{"id":"https://openalex.org/W4394745232","doi":"https://doi.org/10.1145/3597503.3639087","title":"SpecBCFuzz: Fuzzing LTL Solvers with Boundary Conditions","display_name":"SpecBCFuzz: Fuzzing LTL Solvers with Boundary Conditions","publication_year":2024,"publication_date":"2024-04-12","ids":{"openalex":"https://openalex.org/W4394745232","doi":"https://doi.org/10.1145/3597503.3639087"},"language":"en","primary_location":{"id":"doi:10.1145/3597503.3639087","is_oa":true,"landing_page_url":"https://doi.org/10.1145/3597503.3639087","pdf_url":"https://dl.acm.org/doi/pdf/10.1145/3597503.3639087","source":null,"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the IEEE/ACM 46th International Conference on Software Engineering","raw_type":"proceedings-article"},"type":"article","indexed_in":["crossref"],"open_access":{"is_oa":true,"oa_status":"gold","oa_url":"https://dl.acm.org/doi/pdf/10.1145/3597503.3639087","any_repository_has_fulltext":true},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5067677578","display_name":"Luiz Carlos de S\u00e1 Carvalho","orcid":"https://orcid.org/0009-0002-1915-3720"},"institutions":[{"id":"https://openalex.org/I186903577","display_name":"University of Luxembourg","ror":"https://ror.org/036x5ad56","country_code":"LU","type":"education","lineage":["https://openalex.org/I186903577"]}],"countries":["LU"],"is_corresponding":true,"raw_author_name":"Luiz Carvalho","raw_affiliation_strings":["SnT, University of Luxembourg, Luxembourg, Luxembourg"],"affiliations":[{"raw_affiliation_string":"SnT, University of Luxembourg, Luxembourg, Luxembourg","institution_ids":["https://openalex.org/I186903577"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5032855338","display_name":"Renzo Degiovanni","orcid":"https://orcid.org/0000-0003-1611-3969"},"institutions":[{"id":"https://openalex.org/I186903577","display_name":"University of Luxembourg","ror":"https://ror.org/036x5ad56","country_code":"LU","type":"education","lineage":["https://openalex.org/I186903577"]}],"countries":["LU"],"is_corresponding":false,"raw_author_name":"Renzo Degiovanni","raw_affiliation_strings":["SnT, University of Luxembourg, Luxembourg, Luxembourg"],"affiliations":[{"raw_affiliation_string":"SnT, University of Luxembourg, Luxembourg, Luxembourg","institution_ids":["https://openalex.org/I186903577"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5000695937","display_name":"Maxime Cordy","orcid":"https://orcid.org/0000-0001-8312-1358"},"institutions":[{"id":"https://openalex.org/I186903577","display_name":"University of Luxembourg","ror":"https://ror.org/036x5ad56","country_code":"LU","type":"education","lineage":["https://openalex.org/I186903577"]}],"countries":["LU"],"is_corresponding":false,"raw_author_name":"Maxime Cordy","raw_affiliation_strings":["SnT, University of Luxembourg, Luxembourg, Luxembourg"],"affiliations":[{"raw_affiliation_string":"SnT, University of Luxembourg, Luxembourg, Luxembourg","institution_ids":["https://openalex.org/I186903577"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5016401353","display_name":"Nazareno Aguirre","orcid":"https://orcid.org/0000-0003-0532-5296"},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Nazareno Aguirre","raw_affiliation_strings":["University of Rio Cuarto, Rio Cuarto, Argentina"],"affiliations":[{"raw_affiliation_string":"University of Rio Cuarto, Rio Cuarto, Argentina","institution_ids":[]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5040574362","display_name":"Yves Le Traon","orcid":"https://orcid.org/0000-0002-1045-4861"},"institutions":[{"id":"https://openalex.org/I186903577","display_name":"University of Luxembourg","ror":"https://ror.org/036x5ad56","country_code":"LU","type":"education","lineage":["https://openalex.org/I186903577"]}],"countries":["LU"],"is_corresponding":false,"raw_author_name":"Yves Le Traon","raw_affiliation_strings":["University of Luxembourg, Luxembourg, Luxembourg"],"affiliations":[{"raw_affiliation_string":"University of Luxembourg, Luxembourg, Luxembourg","institution_ids":["https://openalex.org/I186903577"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5081145634","display_name":"Mike Papadakis","orcid":"https://orcid.org/0000-0003-1852-2547"},"institutions":[{"id":"https://openalex.org/I186903577","display_name":"University