{"id":"https://openalex.org/W4308462374","doi":"https://doi.org/10.1145/3548606.3559367","title":"SFuzz","display_name":"SFuzz","publication_year":2022,"publication_date":"2022-11-07","ids":{"openalex":"https://openalex.org/W4308462374","doi":"https://doi.org/10.1145/3548606.3559367"},"language":"en","primary_location":{"id":"doi:10.1145/3548606.3559367","is_oa":false,"landing_page_url":"https://doi.org/10.1145/3548606.3559367","pdf_url":null,"source":{"id":"https://openalex.org/S4363608815","display_name":"Proceedings of the 2022 ACM SIGSAC Conference on Computer and Communications Security","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":null,"host_organization_name":null,"host_organization_lineage":[],"host_organization_lineage_names":[],"type":"conference"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the 2022 ACM SIGSAC Conference on Computer and Communications Security","raw_type":"proceedings-article"},"type":"conference-paper","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5100621400","display_name":"Libo Chen","orcid":"https://orcid.org/0000-0003-3236-4805"},"institutions":[{"id":"https://openalex.org/I154099455","display_name":"Shandong University","ror":"https://ror.org/0207yh398","country_code":"CN","type":"education","lineage":["https://openalex.org/I154099455"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Libo Chen","raw_affiliation_strings":["Shandong University, SJTU, Qingdao, China"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Shandong University, SJTU, Qingdao, China","institution_ids":["https://openalex.org/I154099455"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5059175638","display_name":"Quanpu Cai","orcid":"https://orcid.org/0000-0002-5139-6100"},"institutions":[{"id":"https://openalex.org/I45928872","display_name":"Alibaba Group (China)","ror":"https://ror.org/00k642b80","country_code":"CN","type":"company","lineage":["https://openalex.org/I45928872"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Quanpu Cai","raw_affiliation_strings":["SJTU, Alibaba Group, Shanghai, China"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"SJTU, Alibaba Group, Shanghai, China","institution_ids":["https://openalex.org/I45928872"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5100961236","display_name":"Zhenbang Ma","orcid":"https://orcid.org/0000-0002-9166-5248"},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Zhenbang Ma","raw_affiliation_strings":["QI-ANXIN, Beijing, China"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"QI-ANXIN, Beijing, China","institution_ids":[]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5101846444","display_name":"Yanhao Wang","orcid":"https://orcid.org/0000-0002-6990-2972"},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Yanhao Wang","raw_affiliation_strings":["QI-ANXIN, Beijing, China"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"QI-ANXIN, Beijing, China","institution_ids":[]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5102150414","display_name":"Hong Hu","orcid":"https://orcid.org/0000-0002-6261-3190"},"institutions":[{"id":"https://openalex.org/I130769515","display_name":"Pennsylvania State University","ror":"https://ror.org/04p491231","country_code":"US","type":"education","lineage":["https://openalex.org/I130769515"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Hong Hu","raw_affiliation_strings":["Pennsylvania State University, University Park, PA, USA"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Pennsylvania State University, University Park, PA, USA","institution_ids":["https://openalex.org/I130769515"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5090520213","display_name":"Minghang Shen","orcid":"https://orcid.org/0000-0001-7649-3719"},"institutions":[{"id":"https://openalex.org/I2250653659","display_name":"Tencent (China)","ror":"https://ror.org/00hhjss72","country_code":"CN","type":"company","lineage":["https://openalex.org/I2250653659"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Minghang Shen","raw_affiliation_strings":["Tencent Security Xuanwu Lab, Beijing, China"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Tencent Security Xuanwu Lab, Beijing, China","institution_ids":["https://openalex.org/I2250653659"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5100320057","display_name":"Yue Liu","orcid":"https://orcid.org/0000-0002-2595-4893"},"institutions":[{"id":"https://openalex.org/I76569877","display_name":"Southeast University","ror":"https://ror.org/04ct4d772","country_code":"CN","type":"education","lineage":["https://openalex.org/I76569877"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Yue Liu","raw_affiliation_strings":["Southeast University, QI-ANXIN, Beijing, China"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Southeast University, QI-ANXIN, Beijing, China","institution_ids":["https://openalex.org/I76569877"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5084460856","display_name":"Shanqing Guo","orcid":"https://orcid.org/0000-0003-3367-0951"},"institutions":[{"id":"https://openalex.org/I154099455","display_name":"Shandong University","ror":"https://ror.org/0207yh398","country_code":"CN","type":"education","lineage":["https://openalex.org/I154099455"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Shanqing Guo","raw_affiliation_strings":["Shandong