{"id":"https://openalex.org/W4394745214","doi":"https://doi.org/10.1145/3597503.3639172","title":"FuzzInMem: Fuzzing Programs via In-memory Structures","display_name":"FuzzInMem: Fuzzing Programs via In-memory Structures","publication_year":2024,"publication_date":"2024-04-12","ids":{"openalex":"https://openalex.org/W4394745214","doi":"https://doi.org/10.1145/3597503.3639172"},"language":"en","primary_location":{"id":"doi:10.1145/3597503.3639172","is_oa":true,"landing_page_url":"https://doi.org/10.1145/3597503.3639172","pdf_url":"https://dl.acm.org/doi/pdf/10.1145/3597503.3639172","source":null,"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the IEEE/ACM 46th International Conference on Software Engineering","raw_type":"proceedings-article"},"type":"article","indexed_in":["crossref"],"open_access":{"is_oa":true,"oa_status":"gold","oa_url":"https://dl.acm.org/doi/pdf/10.1145/3597503.3639172","any_repository_has_fulltext":null},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5088069252","display_name":"Xuwei Liu","orcid":"https://orcid.org/0009-0000-5319-1160"},"institutions":[{"id":"https://openalex.org/I219193219","display_name":"Purdue University West Lafayette","ror":"https://ror.org/02dqehb95","country_code":"US","type":"education","lineage":["https://openalex.org/I219193219"]}],"countries":["US"],"is_corresponding":true,"raw_author_name":"Xuwei Liu","raw_affiliation_strings":["Purdue University, West Lafayette, Indiana, USA"],"raw_orcid":"https://orcid.org/0009-0000-5319-1160","affiliations":[{"raw_affiliation_string":"Purdue University, West Lafayette, Indiana, USA","institution_ids":["https://openalex.org/I219193219"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5101927208","display_name":"Wei You","orcid":"https://orcid.org/0000-0003-1009-6627"},"institutions":[{"id":"https://openalex.org/I78988378","display_name":"Renmin University of China","ror":"https://ror.org/041pakw92","country_code":"CN","type":"education","lineage":["https://openalex.org/I78988378"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Wei You","raw_affiliation_strings":["Renmin University of China, Beijing, China"],"raw_orcid":"https://orcid.org/0000-0003-1009-6627","affiliations":[{"raw_affiliation_string":"Renmin University of China, Beijing, China","institution_ids":["https://openalex.org/I78988378"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5055043003","display_name":"Yapeng Ye","orcid":"https://orcid.org/0000-0001-7232-0650"},"institutions":[{"id":"https://openalex.org/I219193219","display_name":"Purdue University West Lafayette","ror":"https://ror.org/02dqehb95","country_code":"US","type":"education","lineage":["https://openalex.org/I219193219"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Yapeng Ye","raw_affiliation_strings":["Purdue University, West Lafayette, Indiana, USA"],"raw_orcid":"https://orcid.org/0000-0001-7232-0650","affiliations":[{"raw_affiliation_string":"Purdue University, West Lafayette, Indiana, USA","institution_ids":["https://openalex.org/I219193219"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5100429710","display_name":"Zhuo Zhang","orcid":"https://orcid.org/0000-0002-6515-0021"},"institutions":[{"id":"https://openalex.org/I219193219","display_name":"Purdue University West Lafayette","ror":"https://ror.org/02dqehb95","country_code":"US","type":"education","lineage":["https://openalex.org/I219193219"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Zhuo Zhang","raw_affiliation_strings":["Purdue University, West Lafayette, Indiana, USA"],"raw_orcid":"https://orcid.org/0000-0002-6515-0021","affiliations":[{"raw_affiliation_string":"Purdue University, West Lafayette, Indiana, USA","institution_ids":["https://openalex.org/I219193219"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5037117080","display_name":"Jianjun Huang","orcid":"https://orcid.org/0000-0003-4403-0060"},"institutions":[{"id":"https://openalex.org/I78988378","display_name":"Renmin University of