{"id":"https://openalex.org/W4285490479","doi":"https://doi.org/10.1145/3533767.3534226","title":"PrIntFuzz: fuzzing Linux drivers via automated virtual device simulation","display_name":"PrIntFuzz: fuzzing Linux drivers via automated virtual device simulation","publication_year":2022,"publication_date":"2022-07-15","ids":{"openalex":"https://openalex.org/W4285490479","doi":"https://doi.org/10.1145/3533767.3534226"},"language":"en","primary_location":{"id":"doi:10.1145/3533767.3534226","is_oa":true,"landing_page_url":"https://doi.org/10.1145/3533767.3534226","pdf_url":"https://dl.acm.org/doi/pdf/10.1145/3533767.3534226","source":null,"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the 31st ACM SIGSOFT International Symposium on Software Testing and Analysis","raw_type":"proceedings-article"},"type":"article","indexed_in":["crossref"],"open_access":{"is_oa":true,"oa_status":"gold","oa_url":"https://dl.acm.org/doi/pdf/10.1145/3533767.3534226","any_repository_has_fulltext":true},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5051740371","display_name":"Zheyu Ma","orcid":"https://orcid.org/0000-0002-0710-326X"},"institutions":[{"id":"https://openalex.org/I99065089","display_name":"Tsinghua University","ror":"https://ror.org/03cve4549","country_code":"CN","type":"education","lineage":["https://openalex.org/I99065089"]}],"countries":["CN"],"is_corresponding":true,"raw_author_name":"Zheyu Ma","raw_affiliation_strings":["Tsinghua University, China / Beijing National Research Center for Information Science and Technology, China"],"affiliations":[{"raw_affiliation_string":"Tsinghua University, China / Beijing National Research Center for Information Science and Technology, China","institution_ids":["https://openalex.org/I99065089"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5086231224","display_name":"Bodong Zhao","orcid":"https://orcid.org/0000-0003-4443-3708"},"institutions":[{"id":"https://openalex.org/I99065089","display_name":"Tsinghua University","ror":"https://ror.org/03cve4549","country_code":"CN","type":"education","lineage":["https://openalex.org/I99065089"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Bodong Zhao","raw_affiliation_strings":["Tsinghua University, China / Beijing National Research Center for Information Science and Technology, China"],"affiliations":[{"raw_affiliation_string":"Tsinghua University, China / Beijing National Research Center for Information Science and Technology, China","institution_ids":["https://openalex.org/I99065089"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5039719428","display_name":"Letu Ren","orcid":null},"institutions":[{"id":"https://openalex.org/I99065089","display_name":"Tsinghua University","ror":"https://ror.org/03cve4549","country_code":"CN","type":"education","lineage":["https://openalex.org/I99065089"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Letu Ren","raw_affiliation_strings":["Tsinghua University, China / Beijing National Research Center for Information Science and Technology, China"],"affiliations":[{"raw_affiliation_string":"Tsinghua University, China / Beijing National Research Center for Information Science and Technology, China","institution_ids":["https://openalex.org/I99065089"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5011243960","display_name":"Zheming Li","orcid":"https://orcid.org/0000-0003-3996-6331"},"institutions":[{"id":"https://openalex.org/I99065089","display_name":"Tsinghua University","ror":"https://ror.org/03cve4549","country_code":"CN","type":"education","lineage":["https://openalex.org/I99065089"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Zheming Li","raw_affiliation_strings":["Tsinghua University, China / Beijing National Research Center for Information Science and