{"id":"https://openalex.org/W4323864011","doi":"https://doi.org/10.1145/3587156","title":"<scp>DatAFLow</scp> : Toward a Data-Flow-Guided Fuzzer","display_name":"<scp>DatAFLow</scp> : Toward a Data-Flow-Guided Fuzzer","publication_year":2023,"publication_date":"2023-03-10","ids":{"openalex":"https://openalex.org/W4323864011","doi":"https://doi.org/10.1145/3587156"},"language":"en","primary_location":{"id":"doi:10.1145/3587156","is_oa":true,"landing_page_url":"https://doi.org/10.1145/3587156","pdf_url":"https://dl.acm.org/doi/pdf/10.1145/3587156","source":{"id":"https://openalex.org/S142627899","display_name":"ACM Transactions on Software Engineering and Methodology","issn_l":"1049-331X","issn":["1049-331X","1557-7392"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310319798","host_organization_name":"Association for Computing Machinery","host_organization_lineage":["https://openalex.org/P4310319798"],"host_organization_lineage_names":["Association for Computing Machinery"],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"ACM Transactions on Software Engineering and Methodology","raw_type":"journal-article"},"type":"article","indexed_in":["crossref"],"open_access":{"is_oa":true,"oa_status":"hybrid","oa_url":"https://dl.acm.org/doi/pdf/10.1145/3587156","any_repository_has_fulltext":true},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5050996934","display_name":"Adrian Herrera","orcid":"https://orcid.org/0000-0001-9234-1694"},"institutions":[{"id":"https://openalex.org/I118347636","display_name":"Australian National University","ror":"https://ror.org/019wvm592","country_code":"AU","type":"education","lineage":["https://openalex.org/I118347636"]}],"countries":["AU"],"is_corresponding":false,"raw_author_name":"Adrian Herrera","raw_affiliation_strings":["Australian National University, Australia"],"raw_orcid":"https://orcid.org/0000-0001-9234-1694","affiliations":[{"raw_affiliation_string":"Australian National University, Australia","institution_ids":["https://openalex.org/I118347636"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5065116578","display_name":"Mathias Payer","orcid":"https://orcid.org/0000-0001-5054-7547"},"institutions":[{"id":"https://openalex.org/I5124864","display_name":"\u00c9cole Polytechnique F\u00e9d\u00e9rale de Lausanne","ror":"https://ror.org/02s376052","country_code":"CH","type":"education","lineage":["https://openalex.org/I2799323385","https://openalex.org/I5124864"]}],"countries":["CH"],"is_corresponding":false,"raw_author_name":"Mathias Payer","raw_affiliation_strings":["\u00c9cole Polytechnique F\u00e9d\u00e9rale de Lausanne, Switzerland"],"raw_orcid":"https://orcid.org/0000-0001-5054-7547","affiliations":[{"raw_affiliation_string":"\u00c9cole Polytechnique F\u00e9d\u00e9rale de Lausanne, Switzerland","institution_ids":["https://openalex.org/I5124864"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5027609697","display_name":"Antony L. Hosking","orcid":"https://orcid.org/0000-0002-4487-6923"},"institutions":[{"id":"https://openalex.org/I118347636","display_name":"Australian National University","ror":"https://ror.org/019wvm592","country_code":"AU","type":"education","lineage":["https://openalex.org/I118347636"]}],"countries":["AU"],"is_corresponding":false,"raw_author_name":"Antony L. Hosking","raw_affiliation_strings":["Australian National University, Australia"],"raw_orcid":"https://orcid.org/0000-0002-4487-6923","affiliations":[{"raw_affiliation_string":"Australian National University, Australia","institution_ids":["https://openalex.org/I118347636"]}]}],"institutions":[],"countries_distinct_count":2,"institutions_distinct_count":2,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":2.1761,"has_fulltext":true,"cited_by_count":12,"citation_normalized_percentile":{"value":0.92925026,"is_in_top_1_percent":false,"is_in_top_10_percent":true},"cited_by_percentile_year":{"min":89,"max":100},"biblio":{"volume":"32","issue":"5","first_page":"1","last_page":"31"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10743","display_name":"Software