{"id":"https://openalex.org/W4400583131","doi":"https://doi.org/10.1145/3643741","title":"Evaluating Directed Fuzzers: Are We Heading in the Right Direction?","display_name":"Evaluating Directed Fuzzers: Are We Heading in the Right Direction?","publication_year":2024,"publication_date":"2024-07-12","ids":{"openalex":"https://openalex.org/W4400583131","doi":"https://doi.org/10.1145/3643741"},"language":"en","primary_location":{"id":"doi:10.1145/3643741","is_oa":true,"landing_page_url":"https://doi.org/10.1145/3643741","pdf_url":null,"source":{"id":"https://openalex.org/S4404663975","display_name":"Proceedings of the ACM on software engineering.","issn_l":"2994-970X","issn":["2994-970X"],"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/P4310319798","host_organization_name":"Association for Computing Machinery","host_organization_lineage":["https://openalex.org/P4310319798"],"host_organization_lineage_names":["Association for Computing Machinery"],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the ACM on Software Engineering","raw_type":"journal-article"},"type":"article","indexed_in":["crossref"],"open_access":{"is_oa":true,"oa_status":"hybrid","oa_url":"https://doi.org/10.1145/3643741","any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5067524209","display_name":"Tae Eun Kim","orcid":"https://orcid.org/0009-0009-2442-8646"},"institutions":[{"id":"https://openalex.org/I157485424","display_name":"Korea Advanced Institute of Science and Technology","ror":"https://ror.org/05apxxy63","country_code":"KR","type":"education","lineage":["https://openalex.org/I157485424"]}],"countries":["KR"],"is_corresponding":true,"raw_author_name":"Tae Eun Kim","raw_affiliation_strings":["KAIST, Daejeon, Korea"],"affiliations":[{"raw_affiliation_string":"KAIST, Daejeon, Korea","institution_ids":["https://openalex.org/I157485424"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5068362003","display_name":"Jaeseung Choi","orcid":"https://orcid.org/0000-0002-5493-9174"},"institutions":[{"id":"https://openalex.org/I148751991","display_name":"Sogang University","ror":"https://ror.org/056tn4839","country_code":"KR","type":"education","lineage":["https://openalex.org/I148751991"]}],"countries":["KR"],"is_corresponding":false,"raw_author_name":"Jaeseung Choi","raw_affiliation_strings":["Sogang University, Seoul, Korea"],"affiliations":[{"raw_affiliation_string":"Sogang University, Seoul, Korea","institution_ids":["https://openalex.org/I148751991"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5104423949","display_name":"Seongjae Im","orcid":"https://orcid.org/0009-0006-5171-9447"},"institutions":[{"id":"https://openalex.org/I157485424","display_name":"Korea Advanced Institute of Science and Technology","ror":"https://ror.org/05apxxy63","country_code":"KR","type":"education","lineage":["https://openalex.org/I157485424"]}],"countries":["KR"],"is_corresponding":false,"raw_author_name":"Seongjae Im","raw_affiliation_strings":["KAIST, Daejeon, Korea"],"affiliations":[{"raw_affiliation_string":"KAIST, Daejeon, Korea","institution_ids":["https://openalex.org/I157485424"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5071661688","display_name":"Kihong Heo","orcid":"https://orcid.org/0000-0003-2671-0142"},"institutions":[{"id":"https://openalex.org/I157485424","display_name":"Korea Advanced Institute of Science and Technology","ror":"https://ror.org/05apxxy63","country_code":"KR","type":"education","lineage":["https://openalex.org/I157485424"]}],"countries":["KR"],"is_corresponding":false,"raw_author_name":"Kihong Heo","raw_affiliation_strings":["KAIST, Daejeon, Korea"],"affiliations":[{"raw_affiliation_string":"KAIST, Daejeon, Korea","institution_ids":["https://openalex.org/I157485424"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5031854438","display_name":"Sang Kil","orcid":"https://orcid.org/0000-0002-6012-7228"},"institutions":[{"id":"https://openalex.org/I157485424","display_name":"Korea