China","ror":"https://ror.org/041pakw92","country_code":"CN","type":"education","lineage":["https://openalex.org/I78988378"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Jianjun Huang","raw_affiliation_strings":["Renmin University of China, Beijing, China"],"raw_orcid":"https://orcid.org/0000-0003-4403-0060","affiliations":[{"raw_affiliation_string":"Renmin University of China, Beijing, China","institution_ids":["https://openalex.org/I78988378"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5107249133","display_name":"Xiangyu Zhang","orcid":"https://orcid.org/0000-0002-9544-2500"},"institutions":[{"id":"https://openalex.org/I219193219","display_name":"Purdue University West Lafayette","ror":"https://ror.org/02dqehb95","country_code":"US","type":"education","lineage":["https://openalex.org/I219193219"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Xiangyu Zhang","raw_affiliation_strings":["Purdue University, West Lafayette, Indiana, USA"],"raw_orcid":"https://orcid.org/0000-0002-9544-2500","affiliations":[{"raw_affiliation_string":"Purdue University, West Lafayette, Indiana, USA","institution_ids":["https://openalex.org/I219193219"]}]}],"institutions":[],"countries_distinct_count":2,"institutions_distinct_count":6,"corresponding_author_ids":["https://openalex.org/A5088069252"],"corresponding_institution_ids":["https://openalex.org/I219193219"],"apc_list":null,"apc_paid":null,"fwci":1.8566,"has_fulltext":true,"cited_by_count":4,"citation_normalized_percentile":{"value":0.86086957,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":{"min":97,"max":98},"biblio":{"volume":null,"issue":null,"first_page":"1","last_page":"13"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10743","display_name":"Software Testing and Debugging Techniques","score":0.9998999834060669,"subfield":{"id":"https://openalex.org/subfields/1712","display_name":"Software"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T10743","display_name":"Software Testing and Debugging Techniques","score":0.9998999834060669,"subfield":{"id":"https://openalex.org/subfields/1712","display_name":"Software"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":0.9994000196456909,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11424","display_name":"Security and Verification in Computing","score":0.9977999925613403,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/fuzz-testing","display_name":"Fuzz testing","score":0.9450350999832153},{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.9125305414199829},{"id":"https://openalex.org/keywords/byte","display_name":"Byte","score":0.6301982998847961},{"id":"https://openalex.org/keywords/parsing","display_name":"Parsing","score":0.5684431791305542},{"id":"https://openalex.org/keywords/programming-language","display_name":"Programming language","score":0.49030712246894836},{"id":"https://openalex.org/keywords/scalability","display_name":"Scalability","score":0.4866407811641693},{"id":"https://openalex.org/keywords/code","display_name":"Code (set theory)","score":0.42911091446876526},{"id":"https://openalex.org/keywords/software","display_name":"Software","score":0.3983200490474701},{"id":"https://openalex.org/keywords/operating-system","display_name":"Operating system","score":0.34343916177749634},{"id":"https://openalex.org/keywords/set","display_name":"Set (abstract data type)","score":0.14821749925613403}],"concepts":[{"id":"https://openalex.org/C111065885","wikidata":"https://www.wikidata.org/wiki/Q1189053","display_name":"Fuzz testing","level":3,"score":0.9450350999832153},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.9125305414199829},{"id":"https://openalex.org/C43364308","wikidata":"https://www.wikidata.org/wiki/Q8799","display_name":"Byte","level":2,"score":0.6301982998847961},{"id":"https://openalex.org/C186644900","wikidata":"https://www.wikidata.org/wiki/Q194152","display_name":"Parsing","level":2,"score":0.5684431791305542},{"id":"https://openalex.org/C199360897","wikidata":"https://www.wikidata.org/wiki/Q9143","display_name":"Programming