Testing and Debugging Techniques","score":0.9995999932289124,"subfield":{"id":"https://openalex.org/subfields/1712","display_name":"Software"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T10743","display_name":"Software Testing and Debugging Techniques","score":0.9995999932289124,"subfield":{"id":"https://openalex.org/subfields/1712","display_name":"Software"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10260","display_name":"Software Engineering Research","score":0.9990000128746033,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":0.9980000257492065,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/fuzz-testing","display_name":"Fuzz testing","score":0.9752007126808167},{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.902119517326355},{"id":"https://openalex.org/keywords/dataflow","display_name":"Dataflow","score":0.8543803691864014},{"id":"https://openalex.org/keywords/control-flow","display_name":"Control flow","score":0.7290208339691162},{"id":"https://openalex.org/keywords/data-flow-diagram","display_name":"Data flow diagram","score":0.5288863182067871},{"id":"https://openalex.org/keywords/data-flow-analysis","display_name":"Data-flow analysis","score":0.489569753408432},{"id":"https://openalex.org/keywords/parallel-computing","display_name":"Parallel computing","score":0.3349141478538513},{"id":"https://openalex.org/keywords/programming-language","display_name":"Programming language","score":0.23889613151550293},{"id":"https://openalex.org/keywords/software","display_name":"Software","score":0.1991196870803833},{"id":"https://openalex.org/keywords/database","display_name":"Database","score":0.19474723935127258}],"concepts":[{"id":"https://openalex.org/C111065885","wikidata":"https://www.wikidata.org/wiki/Q1189053","display_name":"Fuzz testing","level":3,"score":0.9752007126808167},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.902119517326355},{"id":"https://openalex.org/C96324660","wikidata":"https://www.wikidata.org/wiki/Q205446","display_name":"Dataflow","level":2,"score":0.8543803691864014},{"id":"https://openalex.org/C160191386","wikidata":"https://www.wikidata.org/wiki/Q868299","display_name":"Control flow","level":2,"score":0.7290208339691162},{"id":"https://openalex.org/C489000","wikidata":"https://www.wikidata.org/wiki/Q747385","display_name":"Data flow diagram","level":2,"score":0.5288863182067871},{"id":"https://openalex.org/C88468194","wikidata":"https://www.wikidata.org/wiki/Q1172416","display_name":"Data-flow analysis","level":3,"score":0.489569753408432},{"id":"https://openalex.org/C173608175","wikidata":"https://www.wikidata.org/wiki/Q232661","display_name":"Parallel computing","level":1,"score":0.3349141478538513},{"id":"https://openalex.org/C199360897","wikidata":"https://www.wikidata.org/wiki/Q9143","display_name":"Programming language","level":1,"score":0.23889613151550293},{"id":"https://openalex.org/C2777904410","wikidata":"https://www.wikidata.org/wiki/Q7397","display_name":"Software","level":2,"score":0.1991196870803833},{"id":"https://openalex.org/C77088390","wikidata":"https://www.wikidata.org/wiki/Q8513","display_name":"Database","level":1,"score":0.19474723935127258}],"mesh":[],"locations_count":2,"locations":[{"id":"doi:10.1145/3587156","is_oa":true,"landing_page_url":"https://doi.org/10.1145/3587156","pdf_url":"https://dl.acm.org/doi/pdf/10.1145/3587156","source":{"id":"https://openalex.org/S142627899","display_name":"ACM Transactions on Software Engineering and Methodology","issn_l":"1049-331X","issn":["1049-331X","1557-7392"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310319798","host_organization_name":"Association for Computing