Advanced Institute of Science and Technology","ror":"https://ror.org/05apxxy63","country_code":"KR","type":"education","lineage":["https://openalex.org/I157485424"]}],"countries":["KR"],"is_corresponding":false,"raw_author_name":"Sang Kil Cha","raw_affiliation_strings":["KAIST, Daejeon, Korea"],"affiliations":[{"raw_affiliation_string":"KAIST, Daejeon, Korea","institution_ids":["https://openalex.org/I157485424"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":5,"corresponding_author_ids":["https://openalex.org/A5067524209"],"corresponding_institution_ids":["https://openalex.org/I157485424"],"apc_list":null,"apc_paid":null,"fwci":3.456,"has_fulltext":false,"cited_by_count":7,"citation_normalized_percentile":{"value":0.93834423,"is_in_top_1_percent":false,"is_in_top_10_percent":true},"cited_by_percentile_year":{"min":94,"max":98},"biblio":{"volume":"1","issue":"FSE","first_page":"316","last_page":"337"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10743","display_name":"Software Testing and Debugging Techniques","score":0.9972000122070312,"subfield":{"id":"https://openalex.org/subfields/1712","display_name":"Software"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T10743","display_name":"Software Testing and Debugging Techniques","score":0.9972000122070312,"subfield":{"id":"https://openalex.org/subfields/1712","display_name":"Software"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T12535","display_name":"Machine Learning and Data Classification","score":0.9775999784469604,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":0.9763000011444092,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/heading","display_name":"Heading (navigation)","score":0.9526535868644714},{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.5860368609428406},{"id":"https://openalex.org/keywords/artificial-intelligence","display_name":"Artificial intelligence","score":0.38325825333595276},{"id":"https://openalex.org/keywords/geodesy","display_name":"Geodesy","score":0.22600078582763672},{"id":"https://openalex.org/keywords/geography","display_name":"Geography","score":0.12444174289703369}],"concepts":[{"id":"https://openalex.org/C2776937971","wikidata":"https://www.wikidata.org/wiki/Q4384217","display_name":"Heading (navigation)","level":2,"score":0.9526535868644714},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.5860368609428406},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.38325825333595276},{"id":"https://openalex.org/C13280743","wikidata":"https://www.wikidata.org/wiki/Q131089","display_name":"Geodesy","level":1,"score":0.22600078582763672},{"id":"https://openalex.org/C205649164","wikidata":"https://www.wikidata.org/wiki/Q1071","display_name":"Geography","level":0,"score":0.12444174289703369}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1145/3643741","is_oa":true,"landing_page_url":"https://doi.org/10.1145/3643741","pdf_url":null,"source":{"id":"https://openalex.org/S4404663975","display_name":"Proceedings of the ACM on software engineering.","issn_l":"2994-970X","issn":["2994-970X"],"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/P4310319798","host_organization_name":"Association for Computing Machinery","host_organization_lineage":["https://openalex.org/P4310319798"],"host_organization_lineage_names":["Association for Computing Machinery"],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the ACM on Software Engineering","raw_type":"journal-article"}],"best_oa_location":{"id":"doi:10.1145/3643741","is_oa":true,"landing_page_url":"https://doi.org/10.1145/3643741","pdf_url":null,"source":{"id":"https://openalex.org/S4404663975","display_name":"Proceedings of the ACM on software engineering.","issn_l":"2994-970X","issn":["2994-970X"],"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/P4310319798","host_organization_name":"Association for Computing Machinery","host_organization_lineage":["https://openalex.org/P4310319798"],"host_organization_lineage_names":["Association