Technology, China"],"affiliations":[{"raw_affiliation_string":"Tsinghua University, China / Beijing National Research Center for Information Science and Technology, China","institution_ids":["https://openalex.org/I99065089"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5016972157","display_name":"Siqi Ma","orcid":"https://orcid.org/0000-0003-3479-5713"},"institutions":[{"id":"https://openalex.org/I31746571","display_name":"UNSW Sydney","ror":"https://ror.org/03r8z3t63","country_code":"AU","type":"education","lineage":["https://openalex.org/I31746571"]}],"countries":["AU"],"is_corresponding":false,"raw_author_name":"Siqi Ma","raw_affiliation_strings":["UNSW, Australia"],"affiliations":[{"raw_affiliation_string":"UNSW, Australia","institution_ids":["https://openalex.org/I31746571"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5100400376","display_name":"Xiapu Luo","orcid":"https://orcid.org/0000-0002-9082-3208"},"institutions":[{"id":"https://openalex.org/I14243506","display_name":"Hong Kong Polytechnic University","ror":"https://ror.org/0030zas98","country_code":"HK","type":"education","lineage":["https://openalex.org/I14243506"]}],"countries":["HK"],"is_corresponding":false,"raw_author_name":"Xiapu Luo","raw_affiliation_strings":["Hong Kong Polytechnic University, China"],"affiliations":[{"raw_affiliation_string":"Hong Kong Polytechnic University, China","institution_ids":["https://openalex.org/I14243506"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5100460120","display_name":"Chao Zhang","orcid":"https://orcid.org/0000-0001-9881-5643"},"institutions":[{"id":"https://openalex.org/I99065089","display_name":"Tsinghua University","ror":"https://ror.org/03cve4549","country_code":"CN","type":"education","lineage":["https://openalex.org/I99065089"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Chao Zhang","raw_affiliation_strings":["Tsinghua University, China / Beijing National Research Center for Information Science and Technology, China"],"affiliations":[{"raw_affiliation_string":"Tsinghua University, China / Beijing National Research Center for Information Science and Technology, China","institution_ids":["https://openalex.org/I99065089"]}]}],"institutions":[],"countries_distinct_count":3,"institutions_distinct_count":7,"corresponding_author_ids":["https://openalex.org/A5051740371"],"corresponding_institution_ids":["https://openalex.org/I99065089"],"apc_list":null,"apc_paid":null,"fwci":3.1266,"has_fulltext":true,"cited_by_count":23,"citation_normalized_percentile":{"value":0.92264733,"is_in_top_1_percent":false,"is_in_top_10_percent":true},"cited_by_percentile_year":{"min":98,"max":99},"biblio":{"volume":null,"issue":null,"first_page":"404","last_page":"416"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":0.9997000098228455,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":0.9997000098228455,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11424","display_name":"Security and Verification in Computing","score":0.9995999932289124,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10743","display_name":"Software Testing and Debugging Techniques","score":0.9961000084877014,"subfield":{"id":"https://openalex.org/subfields/1712","display_name":"Software"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/fuzz-testing","display_name":"Fuzz testing","score":0.9279022216796875},{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.8096222281455994},{"id":"https://openalex.org/keywords/operating-system","display_name":"Operating system","score":0.7329596877098083},{"id":"https://openalex.org/keywords/linux-kernel","display_name":"Linux