{"id":"https://openalex.org/W4405182882","doi":"https://doi.org/10.1145/3658644.3670396","title":"Prompt Fuzzing for Fuzz Driver Generation","display_name":"Prompt Fuzzing for Fuzz Driver Generation","publication_year":2024,"publication_date":"2024-12-02","ids":{"openalex":"https://openalex.org/W4405182882","doi":"https://doi.org/10.1145/3658644.3670396"},"language":"en","primary_location":{"id":"doi:10.1145/3658644.3670396","is_oa":true,"landing_page_url":"https://doi.org/10.1145/3658644.3670396","pdf_url":"https://dl.acm.org/doi/pdf/10.1145/3658644.3670396","source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the 2024 on ACM SIGSAC Conference on Computer and Communications Security","raw_type":"proceedings-article"},"type":"article","indexed_in":["crossref"],"open_access":{"is_oa":true,"oa_status":"gold","oa_url":"https://dl.acm.org/doi/pdf/10.1145/3658644.3670396","any_repository_has_fulltext":null},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5010048104","display_name":"Yunlong Lyu","orcid":"https://orcid.org/0009-0006-6766-6271"},"institutions":[{"id":"https://openalex.org/I2250653659","display_name":"Tencent (China)","ror":"https://ror.org/00hhjss72","country_code":"CN","type":"company","lineage":["https://openalex.org/I2250653659"]}],"countries":["CN"],"is_corresponding":true,"raw_author_name":"Yunlong Lyu","raw_affiliation_strings":["Tencent Security Big Data Lab, Shanghai, China"],"affiliations":[{"raw_affiliation_string":"Tencent Security Big Data Lab, Shanghai, China","institution_ids":["https://openalex.org/I2250653659"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5078001597","display_name":"Yuxuan Xie","orcid":"https://orcid.org/0009-0003-3436-3205"},"institutions":[{"id":"https://openalex.org/I2250653659","display_name":"Tencent (China)","ror":"https://ror.org/00hhjss72","country_code":"CN","type":"company","lineage":["https://openalex.org/I2250653659"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Yuxuan Xie","raw_affiliation_strings":["Tencent Security Big Data Lab, Shanghai, China"],"affiliations":[{"raw_affiliation_string":"Tencent Security Big Data Lab, Shanghai, China","institution_ids":["https://openalex.org/I2250653659"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5103072314","display_name":"Peng Chen","orcid":"https://orcid.org/0009-0005-7482-1359"},"institutions":[{"id":"https://openalex.org/I2250653659","display_name":"Tencent (China)","ror":"https://ror.org/00hhjss72","country_code":"CN","type":"company","lineage":["https://openalex.org/I2250653659"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Peng Chen","raw_affiliation_strings":["Tencent Security Big Data Lab, Shanghai, China"],"affiliations":[{"raw_affiliation_string":"Tencent Security Big Data Lab, Shanghai, China","institution_ids":["https://openalex.org/I2250653659"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5100353550","display_name":"Hao Chen","orcid":"https://orcid.org/0000-0002-4072-0710"},"institutions":[{"id":"https://openalex.org/I84218800","display_name":"University of California, Davis","ror":"https://ror.org/05rrcem69","country_code":"US","type":"education","lineage":["https://openalex.org/I84218800"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Hao Chen","raw_affiliation_strings":["University of California, Davis, Davis, CA, USA"],"affiliations":[{"raw_affiliation_string":"University of California, Davis, Davis, CA, USA","institution_ids":["https://openalex.org/I84218800"]}]}],"institutions":[],"countries_distinct_count":2,"institutions_distinct_count":4,"corresponding_author_ids":["https://openalex.org/A5010048104"],"corresponding_institution_ids":["https://openalex.org/I2250653659"],"apc_list":null,"apc_paid":null,"fwci":9.9995,"has_fulltext":true,"cited_by_count":21,"citation_normalized_percentile":{"value":0.98611111,"is_in_top_1_percent":false,"is_in_top_10_percent":true},"cited_by_percentile_year":{"min":98,"max":100},"biblio":{"volume":null,"issue":null,"first_page":"3793","last_page":"3807"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10743","display_name":"Software