of Luxembourg","ror":"https://ror.org/036x5ad56","country_code":"LU","type":"education","lineage":["https://openalex.org/I186903577"]}],"countries":["LU"],"is_corresponding":false,"raw_author_name":"Mike Papadakis","raw_affiliation_strings":["University of Luxembourg, Luxembourg, Luxembourg"],"affiliations":[{"raw_affiliation_string":"University of Luxembourg, Luxembourg, Luxembourg","institution_ids":["https://openalex.org/I186903577"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":6,"corresponding_author_ids":["https://openalex.org/A5067677578"],"corresponding_institution_ids":["https://openalex.org/I186903577"],"apc_list":null,"apc_paid":null,"fwci":0.5041,"has_fulltext":true,"cited_by_count":1,"citation_normalized_percentile":{"value":0.64713191,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":{"min":90,"max":94},"biblio":{"volume":null,"issue":null,"first_page":"1","last_page":"13"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10743","display_name":"Software Testing and Debugging Techniques","score":0.9998999834060669,"subfield":{"id":"https://openalex.org/subfields/1712","display_name":"Software"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T10743","display_name":"Software Testing and Debugging Techniques","score":0.9998999834060669,"subfield":{"id":"https://openalex.org/subfields/1712","display_name":"Software"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10142","display_name":"Formal Methods in Verification","score":0.9998000264167786,"subfield":{"id":"https://openalex.org/subfields/1703","display_name":"Computational Theory and Mathematics"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10260","display_name":"Software Engineering Research","score":0.9994999766349792,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/fuzz-testing","display_name":"Fuzz testing","score":0.7644497156143188},{"id":"https://openalex.org/keywords/solver","display_name":"Solver","score":0.7245045900344849},{"id":"https://openalex.org/keywords/soundness","display_name":"Soundness","score":0.6601107120513916},{"id":"https://openalex.org/keywords/model-checking","display_name":"Model checking","score":0.6415350437164307},{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.6331912279129028},{"id":"https://openalex.org/keywords/programming-language","display_name":"Programming language","score":0.5982179641723633},{"id":"https://openalex.org/keywords/satisfiability","display_name":"Satisfiability","score":0.5938565731048584},{"id":"https://openalex.org/keywords/linear-temporal-logic","display_name":"Linear temporal logic","score":0.5092319250106812},{"id":"https://openalex.org/keywords/algorithm","display_name":"Algorithm","score":0.4367107152938843},{"id":"https://openalex.org/keywords/boolean-satisfiability-problem","display_name":"Boolean satisfiability problem","score":0.41527512669563293},{"id":"https://openalex.org/keywords/theoretical-computer-science","display_name":"Theoretical computer science","score":0.41306090354919434},{"id":"https://openalex.org/keywords/software","display_name":"Software","score":0.3898654580116272}],"concepts":[{"id":"https://openalex.org/C111065885","wikidata":"https://www.wikidata.org/wiki/Q1189053","display_name":"Fuzz testing","level":3,"score":0.7644497156143188},{"id":"https://openalex.org/C2778770139","wikidata":"https://www.wikidata.org/wiki/Q1966904","display_name":"Solver","level":2,"score":0.7245045900344849},{"id":"https://openalex.org/C39920170","wikidata":"https://www.wikidata.org/wiki/Q693083","display_name":"Soundness","level":2,"score":0.6601107120513916},{"id":"https://openalex.org/C110251889","wikidata":"https://www.wikidata.org/wiki/Q1569697","display_name":"Model checking","level":2,"score":0.6415350437164307},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.6331912279129028},{"id":"https://openalex.org/C199360897","wikidata":"https://www.wikidata.org/wiki/Q9143","display_name":"Programming language","level":1,"score":0.5982179641723633},{"id":"https://openalex.org/C168773769","wikidata":"https://www.wikidata.org/wiki/Q1350299","display_name":"Satisfiability","level":2,"score":0.5938565731048584},{"id":"https://openalex.org/C4777664","wikidata":"https://www.wikidata.org/wiki/Q1536492","display_name":"Linear temporal