University, Qingdao, China"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Shandong University, Qingdao, China","institution_ids":["https://openalex.org/I154099455"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5067799841","display_name":"Haixin Duan","orcid":"https://orcid.org/0000-0003-0083-733X"},"institutions":[{"id":"https://openalex.org/I99065089","display_name":"Tsinghua University","ror":"https://ror.org/03cve4549","country_code":"CN","type":"education","lineage":["https://openalex.org/I99065089"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Haixin Duan","raw_affiliation_strings":["Tsinghua University, Beijing, China"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Tsinghua University, Beijing, China","institution_ids":["https://openalex.org/I99065089"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5109913807","display_name":"Kaida Jiang","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Kaida Jiang","raw_affiliation_strings":["SJTU, Shanghai, China"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"SJTU, Shanghai, China","institution_ids":[]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5062829885","display_name":"Zhi Xue","orcid":"https://orcid.org/0000-0003-2875-304X"},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Zhi Xue","raw_affiliation_strings":["SJTU, Shanghai, China"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"SJTU, Shanghai, China","institution_ids":[]}]}],"institutions":[],"countries_distinct_count":2,"institutions_distinct_count":6,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":null,"has_fulltext":false,"cited_by_count":19,"citation_normalized_percentile":null,"cited_by_percentile_year":null,"biblio":{"volume":null,"issue":null,"first_page":"485","last_page":"498"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10743","display_name":"Software Testing and Debugging Techniques","score":0.9998999834060669,"subfield":{"id":"https://openalex.org/subfields/1712","display_name":"Software"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T10743","display_name":"Software Testing and Debugging Techniques","score":0.9998999834060669,"subfield":{"id":"https://openalex.org/subfields/1712","display_name":"Software"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":0.9998000264167786,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11424","display_name":"Security and Verification in Computing","score":0.9968000054359436,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.8106540441513062},{"id":"https://openalex.org/keywords/real-time-operating-system","display_name":"Real-time operating system","score":0.7503125667572021},{"id":"https://openalex.org/keywords/fuzz-testing","display_name":"Fuzz testing","score":0.7096538543701172},{"id":"https://openalex.org/keywords/embedded-system","display_name":"Embedded system","score":0.5544367432594299},{"id":"https://openalex.org/keywords/task","display_name":"Task (project management)","score":0.4642563462257385},{"id":"https://openalex.org/keywords/operating-system","display_name":"Operating system","score":0.45370998978614807},{"id":"https://openalex.org/keywords/source-code","display_name":"Source code","score":0.411490261554718},{"id":"https://openalex.org/keywords/software","display_name":"Software","score":0.27724534273147583},{"id":"https://openalex.org/keywords/engineering","display_name":"Engineering","score":0.11301937699317932}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.8106540441513062},{"id":"https://openalex.org/C28472234","wikidata":"https://www.wikidata.org/wiki/Q213666","display_name":"Real-time operating system","level":2,"score":0.7503125667572021},{"id":"https://openalex.org/C111065885","wikidata":"https://www.wikidata.org/wiki/Q1189053","display_name":"Fuzz testing","level":3,"score":0.7096538543701172},{"id":"https://openalex.org/C149635348","wikidata":"https://www.wikidata.org/wiki/Q193040","display_name":"Embedded system","level":1,"score":0.5544367432594299},{"id":"https://openalex.org/C2780451532","wikidata":"https://www.wikidata.org/wiki/Q759676","display_name":"Task (project management)","level":2,"score":0.4642563462257385},{"id":"https://openalex.org/C111919701","wikidata":"https://www.wikidata.org/wiki/Q9135","display_name":"Operating system","level":1,"score":0.45370998978614807},{"id":"https://openalex.org/C43126263","wikidata":"https://www.wikidata.org/wiki/Q128751","display_name":"Source code","level":2,"score":0.411490261554718},{"id":"https://openalex.org/C2777904410","wikidata":"https://www.wikidata.org/wiki/Q7397","display_name":"Software","level":2,"score":0.27724534273147583},{"id":"https://openalex.org/C127413603","wikidata":"https://www.wikidata.org/wiki/Q11023","display_name":"Engineering","level":0,"score":0.11301937699317932},{"id":"https://openalex.org/C201995342","wikidata":"https://www.wikidata.org/wiki/Q682496","display_name":"Systems engineering","level":1,"score":0.0}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1145/3548606.3559367","is_oa":false,"landing_page_url":"https://doi.org/10.1145/3548606.3559367","pdf_url":null,"source":{"id":"https://openalex.org/S4363608815","display_name":"Proceedings of the 2022 ACM SIGSAC Conference on Computer and Communications