kernel","score":0.5988112688064575},{"id":"https://openalex.org/keywords/interrupt","display_name":"Interrupt","score":0.5626118779182434},{"id":"https://openalex.org/keywords/emulation","display_name":"Emulation","score":0.54609215259552},{"id":"https://openalex.org/keywords/embedded-system","display_name":"Embedded system","score":0.5297380685806274},{"id":"https://openalex.org/keywords/attack-surface","display_name":"Attack surface","score":0.5124149918556213},{"id":"https://openalex.org/keywords/virtual-machine","display_name":"Virtual machine","score":0.4535823464393616},{"id":"https://openalex.org/keywords/code","display_name":"Code (set theory)","score":0.4199164807796478},{"id":"https://openalex.org/keywords/software","display_name":"Software","score":0.19026502966880798},{"id":"https://openalex.org/keywords/programming-language","display_name":"Programming language","score":0.15720784664154053}],"concepts":[{"id":"https://openalex.org/C111065885","wikidata":"https://www.wikidata.org/wiki/Q1189053","display_name":"Fuzz testing","level":3,"score":0.9279022216796875},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.8096222281455994},{"id":"https://openalex.org/C111919701","wikidata":"https://www.wikidata.org/wiki/Q9135","display_name":"Operating system","level":1,"score":0.7329596877098083},{"id":"https://openalex.org/C553261973","wikidata":"https://www.wikidata.org/wiki/Q14579","display_name":"Linux kernel","level":2,"score":0.5988112688064575},{"id":"https://openalex.org/C41661131","wikidata":"https://www.wikidata.org/wiki/Q220764","display_name":"Interrupt","level":3,"score":0.5626118779182434},{"id":"https://openalex.org/C149810388","wikidata":"https://www.wikidata.org/wiki/Q5374873","display_name":"Emulation","level":2,"score":0.54609215259552},{"id":"https://openalex.org/C149635348","wikidata":"https://www.wikidata.org/wiki/Q193040","display_name":"Embedded system","level":1,"score":0.5297380685806274},{"id":"https://openalex.org/C2776576444","wikidata":"https://www.wikidata.org/wiki/Q303569","display_name":"Attack surface","level":2,"score":0.5124149918556213},{"id":"https://openalex.org/C25344961","wikidata":"https://www.wikidata.org/wiki/Q192726","display_name":"Virtual machine","level":2,"score":0.4535823464393616},{"id":"https://openalex.org/C2776760102","wikidata":"https://www.wikidata.org/wiki/Q5139990","display_name":"Code (set theory)","level":3,"score":0.4199164807796478},{"id":"https://openalex.org/C2777904410","wikidata":"https://www.wikidata.org/wiki/Q7397","display_name":"Software","level":2,"score":0.19026502966880798},{"id":"https://openalex.org/C199360897","wikidata":"https://www.wikidata.org/wiki/Q9143","display_name":"Programming language","level":1,"score":0.15720784664154053},{"id":"https://openalex.org/C173018170","wikidata":"https://www.wikidata.org/wiki/Q165678","display_name":"Microcontroller","level":2,"score":0.0},{"id":"https://openalex.org/C162324750","wikidata":"https://www.wikidata.org/wiki/Q8134","display_name":"Economics","level":0,"score":0.0},{"id":"https://openalex.org/C50522688","wikidata":"https://www.wikidata.org/wiki/Q189833","display_name":"Economic growth","level":1,"score":0.0},{"id":"https://openalex.org/C177264268","wikidata":"https://www.wikidata.org/wiki/Q1514741","display_name":"Set (abstract data type)","level":2,"score":0.0}],"mesh":[],"locations_count":2,"locations":[{"id":"doi:10.1145/3533767.3534226","is_oa":true,"landing_page_url":"https://doi.org/10.1145/3533767.3534226","pdf_url":"https://dl.acm.org/doi/pdf/10.1145/3533767.3534226","source":null,"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the 31st ACM SIGSOFT International Symposium on Software Testing and Analysis","raw_type":"proceedings-article"},{"id":"pmh:oai:ira.lib.polyu.edu.hk:10397/99835","is_oa":true,"landing_page_url":"http://hdl.handle.net/10397/99835","pdf_url":"http://ira.lib.polyu.edu.hk/bitstream/10397/99835/1/3533767.3534226.pdf","source":{"id":"https://openalex.org/S4306400205","display_name":"PolyU