Testing and Debugging Techniques","score":0.9994000196456909,"subfield":{"id":"https://openalex.org/subfields/1712","display_name":"Software"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T10743","display_name":"Software Testing and Debugging Techniques","score":0.9994000196456909,"subfield":{"id":"https://openalex.org/subfields/1712","display_name":"Software"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T12810","display_name":"Real-time simulation and control systems","score":0.9970999956130981,"subfield":{"id":"https://openalex.org/subfields/2207","display_name":"Control and Systems Engineering"},"field":{"id":"https://openalex.org/fields/22","display_name":"Engineering"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T12423","display_name":"Software Reliability and Analysis Research","score":0.9955000281333923,"subfield":{"id":"https://openalex.org/subfields/1712","display_name":"Software"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/fuzz-testing","display_name":"Fuzz testing","score":0.9927152991294861},{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.6716523170471191},{"id":"https://openalex.org/keywords/computer-security","display_name":"Computer security","score":0.4177383482456207},{"id":"https://openalex.org/keywords/programming-language","display_name":"Programming language","score":0.1757957935333252},{"id":"https://openalex.org/keywords/software","display_name":"Software","score":0.08064448833465576}],"concepts":[{"id":"https://openalex.org/C111065885","wikidata":"https://www.wikidata.org/wiki/Q1189053","display_name":"Fuzz testing","level":3,"score":0.9927152991294861},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.6716523170471191},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.4177383482456207},{"id":"https://openalex.org/C199360897","wikidata":"https://www.wikidata.org/wiki/Q9143","display_name":"Programming language","level":1,"score":0.1757957935333252},{"id":"https://openalex.org/C2777904410","wikidata":"https://www.wikidata.org/wiki/Q7397","display_name":"Software","level":2,"score":0.08064448833465576}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1145/3658644.3670396","is_oa":true,"landing_page_url":"https://doi.org/10.1145/3658644.3670396","pdf_url":"https://dl.acm.org/doi/pdf/10.1145/3658644.3670396","source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the 2024 on ACM SIGSAC Conference on Computer and Communications Security","raw_type":"proceedings-article"}],"best_oa_location":{"id":"doi:10.1145/3658644.3670396","is_oa":true,"landing_page_url":"https://doi.org/10.1145/3658644.3670396","pdf_url":"https://dl.acm.org/doi/pdf/10.1145/3658644.3670396","source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the 2024 on ACM SIGSAC Conference on Computer and Communications Security","raw_type":"proceedings-article"},"sustainable_development_goals":[],"awards":[{"id":"https://openalex.org/G1329646618","display_name":null,"funder_award_id":"1956364","funder_id":"https://openalex.org/F4320323817","funder_display_name":"Universitas Brawijaya"},{"id":"https://openalex.org/G8146942196","display_name":null,"funder_award_id":"1956364","funder_id":"https://openalex.org/F4320306076","funder_display_name":"National Science Foundation"},{"id":"https://openalex.org/G848032724","display_name":null,"funder_award_id":"Science","funder_id":"https://openalex.org/F4320306076","funder_display_name":"National Science Foundation"}],"funders":[{"id":"https://openalex.org/F4320306076","display_name":"National Science Foundation","ror":"https://ror.org/021nxhr62"},{"id":"https://openalex.org/F4320323817","display_name":"Universitas