language","level":1,"score":0.49030712246894836},{"id":"https://openalex.org/C48044578","wikidata":"https://www.wikidata.org/wiki/Q727490","display_name":"Scalability","level":2,"score":0.4866407811641693},{"id":"https://openalex.org/C2776760102","wikidata":"https://www.wikidata.org/wiki/Q5139990","display_name":"Code (set theory)","level":3,"score":0.42911091446876526},{"id":"https://openalex.org/C2777904410","wikidata":"https://www.wikidata.org/wiki/Q7397","display_name":"Software","level":2,"score":0.3983200490474701},{"id":"https://openalex.org/C111919701","wikidata":"https://www.wikidata.org/wiki/Q9135","display_name":"Operating system","level":1,"score":0.34343916177749634},{"id":"https://openalex.org/C177264268","wikidata":"https://www.wikidata.org/wiki/Q1514741","display_name":"Set (abstract data type)","level":2,"score":0.14821749925613403}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1145/3597503.3639172","is_oa":true,"landing_page_url":"https://doi.org/10.1145/3597503.3639172","pdf_url":"https://dl.acm.org/doi/pdf/10.1145/3597503.3639172","source":null,"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the IEEE/ACM 46th International Conference on Software Engineering","raw_type":"proceedings-article"}],"best_oa_location":{"id":"doi:10.1145/3597503.3639172","is_oa":true,"landing_page_url":"https://doi.org/10.1145/3597503.3639172","pdf_url":"https://dl.acm.org/doi/pdf/10.1145/3597503.3639172","source":null,"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the IEEE/ACM 46th International Conference on Software Engineering","raw_type":"proceedings-article"},"sustainable_development_goals":[{"display_name":"Partnerships for the goals","id":"https://metadata.un.org/sdg/17","score":0.4300000071525574}],"awards":[{"id":"https://openalex.org/G1448401626","display_name":null,"funder_award_id":"N000141712947","funder_id":"https://openalex.org/F4320337345","funder_display_name":"Office of Naval Research"},{"id":"https://openalex.org/G2142619397","display_name":null,"funder_award_id":"62002361","funder_id":"https://openalex.org/F4320321001","funder_display_name":"National Natural Science Foundation of China"},{"id":"https://openalex.org/G2304153372","display_name":null,"funder_award_id":"N000141410468","funder_id":"https://openalex.org/F4320337345","funder_display_name":"Office of Naval Research"},{"id":"https://openalex.org/G2614991508","display_name":null,"funder_award_id":"1910300","funder_id":"https://openalex.org/F4320306076","funder_display_name":"National Science Foundation"},{"id":"https://openalex.org/G7485119911","display_name":null,"funder_award_id":"N000141712045","funder_id":"https://openalex.org/F4320337345","funder_display_name":"Office of Naval Research"}],"funders":[{"id":"https://openalex.org/F4320306076","display_name":"National Science Foundation","ror":"https://ror.org/021nxhr62"},{"id":"https://openalex.org/F4320309036","display_name":"Purdue University","ror":"https://ror.org/02dqehb95"},{"id":"https://openalex.org/F4320321001","display_name":"National Natural Science Foundation of China","ror":"https://ror.org/01h0zpd94"},{"id":"https://openalex.org/F4320322499","display_name":"Renmin University of China","ror":"https://ror.org/041pakw92"},{"id":"https://openalex.org/F4320332180","display_name":"Defense Advanced Research Projects Agency","ror":"https://ror.org/02caytj08"},{"id":"https://openalex.org/F4320335787","display_name":"Fundamental Research Funds for the Central Universities","ror":null},{"id":"https://openalex.org/F4320337345","display_name":"Office of Naval