Institutional Research Archive (Hong Kong Polytechnic University)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I14243506","host_organization_name":"Hong Kong Polytechnic University","host_organization_lineage":["https://openalex.org/I14243506"],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"Conference Paper"}],"best_oa_location":{"id":"doi:10.1145/3533767.3534226","is_oa":true,"landing_page_url":"https://doi.org/10.1145/3533767.3534226","pdf_url":"https://dl.acm.org/doi/pdf/10.1145/3533767.3534226","source":null,"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the 31st ACM SIGSOFT International Symposium on Software Testing and Analysis","raw_type":"proceedings-article"},"sustainable_development_goals":[{"score":0.5600000023841858,"id":"https://metadata.un.org/sdg/16","display_name":"Peace, Justice and strong institutions"}],"awards":[{"id":"https://openalex.org/G1121271761","display_name":null,"funder_award_id":"Program","funder_id":"https://openalex.org/F4320321001","funder_display_name":"National Natural Science Foundation of China"},{"id":"https://openalex.org/G1231421488","display_name":null,"funder_award_id":"under","funder_id":"https://openalex.org/F4320321001","funder_display_name":"National Natural Science Foundation of China"},{"id":"https://openalex.org/G2087396116","display_name":null,"funder_award_id":"China","funder_id":"https://openalex.org/F4320321001","funder_display_name":"National Natural Science Foundation of China"},{"id":"https://openalex.org/G3317480652","display_name":null,"funder_award_id":"Science","funder_id":"https://openalex.org/F4320321001","funder_display_name":"National Natural Science Foundation of China"},{"id":"https://openalex.org/G37568934","display_name":null,"funder_award_id":"Grant","funder_id":"https://openalex.org/F4320321001","funder_display_name":"National Natural Science Foundation of China"},{"id":"https://openalex.org/G4020255992","display_name":null,"funder_award_id":"Project","funder_id":"https://openalex.org/F4320321001","funder_display_name":"National Natural Science Foundation of China"},{"id":"https://openalex.org/G5777954143","display_name":null,"funder_award_id":"61972224","funder_id":"https://openalex.org/F4320321001","funder_display_name":"National Natural Science Foundation of China"},{"id":"https://openalex.org/G5939423041","display_name":null,"funder_award_id":"Technology","funder_id":"https://openalex.org/F4320321001","funder_display_name":"National Natural Science Foundation of China"},{"id":"https://openalex.org/G5994120800","display_name":null,"funder_award_id":"Natural","funder_id":"https://openalex.org/F4320321001","funder_display_name":"National Natural Science Foundation of China"},{"id":"https://openalex.org/G7422924211","display_name":null,"funder_award_id":"BNR2022RC01006","funder_id":"https://openalex.org/F4320329777","funder_display_name":"Beijing National Research Center For Information Science And Technology"}],"funders":[{"id":"https://openalex.org/F4320321001","display_name":"National Natural Science Foundation of China","ror":"https://ror.org/01h0zpd94"},{"id":"https://openalex.org/F4320322598","display_name":"Hong Kong Polytechnic University","ror":"https://ror.org/0030zas98"},{"id":"https://openalex.org/F4320329777","display_name":"Beijing National Research Center For Information Science And