for Computing Machinery"],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the ACM on Software Engineering","raw_type":"journal-article"},"sustainable_development_goals":[],"awards":[],"funders":[],"has_content":{"grobid_xml":false,"pdf":false},"content_urls":null,"referenced_works_count":20,"referenced_works":["https://openalex.org/W1526710119","https://openalex.org/W1972978214","https://openalex.org/W2039673466","https://openalex.org/W2515236103","https://openalex.org/W2560041978","https://openalex.org/W2766540688","https://openalex.org/W2891235722","https://openalex.org/W2898930465","https://openalex.org/W2912296587","https://openalex.org/W2964241064","https://openalex.org/W2979357014","https://openalex.org/W3117975267","https://openalex.org/W3194771370","https://openalex.org/W4232590519","https://openalex.org/W4246774680","https://openalex.org/W4255536601","https://openalex.org/W4300102589","https://openalex.org/W4300388644","https://openalex.org/W4386569390","https://openalex.org/W6930136444"],"related_works":["https://openalex.org/W4391375266","https://openalex.org/W2748952813","https://openalex.org/W4244052565","https://openalex.org/W2358719579","https://openalex.org/W4252778923","https://openalex.org/W2385042721","https://openalex.org/W2367929022","https://openalex.org/W2351754530","https://openalex.org/W2378649906","https://openalex.org/W2391014597"],"abstract_inverted_index":{"Directed":[0],"fuzzing":[1,184],"recently":[2],"has":[3,29],"gained":[4],"significant":[5],"attention":[6],"due":[7],"to":[8,11,37,82,90],"its":[9],"ability":[10],"reconstruct":[12],"proof-of-concept":[13],"(PoC)":[14],"test":[15],"cases":[16],"for":[17,157,202],"target":[18],"code":[19],"such":[20,194],"as":[21],"buggy":[22],"lines":[23],"or":[24],"functions.":[25],"Surprisingly,":[26],"however,":[27],"there":[28],"been":[30],"no":[31],"in-depth":[32],"study":[33,56,173],"on":[34,57,76],"the":[35,46,53,58,100,106,117,124,132,135,151,165,181,188],"way":[36],"properly":[38],"evaluate":[39],"directed":[40,61,71,129,168,183,204],"fuzzers":[41,72],"despite":[42],"much":[43],"progress":[44],"in":[45,69,88,116,164,180,196],"field.":[47],"In":[48,63,170],"this":[49],"paper,":[50],"we":[51,65,110,137,192],"present":[52],"first":[54],"systematic":[55],"evaluation":[59,101,153,178],"of":[60,85,99,127,134,167],"fuzzers.":[62,205],"particular,":[64],"analyze":[66],"common":[67,177],"pitfalls":[68],"evaluating":[70,203],"with":[73],"extensive":[74],"experiments":[75],"five":[77],"state-of-the-art":[78],"tools,":[79],"which":[80],"amount":[81],"30":[83],"CPU-years":[84],"computational":[86],"effort,":[87],"order":[89],"confirm":[91],"that":[92,112,149,175],"different":[93],"choices":[94],"made":[95],"at":[96],"each":[97],"step":[98],"process":[102,154],"can":[103,121,186],"significantly":[104],"impact":[105],"results.":[107],"For":[108],"example,":[109],"find":[111],"a":[113,128],"small":[114],"change":[115],"crash":[118,144],"triage":[119,145],"logic":[120],"substantially":[122],"affect":[123],"measured":[125],"performance":[126],"fuzzer,":[130],"while":[131],"majority":[133],"papers":[136,198],"studied":[138],"do":[139],"not":[140],"fully":[141],"disclose":[142],"their":[143],"scripts.":[146],"We":[147],"argue":[148],"disclosing":[150],"whole":[152],"is":[155],"essential":[156],"reproducing":[158],"research":[159],"and":[160,199],"facilitating":[161],"future":[162],"work":[163],"field":[166],"fuzzing.":[169],"addition,":[171],"our":[172],"reveals":[174],"several":[176],"practices":[179],"current":[182],"literature":[185],"mislead":[187],"overall":[189],"assessments.":[190],"Thus,":[191],"identify":[193],"mistakes":[195],"previous":[197],"propose":[200],"guidelines":[201]},"counts_by_year":[{"year":2025,"cited_by_count":5},{"year":2024,"cited_by_count":2}],"updated_date":"2025-11-06T03:46:38.306776","created_date":"2025-10-10T00:00:00"}