Machinery","host_organization_lineage":["https://openalex.org/P4310319798"],"host_organization_lineage_names":["Association for Computing Machinery"],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"ACM Transactions on Software Engineering and Methodology","raw_type":"journal-article"},{"id":"pmh:oai:infoscience.epfl.ch:304828","is_oa":true,"landing_page_url":"http://infoscience.epfl.ch/record/304828","pdf_url":null,"source":{"id":"https://openalex.org/S4306400487","display_name":"Infoscience (Ecole Polytechnique F\u00e9d\u00e9rale de Lausanne)","issn_l":null,"issn":null,"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":null,"host_organization_name":null,"host_organization_lineage":[],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by-nc-nd","license_id":"https://openalex.org/licenses/cc-by-nc-nd","version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":"","raw_type":"research article"}],"best_oa_location":{"id":"doi:10.1145/3587156","is_oa":true,"landing_page_url":"https://doi.org/10.1145/3587156","pdf_url":"https://dl.acm.org/doi/pdf/10.1145/3587156","source":{"id":"https://openalex.org/S142627899","display_name":"ACM Transactions on Software Engineering and Methodology","issn_l":"1049-331X","issn":["1049-331X","1557-7392"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310319798","host_organization_name":"Association for Computing Machinery","host_organization_lineage":["https://openalex.org/P4310319798"],"host_organization_lineage_names":["Association for Computing Machinery"],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"ACM Transactions on Software Engineering and Methodology","raw_type":"journal-article"},"sustainable_development_goals":[],"awards":[],"funders":[{"id":"https://openalex.org/F4320320924","display_name":"Schweizerischer Nationalfonds zur F\u00f6rderung der Wissenschaftlichen Forschung","ror":"https://ror.org/00yjd3n13"},{"id":"https://openalex.org/F4320332999","display_name":"Horizon 2020 Framework Programme","ror":"https://ror.org/00k4n6c32"},{"id":"https://openalex.org/F4320335334","display_name":"Defence Science and Technology Group","ror":null}],"has_content":{"grobid_xml":true,"pdf":true},"content_urls":{"pdf":"https://content.openalex.org/works/W4323864011.pdf","grobid_xml":"https://content.openalex.org/works/W4323864011.grobid-xml"},"referenced_works_count":56,"referenced_works":["https://openalex.org/W1609394770","https://openalex.org/W1964298660","https://openalex.org/W1964859659","https://openalex.org/W1971289424","https://openalex.org/W1972978214","https://openalex.org/W1985551847","https://openalex.org/W2002934700","https://openalex.org/W2036853599","https://openalex.org/W2076148486","https://openalex.org/W2081768685","https://openalex.org/W2098806455","https://openalex.org/W2100894869","https://openalex.org/W2124300773","https://openalex.org/W2133069244","https://openalex.org/W2138428785","https://openalex.org/W2139984188","https://openalex.org/W2144344516","https://openalex.org/W2149237601","https://openalex.org/W2152228029","https://openalex.org/W2297774820","https://openalex.org/W2535617737","https://openalex.org/W2596289355","https://openalex.org/W2623418598","https://openalex.org/W2626262528","https://openalex.org/W2766540688","https://openalex.org/W2766647240","https://openalex.org/W2767180444","https://openalex.org/W2794670092","https://openalex.org/W2806519974","https://openalex.org/W2883221342","https://openalex.org/W2886900155","https://openalex.org/W2899781671","https://openalex.org/W2946864865","https://openalex.org/W2947182139","https://openalex.org/W2951091523","https://openalex.org/W2963934162","https://openalex.org/W2964097210","https://openalex.org/W2964241064","https://openalex.org/W2979357014","https://openalex.org/W3008477014","https://openalex.org/W3015326774","https://openalex.org/W3046946156","https://openalex.org/W3047806483","https://openalex.org/W3082737479","https://openalex.org/W3163844163","https://openalex.org/W3166348399","https://openalex.org/W3173990398","https://openalex.org/W3194771370","https://openalex.org/W3195980781","https://openalex.org/W4236200536","https://openalex.org/W4283392482","https://openalex.org/W4284694562","https://openalex.org/W4284705569","https://openalex.org/W4284706927","https://openalex.org/W4312904741","https://openalex.org/W4321383480"],"related_works":["https://openalex.org/W2052485000","https://openalex.org/W1596119602","https://openalex.org/W3205626426","https://openalex.org/W1549956274","https://openalex.org/W4323864011","https://openalex.org/W1998949396","https://openalex.org/W2091960140","https://openalex.org/W2389279987","https://openalex.org/W2056893810","https://openalex.org/W2103326816"],"abstract_inverted_index":{"Coverage-guided":[0],"greybox":[1,99],"fuzzers":[2,50,141,159,195],"rely":[3],"on":[4],"control-flow":[5,18,90,214,238],"coverage":[6,21,31,54,185,205,239],"feedback":[7],"to":[8,17,89,122,199,221,228,233,240],"explore":[9],"a":[10,23,79,98,109],"target":[11,210],"program":[12,28,66],"and":[13,39,148,184,232],"uncover":[14],"bugs.":[15,46],"Compared":[16],"coverage,":[19,115],"data-flow":[20,53,87,104,114,204,225],"offers":[22],"more":[24,43,75],"fine-grained":[25],"approximation":[26],"of":[27,120,157,166],"behavior.":[29],"Data-flow":[30],"captures":[32],"behaviors":[33],"not":[34,211],"visible":[35,212],"as":[36],"control":[37,144],"flow":[38],"should":[40],"intuitively":[41],"discover":[42],"(or":[44],"different)":[45],"Despite":[47,187],"this":[48,128,235],"advantage,":[49],"guided":[51,101,142],"by":[52,102,143],"have":[55],"received":[56],"relatively":[57],"little":[58],"attention,":[59],"appearing":[60],"mainly":[61],"in":[62,208],"combination":[63],"with":[64,125,237],"heavyweight":[65],"analyses":[67,77],"(e.g.,":[68],"taint":[69,146],"analysis,":[70,147],"symbolic":[71],"execution).":[72],"Unfortunately,":[73],"these":[74],"accurate":[76],"incur":[78],"high":[80,163],"run-time":[81,164,230],"penalty,":[82],"impeding":[83],"fuzzer":[84,100,177],"throughput.":[85],"Lightweight":[86],"alternatives":[88],"fuzzing":[91,168],"remain":[92],"unexplored.":[93],"We":[94,106],"present":[95],"datAFLow":[96,133,189],",":[97],"lightweight":[103,224],"profiling.":[105],"also":[107],"establish":[108],"framework":[110],"for":[111],"reasoning":[112],"about":[113],"allowing":[116],"the":[117,155,209,219],"computational":[118],"cost":[119],"exploration":[121],"be":[123],"balanced":[124],"precision.":[126],"Using":[127],"framework,":[129],"we":[130,217],"extensively":[131],"evaluate":[132],"across":[134],"different":[135],"precisions,":[136],"comparing":[137],"it":[138],"against":[139],"state-of-the-art":[140,193],"flow,":[145],"data":[149],"flow.":[150],"Our":[151],"results":[152],"suggest":[153],"that":[154,192],"ubiquity":[156],"control-flow-guided":[158,173,194],"is":[160],"well-founded.":[161],"The":[162],"costs":[165,231],"data-flow-guided":[167],"(~10":[169],"\u00d7":[170],"higher":[171],"than":[172],"fuzzing)":[174],"significantly":[175],"reduces":[176],"iteration":[178],"rates,":[179],"adversely":[180],"affecting":[181],"bug":[182],"discovery":[183],"expansion.":[186],"this,":[188],"uncovered":[190],"bugs":[191],"(notably,":[196],"AFL++)":[197],"failed":[198],"find.":[200],"This":[201],"was":[202],"because":[203],"revealed":[206],"states":[207],"under":[213],"coverage.":[215],"Thus,":[216],"encourage":[218],"community":[220],"continue":[222],"exploring":[223],"profiling;":[226],"specifically,":[227],"lower":[229],"combine":[234],"profiling":[236],"maximize":[241],"bug-finding":[242],"potential.":[243]},"counts_by_year":[{"year":2026,"cited_by_count":6},{"year":2025,"cited_by_count":4},{"year":2024,"cited_by_count":1},{"year":2023,"cited_by_count":1}],"updated_date":"2026-07-19T07:52:34.831488","created_date":"2023-03-11T00:00:00"}