Technology","ror":null}],"has_content":{"pdf":true,"grobid_xml":true},"content_urls":{"pdf":"https://content.openalex.org/works/W4285490479.pdf","grobid_xml":"https://content.openalex.org/works/W4285490479.grobid-xml"},"referenced_works_count":15,"referenced_works":["https://openalex.org/W2751862727","https://openalex.org/W2765435026","https://openalex.org/W2766711930","https://openalex.org/W2991920445","https://openalex.org/W3046265170","https://openalex.org/W3096174798","https://openalex.org/W3149912232","https://openalex.org/W3155065762","https://openalex.org/W3206697238","https://openalex.org/W3207016455","https://openalex.org/W3211018769","https://openalex.org/W3213068522","https://openalex.org/W4213424096","https://openalex.org/W4243908662","https://openalex.org/W4289038676"],"related_works":["https://openalex.org/W3006186133","https://openalex.org/W2377849006","https://openalex.org/W2924291353","https://openalex.org/W3113028789","https://openalex.org/W2966992680","https://openalex.org/W2364479399","https://openalex.org/W4288057707","https://openalex.org/W2355444914","https://openalex.org/W2367316900","https://openalex.org/W4399336006"],"abstract_inverted_index":{"Linux":[0,26,189,205,226],"drivers":[1,27],"share":[2],"the":[3,10,13,38,55,59,80,85,96,109,138,176,188,212,224,229],"same":[4],"address":[5],"space":[6],"and":[7,22,32,62,73,88,102,115,125,148,171,192],"privilege":[8],"with":[9],"core":[11],"of":[12,54,146,204],"kernel":[14,190],"but":[15],"have":[16,33,142,181,195],"a":[17,51,113,132,144,201],"much":[18],"larger":[19],"code":[20,61,87],"base":[21],"attack":[23],"surface.":[24],"The":[25],"are":[28],"not":[29],"well":[30],"tested":[31],"weaker":[34],"security":[35],"guarantees":[36],"than":[37],"kernel.":[39],"Missing":[40],"support":[41],"from":[42,95],"hardware":[43,122],"devices,":[44,157,163,170],"existing":[45],"fuzzing":[46,75,134],"solutions":[47],"fail":[48],"to":[49,111,136,187],"cover":[50],"large":[52],"portion":[53],"driver":[56,82,97],"code,":[57,83],"e.g.,":[58],"initialization":[60],"interrupt":[63],"handlers.":[64,90],"In":[65,200],"this":[66],"paper,":[67],"we":[68],"present":[69],"PrIntFuzz,":[70],"an":[71],"efficient":[72,116],"universal":[74],"framework":[76],"that":[77],"can":[78],"test":[79],"overlooked":[81,139],"including":[84],"PRobing":[86],"INTerrupt":[89],"PrIntFuzz":[91,130,147,207,218],"first":[92],"extracts":[93],"knowledge":[94],"through":[98],"inter-procedural":[99],"field-sensitive,":[100],"path-sensitive,":[101],"flow-sensitive":[103],"static":[104],"analysis.":[105],"Then":[106],"it":[107],"utilizes":[108],"information":[110],"build":[112],"flexible":[114],"simulator,":[117],"which":[118],"supports":[119],"device":[120,126,178],"probing,":[121],"interrupts":[123],"emulation":[124],"I/O":[127],"interception.":[128],"Lastly,":[129],"applies":[131],"multi-dimension":[133],"strategy":[135],"explore":[137],"code.":[140],"We":[141,180],"developed":[143],"prototype":[145],"successfully":[149],"simulated":[150],"311":[151],"virtual":[152,159,165],"PCI":[153],"(Peripheral":[154],"Component":[155],"Interconnect)":[156],"472":[158],"I2C":[160],"(Inter-Integrated":[161],"Circuit)":[162],"169":[164],"USB":[166],"(Universal":[167],"Serial":[168],"Bus)":[169],"found":[172,208,216],"150":[173],"bugs":[174,186],"in":[175],"corresponding":[177],"drivers.":[179],"submitted":[182],"patches":[183,194],"for":[184],"these":[185],"community,":[191],"59":[193],"been":[196],"merged":[197],"so":[198],"far.":[199],"control":[202],"experiment":[203],"5.10-rc6,":[206],"99":[209],"bugs,":[210],"while":[211,228],"state-of-the-art":[213,230],"fuzzer":[214,231],"only":[215,233],"50.":[217],"covers":[219,234],"11,968":[220],"basic":[221,236],"blocks":[222],"on":[223],"latest":[225],"kernel,":[227],"Syzkaller":[232],"2,353":[235],"blocks.":[237]},"counts_by_year":[{"year":2026,"cited_by_count":2},{"year":2025,"cited_by_count":10},{"year":2024,"cited_by_count":5},{"year":2023,"cited_by_count":6}],"updated_date":"2026-04-18T07:56:08.524223","created_date":"2025-10-10T00:00:00"}