Brawijaya","ror":"https://ror.org/01wk3d929"}],"has_content":{"pdf":true,"grobid_xml":true},"content_urls":{"pdf":"https://content.openalex.org/works/W4405182882.pdf","grobid_xml":"https://content.openalex.org/works/W4405182882.grobid-xml"},"referenced_works_count":45,"referenced_works":["https://openalex.org/W2535617737","https://openalex.org/W2595840341","https://openalex.org/W2767431443","https://openalex.org/W2793336447","https://openalex.org/W2804093830","https://openalex.org/W2904214673","https://openalex.org/W2955839057","https://openalex.org/W2956307842","https://openalex.org/W2963298680","https://openalex.org/W2963350015","https://openalex.org/W2963900765","https://openalex.org/W2964097210","https://openalex.org/W2970782003","https://openalex.org/W2978329087","https://openalex.org/W2985896598","https://openalex.org/W3090998673","https://openalex.org/W3107488247","https://openalex.org/W3136127207","https://openalex.org/W3140063056","https://openalex.org/W3159691394","https://openalex.org/W3162605691","https://openalex.org/W3205213881","https://openalex.org/W4212774754","https://openalex.org/W4212996276","https://openalex.org/W4284694562","https://openalex.org/W4288057755","https://openalex.org/W4288057765","https://openalex.org/W4309674289","https://openalex.org/W4328028639","https://openalex.org/W4378591002","https://openalex.org/W4384163464","https://openalex.org/W4384304865","https://openalex.org/W4384345708","https://openalex.org/W4385570951","https://openalex.org/W4388857347","https://openalex.org/W4391579642","https://openalex.org/W4402265102","https://openalex.org/W6600062020","https://openalex.org/W6600466347","https://openalex.org/W6600503824","https://openalex.org/W6607643177","https://openalex.org/W6610910252","https://openalex.org/W6621450709","https://openalex.org/W6630224890","https://openalex.org/W6851092083"],"related_works":["https://openalex.org/W4391375266","https://openalex.org/W2899084033","https://openalex.org/W2748952813","https://openalex.org/W2511770387","https://openalex.org/W3120811337","https://openalex.org/W2766647240","https://openalex.org/W4385301282","https://openalex.org/W2990186179","https://openalex.org/W4210660460","https://openalex.org/W3203597304"],"abstract_inverted_index":{"Crafting":[0],"high-quality":[1],"fuzz":[2,21,30,73,85,125,129,151],"drivers":[3,31,74,86,130,152],"not":[4],"only":[5],"is":[6],"time-consuming":[7],"but":[8,52],"also":[9],"requires":[10,53],"a":[11,57,64,163],"deep":[12,38],"understanding":[13],"of":[14,27,162,165,169],"the":[15,18,150],"library.":[16],"However,":[17],"state-of-the-art":[19,124],"automatic":[20],"driver":[22,126],"generation":[23,127],"techniques":[24],"fall":[25],"short":[26],"expectations.":[28],"While":[29],"derived":[32],"from":[33],"consumer":[34],"code":[35],"can":[36,47],"reach":[37],"states,":[39],"they":[40],"have":[41,173],"limited":[42],"coverage.":[43],"Conversely,":[44],"interpretative":[45],"fuzzing":[46,69],"explore":[48,76,81],"most":[49],"API":[50,82],"calls":[51],"numerous":[54],"attempts":[55],"within":[56],"large":[58],"search":[59],"space.":[60],"We":[61,108],"propose":[62,91],"PromptFuzz,":[63],"coverage-guided":[65,101],"fuzzer":[66,106],"for":[67],"prompt":[68,88,102],"that":[70],"iteratively":[71],"generates":[72],"to":[75],"undiscovered":[77],"library":[78],"code.":[79],"To":[80],"usage":[83],"in":[84],"during":[87],"fuzzing,":[89],"we":[90],"several":[92],"key":[93],"techniques:":[94],"instructive":[95],"program":[96,99],"generation,":[97],"erroneous":[98],"validation,":[100],"mutation,":[103],"and":[104,111,121,136,146],"constrained":[105],"scheduling.":[107],"implemented":[109],"PromptFuzz":[110,133,155],"evaluated":[112],"it":[113],"on":[114],"14":[115],"real-world":[116],"libraries.":[117],"Compared":[118],"with":[119],"OSS-Fuzz":[120,145],"Hopper":[122],"(the":[123],"tool),":[128],"generated":[131,153],"by":[132,144,154,176],"achieved":[134],"1.61":[135],"1.63":[137],"times":[138],"higher":[139],"branch":[140],"coverage":[141],"than":[142],"those":[143],"Hopper,":[147],"respectively.":[148],"Moreover,":[149],"detected":[156],"33":[157],"genuine,":[158],"new":[159],"bugs":[160,172],"out":[161,168],"total":[164],"49":[166],"crashes,":[167],"which":[170],"30":[171],"been":[174],"confirmed":[175],"their":[177],"respective":[178],"communities.":[179]},"counts_by_year":[{"year":2026,"cited_by_count":2},{"year":2025,"cited_by_count":19}],"updated_date":"2026-04-10T15:06:20.359241","created_date":"2025-10-10T00:00:00"}
