"fuzz":[36],"corresponding":[38],"driver":[39,218],"code.":[40],"In":[41],"this":[42],"work,":[43],"we":[44,70,180,211],"present":[45],"\u03bcAFL,":[46],"a":[47],"hardware-in-the-loop":[48],"approach":[49],"fuzzing":[51,67,78],"firmware.":[53],"It":[54],"leverages":[55],"debugging":[56,107],"tools":[57],"in":[58,216,230,249],"existing":[59],"embedded":[60],"system":[61],"development":[62],"construct":[64],"an":[65,143],"AFL-compatible":[66],"framework.":[68],"Specifically,":[69],"use":[71,181],"debug":[73],"dongle":[74],"bridge":[76],"environment":[79],"on":[80,87,102,164,196],"PC":[82],"target":[85],"device.":[90],"To":[91,175],"collect":[92,188],"code":[93,98,147,219],"coverage":[94],"information":[95,190],"without":[96,169],"costly":[97],"instrumentation,":[99],"\u03bcAFL":[100,195],"relies":[101],"ARM":[104],"ETM":[105,125,167],"hardware":[106,184],"feature,":[108],"which":[109,149],"transparently":[110],"collects":[111],"instruction":[113,138],"trace":[114],"streams":[116],"results":[118,253],"PC.":[121],"raw":[124,166],"data":[126,168],"obscure":[128],"needs":[130],"enormous":[131],"computing":[132],"resources":[133],"recover":[135],"actual":[137],"flow.":[139],"We":[140,193],"therefore":[141],"propose":[142],"alternative":[144],"representation":[145],"coverage,":[148],"retains":[150],"same":[152],"path":[153],"sensitivity":[154],"as":[155],"original":[157],"AFL":[158],"algorithm,":[159],"but":[160],"can":[161],"directly":[162],"work":[163],"matching":[170],"them":[171],"with":[172,221],"disassembled":[173],"instructions.":[174],"further":[176],"reduce":[177],"workload,":[179],"DWT":[183],"feature":[185],"selectively":[187],"runtime":[189],"interest.":[192],"evaluated":[194],"two":[197,202],"real":[198,250],"evaluation":[199],"boards":[200],"from":[201],"major":[203],"vendors:":[204],"NXP":[205],"STMicroelectronics.":[207],"With":[208],"our":[209,252],"prototype,":[210],"discovered":[212],"ten":[213],"zero-day":[214,228],"bugs":[215,229],"shipped":[220],"SDK":[223,232],"STMicroelectronics":[225],"three":[227],"NXP.":[234],"Eight":[235],"CVEs":[236],"have":[237],"been":[238],"allocated":[239],"for":[240],"them.":[241],"Considering":[242],"wide":[244],"adoption":[245],"vendor":[247],"SDKs":[248],"products,":[251],"are":[254],"alarming.":[255]},"counts_by_year":[{"year":2026,"cited_by_count":2},{"year":2025,"cited_by_count":12},{"year":2024,"cited_by_count":8},{"year":2023,"cited_by_count":6},{"year":2022,"cited_by_count":1}],"updated_date":"2026-07-14T23:27:15.235271","created_date":"2022-04-03T00:00:00"}