logic","level":2,"score":0.5092319250106812},{"id":"https://openalex.org/C11413529","wikidata":"https://www.wikidata.org/wiki/Q8366","display_name":"Algorithm","level":1,"score":0.4367107152938843},{"id":"https://openalex.org/C6943359","wikidata":"https://www.wikidata.org/wiki/Q875276","display_name":"Boolean satisfiability problem","level":2,"score":0.41527512669563293},{"id":"https://openalex.org/C80444323","wikidata":"https://www.wikidata.org/wiki/Q2878974","display_name":"Theoretical computer science","level":1,"score":0.41306090354919434},{"id":"https://openalex.org/C2777904410","wikidata":"https://www.wikidata.org/wiki/Q7397","display_name":"Software","level":2,"score":0.3898654580116272}],"mesh":[],"locations_count":2,"locations":[{"id":"doi:10.1145/3597503.3639087","is_oa":true,"landing_page_url":"https://doi.org/10.1145/3597503.3639087","pdf_url":"https://dl.acm.org/doi/pdf/10.1145/3597503.3639087","source":null,"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the IEEE/ACM 46th International Conference on Software Engineering","raw_type":"proceedings-article"},{"id":"pmh:oai:orbilu.uni.lu:10993/62357","is_oa":true,"landing_page_url":"https://orbilu.uni.lu/handle/10993/62357","pdf_url":"https://orbilu.uni.lu/bitstream/10993/62357/1/_ICSE24_Fuzzing_LTL_Solvers-37.pdf","source":{"id":"https://openalex.org/S4306401815","display_name":"Open Repository and Bibliography (University of Luxembourg)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I186903577","host_organization_name":"University of Luxembourg","host_organization_lineage":["https://openalex.org/I186903577"],"host_organization_lineage_names":[],"type":"repository"},"license":"other-oa","license_id":"https://openalex.org/licenses/other-oa","version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":"Proceedings - 2024 ACM/IEEE 44th International Conference on Software Engineering, ICSE 2024, 12 (2024); Proceedings of the IEEE/ACM 46th International Conference on Software Engineering, Lisbon, Prt [Prt], 14-04-2024 => 20-04-2024","raw_type":"peer reviewed"}],"best_oa_location":{"id":"doi:10.1145/3597503.3639087","is_oa":true,"landing_page_url":"https://doi.org/10.1145/3597503.3639087","pdf_url":"https://dl.acm.org/doi/pdf/10.1145/3597503.3639087","source":null,"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the IEEE/ACM 46th International Conference on Software Engineering","raw_type":"proceedings-article"},"sustainable_development_goals":[],"awards":[],"funders":[{"id":"https://openalex.org/F4320334832","display_name":"Agencia Nacional de Promoci\u00f3n Cient\u00edfica y Tecnol\u00f3gica","ror":"https://ror.org/03stxzb56"}],"has_content":{"pdf":true,"grobid_xml":true},"content_urls":{"pdf":"https://content.openalex.org/works/W4394745232.pdf","grobid_xml":"https://content.openalex.org/works/W4394745232.grobid-xml"},"referenced_works_count":78,"referenced_works":["https://openalex.org/W68069235","https://openalex.org/W71772184","https://openalex.org/W82353766","https://openalex.org/W182632105","https://openalex.org/W221832247","https://openalex.org/W1480909796","https://openalex.org/W1489391022","https://openalex.org/W1504504841","https://openalex.org/W1506588809","https://openalex.org/W1512310098","https://openalex.org/W1518705996","https://openalex.org/W1527982431","https://openalex.org/W1539868891","https://openalex.org/W1541238879","https://openalex.org/W1542807718","https://openalex.org/W1554387452","https://openalex.org/W1605798759","https://openalex.org/W1752393975","https://openalex.org/W1819209966","https://openalex.org/W1922664086","https://openalex.org/W1977166502","https://openalex.org/W1988808695","https://openalex.org/W2002934700","https://openalex.org/W2022485595","https://openalex.org/W2055888212","https://openalex.org/W2069709605","https://openalex.org/W2076054478","https://openalex.org/W2083150459","https://openalex.org/W2114768982","https://openalex.org/W2129289644","https://openalex.org/W2138428785","https://openalex.org/W2161253570","https://openalex.org/W2166280160","https://openalex.org/W2171627300","https://openalex.org/W2513840768","https://openalex.org/W2520933253","https://openalex.org/W2568050379","https://openalex.org/W2613534458","https://openalex.org/W2747329762","https://openalex.org/W2766540688","https://openalex.org/W2777430404","https://