Security","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":null,"host_organization_name":null,"host_organization_lineage":[],"host_organization_lineage_names":[],"type":"conference"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the 2022 ACM SIGSAC Conference on Computer and Communications Security","raw_type":"proceedings-article"}],"best_oa_location":null,"sustainable_development_goals":[],"awards":[],"funders":[],"has_content":{"pdf":false,"grobid_xml":false},"content_urls":null,"referenced_works_count":20,"referenced_works":["https://openalex.org/W1710734607","https://openalex.org/W2071067812","https://openalex.org/W2514974017","https://openalex.org/W2571682498","https://openalex.org/W2574017551","https://openalex.org/W2576376563","https://openalex.org/W2577540292","https://openalex.org/W2580207986","https://openalex.org/W2613534458","https://openalex.org/W2664781091","https://openalex.org/W2766540688","https://openalex.org/W2795192879","https://openalex.org/W2891235722","https://openalex.org/W2989837574","https://openalex.org/W2997915791","https://openalex.org/W3000692790","https://openalex.org/W3015383024","https://openalex.org/W3108723500","https://openalex.org/W4244413641","https://openalex.org/W4299301436"],"related_works":["https://openalex.org/W2348991889","https://openalex.org/W2214202562","https://openalex.org/W2358350236","https://openalex.org/W2185920304","https://openalex.org/W2385167787","https://openalex.org/W1583729815","https://openalex.org/W2352866890","https://openalex.org/W2137093729","https://openalex.org/W2402455106","https://openalex.org/W1974394055"],"abstract_inverted_index":{"Real-Time":[0],"Operating":[1],"System":[2],"(RTOS)":[3],"has":[4,31],"become":[5],"the":[6,47,59,64,82,98,165,201,206,211,224,236,270,304],"main":[7],"category":[8],"of":[9,29,50,66,78,85,192,214,288],"embedded":[10],"systems.":[11],"It":[12],"is":[13,126,154,272],"widely":[14],"used":[15],"to":[16,58,63,74,118,199,235,256],"support":[17],"tasks":[18,89],"requiring":[19],"real-time":[20],"response":[21],"such":[22,162,231],"as":[23,35,232],"printers":[24],"and":[25,90,102,150,157,169,195,209,220,253,258,263,286],"switches.":[26],"The":[27],"security":[28,67,120],"RTOS":[30,54,86,128,167,284],"been":[32,291],"long":[33],"overlooked":[34],"it":[36,218,241],"was":[37],"running":[38],"in":[39,122,146,269],"special":[40],"environments":[41],"isolated":[42],"from":[43,164,190],"attackers.":[44],"However,":[45],"with":[46],"rapid":[48],"development":[49],"IoT":[51],"devices,":[52],"tremendous":[53],"devices":[55,70],"are":[56,71],"connected":[57],"public":[60],"network.":[61],"Due":[62],"lack":[65],"mechanisms,":[68],"these":[69,193,246],"extremely":[72],"vulnerable":[73],"a":[75,93,114,131,143,147,171,266,273],"wide":[76],"spectrum":[77],"attacks.":[79],"Even":[80],"worse,":[81],"monolithic":[83,166],"design":[84],"combines":[87],"various":[88],"services":[91],"into":[92,134],"single":[94],"binary,":[95],"which":[96],"hinders":[97],"current":[99],"program":[100],"testing":[101,310],"analysis":[103],"techniques":[104],"working":[105],"on":[106,205,245,282,309],"RTOS.":[107,123,311],"In":[108],"this":[109],"paper,":[110],"we":[111,160],"propose":[112],"SFuzz,":[113],"novel":[115],"slice-based":[116],"fuzzer,":[117],"detect":[119],"vulnerabilities":[121],"Our":[124,297],"insight":[125],"that":[127,181,188,227,301],"usually":[129,155],"divides":[130],"complicated":[132],"binary":[133,168],"many":[135],"separated":[136],"but":[137],"single-minded":[138],"tasks.":[139],"Each":[140],"task":[141],"accomplishes":[142],"particular":[144],"event":[145],"deterministic":[148],"way":[149],"its":[151],"control":[152],"flow":[153],"straightforward":[156],"independent.":[158],"Therefore,":[159],"identify":[161],"code":[163,247],"synthesize":[170],"slice":[172],"for":[173],"effective":[174,229],"testing.":[175],"Specifically,":[176],"SFuzz":[177,250,276,302],"first":[178],"identifies":[179],"functions":[180],"handle":[182],"user":[183,237],"input,":[184],"constructs":[185],"call":[186,207],"graphs":[187,208],"start":[189],"callers":[191],"functions,":[194],"leverages":[196,251],"forward":[197,252],"slicing":[198,255],"build":[200],"execution":[202],"tree":[203],"based":[204],"pruning":[210],"paths":[212],"independent":[213],"external":[215],"inputs.":[216],"Then,":[217],"detects":[219],"handles":[221],"roadblocks":[222],"within":[223],"coarse-grain":[225],"scope":[226],"hinder":[228],"fuzzing,":[230],"instructions":[233],"unrelated":[234],"input.":[238],"And":[239],"then,":[240],"conducts":[242],"coverage-guided":[243],"fuzzing":[244],"snippets.":[248],"Finally,":[249],"backward":[254],"track":[257],"verify":[259],"each":[260],"path":[261],"constraint":[262],"determine":[264],"whether":[265],"bug":[267],"discovered":[268,278],"fuzzer":[271],"real":[274],"vulnerability.":[275],"successfully":[277],"77":[279],"zero-day":[280],"bugs":[281],"35":[283],"samples,":[285],"67":[287],"them":[289],"have":[290],"assigned":[292],"CVE":[293],"or":[294],"CNVD":[295],"IDs.":[296],"empirical":[298],"evaluation":[299],"shows":[300],"outperforms":[303],"state-of-the-art":[305],"tools":[306],"(e.g.,":[307],"UnicornAFL)":[308]},"counts_by_year":[{"year":2026,"cited_by_count":3},{"year":2025,"cited_by_count":9},{"year":2024,"cited_by_count":7}],"updated_date":"2026-07-14T23:27:15.235271","created_date":"2022-11-12T00:00:00"}