Research","ror":"https://ror.org/00rk2pe57"}],"has_content":{"pdf":true,"grobid_xml":true},"content_urls":{"pdf":"https://content.openalex.org/works/W4394745214.pdf","grobid_xml":"https://content.openalex.org/works/W4394745214.grobid-xml"},"referenced_works_count":36,"referenced_works":["https://openalex.org/W1968061803","https://openalex.org/W2053597677","https://openalex.org/W2135162105","https://openalex.org/W2138580357","https://openalex.org/W2156858199","https://openalex.org/W2328374358","https://openalex.org/W2514974017","https://openalex.org/W2535617737","https://openalex.org/W2574017551","https://openalex.org/W2583649498","https://openalex.org/W2701225458","https://openalex.org/W2741068848","https://openalex.org/W2757104921","https://openalex.org/W2766540688","https://openalex.org/W2865298191","https://openalex.org/W2903305687","https://openalex.org/W2927166905","https://openalex.org/W2954282565","https://openalex.org/W2961870034","https://openalex.org/W2962200727","https://openalex.org/W2963350015","https://openalex.org/W2964097210","https://openalex.org/W2964241064","https://openalex.org/W2974819274","https://openalex.org/W2980275936","https://openalex.org/W2984452133","https://openalex.org/W3015193297","https://openalex.org/W3090526726","https://openalex.org/W3101633108","https://openalex.org/W3102086861","https://openalex.org/W3104664063","https://openalex.org/W3136918966","https://openalex.org/W3155466149","https://openalex.org/W3163844163","https://openalex.org/W4285490370","https://openalex.org/W4285586652"],"related_works":["https://openalex.org/W2511770387","https://openalex.org/W3120811337","https://openalex.org/W3203597304","https://openalex.org/W4385301282","https://openalex.org/W2990186179","https://openalex.org/W4282010060","https://openalex.org/W4225847901","https://openalex.org/W2912063542","https://openalex.org/W175863638","https://openalex.org/W2100349471"],"abstract_inverted_index":{"In":[0],"recent":[1],"years,":[2],"coverage-based":[3],"greybox":[4],"fuzzing":[5],"has":[6,26],"proven":[7],"to":[8,49,59,90,113,124,135,186],"be":[9],"an":[10],"effective":[11],"and":[12,83,109,145,160,169,180,194],"practical":[13],"technique":[14,101,130],"for":[15],"discovering":[16],"software":[17],"vulnerabilities.":[18],"The":[19,162],"availability":[20],"of":[21,38,78,107,176],"American":[22],"Fuzzy":[23],"Loop":[24],"(AFL)":[25],"facilitated":[27],"numerous":[28],"advances":[29],"in":[30,33,174],"overcoming":[31],"challenges":[32],"fuzzing.":[34],"However,":[35],"the":[36,104,132],"issue":[37],"mutating":[39],"complex":[40,122],"file":[41,79,126],"formats,":[42],"such":[43],"as":[44,94,150,152],"PDF,":[45],"remains":[46],"unresolved":[47],"due":[48],"strict":[50],"constraints.":[51,138],"Existing":[52],"fuzzers":[53,173],"often":[54],"produce":[55],"mutants":[56],"that":[57,74,102,120,165],"fail":[58],"parse":[60],"by":[61,64],"applications,":[62,188],"limited":[63],"bit/byte":[65],"mutations":[66],"performed":[67],"on":[68],"input":[69],"files.":[70,95,116],"Our":[71],"observation":[72],"is":[73,167],"most":[75],"in-memory":[76,105],"representations":[77],"formats":[80],"are":[81],"simple,":[82],"well-designed":[84],"applications":[85],"have":[86],"built-in":[87],"printer":[88,111,133],"functions":[89,112],"emit":[91],"these":[92],"structures":[93,106],"Thus,":[96],"we":[97,189],"propose":[98],"a":[99,141],"new":[100],"mutates":[103],"inputs":[108],"utilizes":[110],"regenerate":[114],"mutated":[115],"Unlike":[117],"prior":[118],"approaches":[119],"require":[121],"analysis":[123],"learn":[125],"format":[127,137],"constraints,":[128],"our":[129],"leverages":[131],"function":[134],"preserve":[136],"We":[139],"implement":[140],"prototype":[142],"called":[143],"FuzzInMem":[144,166,185],"compare":[146],"it":[147],"with":[148],"AFL":[149],"well":[151],"other":[153],"state-of-the-art":[154],"fuzzers,":[155],"including":[156],"AFL++,":[157],"Mopt,":[158],"Weizz,":[159],"FormatFuzzer.":[161],"results":[163],"show":[164],"scalable":[168],"substantially":[170],"outperforms":[171],"general-purpose":[172],"terms":[175],"valid":[177],"seed":[178],"generation":[179],"path":[181],"coverage.":[182],"By":[183],"applying":[184],"real-world":[187],"found":[190],"29":[191],"unique":[192],"vulnerabilities":[193],"were":[195],"awarded":[196],"5":[197],"CVEs.":[198]},"counts_by_year":[{"year":2025,"cited_by_count":4}],"updated_date":"2025-11-06T03:46:38.306776","created_date":"2025-10-10T00:00:00"}