openalex.org/W2795192724","https://openalex.org/W2883887424","https://openalex.org/W2888499192","https://openalex.org/W2892537867","https://openalex.org/W2928427891","https://openalex.org/W2961870034","https://openalex.org/W2962200727","https://openalex.org/W3004482543","https://openalex.org/W3048197573","https://openalex.org/W3101588017","https://openalex.org/W3102086861","https://openalex.org/W3104402823","https://openalex.org/W3120742815","https://openalex.org/W3149985185","https://openalex.org/W3160296189","https://openalex.org/W3163844163","https://openalex.org/W3181528482","https://openalex.org/W3203444134","https://openalex.org/W3208373457","https://openalex.org/W4213079124","https://openalex.org/W4225922019","https://openalex.org/W4232255413","https://openalex.org/W4280628778","https://openalex.org/W4284708843","https://openalex.org/W4285602581","https://openalex.org/W4308641890","https://openalex.org/W4317033095","https://openalex.org/W4318247365","https://openalex.org/W4366196510","https://openalex.org/W4366450538","https://openalex.org/W4384302760","https://openalex.org/W6630399987","https://openalex.org/W6632304951","https://openalex.org/W6632308403","https://openalex.org/W6774235938","https://openalex.org/W6807870364","https://openalex.org/W6849062600"],"related_works":["https://openalex.org/W4284708843","https://openalex.org/W3176904788","https://openalex.org/W4312622265","https://openalex.org/W21597398","https://openalex.org/W4298153058","https://openalex.org/W2408080066","https://openalex.org/W2268872489","https://openalex.org/W1913543287","https://openalex.org/W2014111643","https://openalex.org/W2963044240"],"abstract_inverted_index":{"LTL":[0,44,68,109],"solvers":[1,110],"check":[2],"the":[3,26,83,86,99,135,172,175,192,195,213,217],"satisfiability":[4,122],"of":[5,85,104,121,134,171,191],"Linear-time":[6],"Temporal":[7],"Logic":[8],"(LTL)":[9],"formulas":[10,69,88],"and":[11,17,77,101,107,114,154,163,180,201,203],"are":[12],"widely":[13],"used":[14],"for":[15,40],"verifying":[16],"testing":[18],"critical":[19],"software":[20],"systems.":[21],"Thus,":[22],"potential":[23],"bugs":[24,42,130,183],"in":[25,43,131,152,160,178,198,206],"solvers'":[27,137],"implementations":[28],"can":[29],"have":[30],"a":[31,37,63,118,150],"significant":[32],"impact.":[33],"We":[34,91],"present":[35],"SpecBCFuzz,":[36],"fuzzing":[38],"method":[39],"finding":[41],"solvers,":[45],"that":[46,66,116,212],"is":[47,215],"guided":[48],"by":[49,149],"boundary":[50],"conditions":[51],"(BCs),":[52],"corner":[53],"cases":[54],"whose":[55],"(un)satisfiability":[56],"depends":[57],"on":[58,94,174,194],"rare":[59],"traces.":[60],"SpecBCFuzz":[61,93,124,142],"implements":[62],"search-based":[64],"algorithm":[65],"fuzzes":[67],"giving":[70],"relevance":[71],"to":[72,81],"BCs.":[73,90],"It":[74],"integrates":[75],"syntactic":[76],"semantic":[78],"similarity":[79],"metrics":[80],"explore":[82],"vicinity":[84],"seeded":[87],"with":[89],"evaluate":[92],"21":[95,136],"different":[96],"configurations":[97,138],"(including":[98],"latest":[100],"past":[102],"releases)":[103],"four":[105],"mature":[106],"state-of-the-art":[108],"(NuSMV,":[111],"Black,":[112,199],"Aalta,":[113],"PLTL)":[115],"implement":[117],"diverse":[119],"set":[120],"algorithms.":[123],"produces":[125],"368,716":[126],"bug-triggering":[127],"formulas,":[128],"detecting":[129],"18":[132],"out":[133],"we":[139],"study.":[140],"Overall,":[141],"reveals:":[143],"soundness":[144],"issues":[145],"(wrong":[146],"answers":[147],"given":[148],"solver)":[151],"Aalta":[153,200],"PLTL;":[155,202],"crashes,":[156],"e.g.,":[157],"segmentation":[158],"faults,":[159],"NuSMV,":[161],"Black":[162],"Aalta;":[164,181],"flaky":[165],"behaviors":[166],"(different":[167],"responses":[168],"across":[169],"re-runs":[170],"solver":[173,193],"same":[176,196],"formula)":[177,197],"NuSMV":[179,207],"performance":[182,186],"(large":[184],"time":[185],"degradation":[187],"between":[188],"successive":[189],"versions":[190],"no":[204],"bug":[205],"BDD":[208],"(all":[209],"versions),":[210],"suggesting":[211],"latter":[214],"currently":[216],"most":[218],"robust":[219],"solver.":[220]},"counts_by_year":[{"year":2024,"cited_by_count":1}],"updated_date":"2026-03-12T08:34:05.389933","created_date":"2025-10-10T00:00:00"}
