{"id":"https://openalex.org/W4410356750","doi":"https://doi.org/10.1145/3672608.3707730","title":"Measuring the Impact of Fuzzing Activity in Networking Software","display_name":"Measuring the Impact of Fuzzing Activity in Networking Software","publication_year":2025,"publication_date":"2025-03-31","ids":{"openalex":"https://openalex.org/W4410356750","doi":"https://doi.org/10.1145/3672608.3707730"},"language":"en","primary_location":{"id":"doi:10.1145/3672608.3707730","is_oa":false,"landing_page_url":"https://doi.org/10.1145/3672608.3707730","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the 40th ACM/SIGAPP Symposium on Applied Computing","raw_type":"proceedings-article"},"type":"article","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5054039312","display_name":"Leon Fernandez","orcid":"https://orcid.org/0000-0002-6265-2173"},"institutions":[{"id":"https://openalex.org/I86987016","display_name":"KTH Royal Institute of Technology","ror":"https://ror.org/026vcq606","country_code":"SE","type":"education","lineage":["https://openalex.org/I86987016"]}],"countries":["SE"],"is_corresponding":true,"raw_author_name":"Leon Fernandez","raw_affiliation_strings":["KTH Royal Institute of Technology, Stockholm, Sweden"],"affiliations":[{"raw_affiliation_string":"KTH Royal Institute of Technology, Stockholm, Sweden","institution_ids":["https://openalex.org/I86987016"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5030202496","display_name":"Gunnar Karlsson","orcid":"https://orcid.org/0000-0002-3704-1338"},"institutions":[{"id":"https://openalex.org/I86987016","display_name":"KTH Royal Institute of Technology","ror":"https://ror.org/026vcq606","country_code":"SE","type":"education","lineage":["https://openalex.org/I86987016"]}],"countries":["SE"],"is_corresponding":false,"raw_author_name":"Gunnar Karlsson","raw_affiliation_strings":["KTH, Stockholm, Sweden"],"affiliations":[{"raw_affiliation_string":"KTH, Stockholm, Sweden","institution_ids":["https://openalex.org/I86987016"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":2,"corresponding_author_ids":["https://openalex.org/A5054039312"],"corresponding_institution_ids":["https://openalex.org/I86987016"],"apc_list":null,"apc_paid":null,"fwci":0.0,"has_fulltext":false,"cited_by_count":0,"citation_normalized_percentile":{"value":0.11314396,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":null,"biblio":{"volume":null,"issue":null,"first_page":"1746","last_page":"1751"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10743","display_name":"Software Testing and Debugging Techniques","score":0.9998999834060669,"subfield":{"id":"https://openalex.org/subfields/1712","display_name":"Software"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T10743","display_name":"Software Testing and Debugging Techniques","score":0.9998999834060669,"subfield":{"id":"https://openalex.org/subfields/1712","display_name":"Software"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":0.9987999796867371,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T12423","display_name":"Software Reliability and Analysis Research","score":0.9983000159263611,"subfield":{"id":"https://openalex.org/subfields/1712","display_name":"Software"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/fuzz-testing","display_name":"Fuzz testing","score":0.9641963839530945},{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.6677964329719543},{"id":"https://openalex.org/keywords/software","display_name":"Software","score":0.5052092671394348},{"id":"https://openalex.org/keywords/software-defined-networking","display_name":"Software-defined networking","score":0.49018579721450806},{"id":"https://openalex.org/keywords/software-testing","display_name":"Software testing","score":0.4535937011241913},{"id":"https://openalex.org/keywords/software-bug","display_name":"Software bug","score":0.43193212151527405},{"id":"https://openalex.org/keywords/computer-security","display_name":"Computer security","score":0.3603995740413666},{"id":"https://openalex.org/keywords/computer-network","display_name":"Computer network","score":0.23222172260284424},{"id":"https://openalex.org/keywords/operating-system","display_name":"Operating system","score":0.14487531781196594}],"concepts":[{"id":"https://openalex.org/C111065885","wikidata":"https://www.wikidata.org/wiki/Q1189053","display_name":"Fuzz testing","level":3,"score":0.9641963839530945},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.6677964329719543},{"id":"https://openalex.org/C2777904410","wikidata":"https://www.wikidata.org/wiki/Q7397","display_name":"Software","level":2,"score":0.5052092671394348},{"id":"https://openalex.org/C77270119","wikidata":"https://www.wikidata.org/wiki/Q1655198","display_name":"Software-defined networking","level":2,"score":0.49018579721450806},{"id":"https://openalex.org/C2984328558","wikidata":"https://www.wikidata.org/wiki/Q188522","display_name":"Software testing","level":3,"score":0.4535937011241913},{"id":"https://openalex.org/C1009929","wikidata":"https://www.wikidata.org/wiki/Q179550","display_name":"Software bug","level":3,"score":0.43193212151527405},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.3603995740413666},{"id":"https://openalex.org/C31258907","wikidata":"https://www.wikidata.org/wiki/Q1301371","display_name":"Computer network","level":1,"score":0.23222172260284424},{"id":"https://openalex.org/C111919701","wikidata":"https://www.wikidata.org/wiki/Q9135","display_name":"Operating system","level":1,"score":0.14487531781196594}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1145/3672608.3707730","is_oa":false,"landing_page_url":"https://doi.org/10.1145/3672608.3707730","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the 40th ACM/SIGAPP Symposium on Applied Computing","raw_type":"proceedings-article"}],"best_oa_location":null,"sustainable_development_goals":[{"id":"https://metadata.un.org/sdg/8","score":0.5400000214576721,"display_name":"Decent work and economic growth"}],"awards":[],"funders":[],"has_content":{"grobid_xml":false,"pdf":false},"content_urls":null,"referenced_works_count":7,"referenced_works":["https://openalex.org/W3049735680","https://openalex.org/W3173990398","https://openalex.org/W4377371486","https://openalex.org/W4385492587","https://openalex.org/W4400121520","https://openalex.org/W4401724691","https://openalex.org/W6962877344"],"related_works":["https://openalex.org/W614438062","https://openalex.org/W4405182151","https://openalex.org/W4319791806","https://openalex.org/W3173990398","https://openalex.org/W4205454537","https://openalex.org/W4385301282","https://openalex.org/W3170526652","https://openalex.org/W4381785649","https://openalex.org/W4384155735","https://openalex.org/W4226494072"],"abstract_inverted_index":{"Fuzz":[0],"testing":[1],"has":[2],"become":[3],"the":[4,70,77],"de":[5],"facto":[6],"standard":[7],"for":[8,49,82],"vulnerability":[9],"discovery.":[10],"In":[11],"this":[12],"paper":[13],"we":[14,74],"study":[15],"32":[16],"prominent":[17],"protocol":[18],"implementations":[19],"that":[20,76],"have":[21],"been":[22],"continuously":[23],"fuzzed":[24],"by":[25,68],"OSS-Fuzz,":[26],"a":[27,40,55,65],"widely":[28],"used":[29],"fuzzing":[30,37,59],"platform.":[31],"We":[32],"define":[33],"metrics":[34],"to":[35],"measure":[36],"activity":[38,60],"within":[39,64],"project":[41],"and":[42,61],"correlate":[43],"our":[44],"measurements":[45],"with":[46],"registered":[47,62],"CVEs":[48,63],"discovered":[50],"vulnerabilities.":[51,86],"Our":[52],"analysis":[53],"show":[54],"strong":[56,81],"correlation":[57,78],"between":[58],"project.":[66],"However,":[67],"using":[69],"CWE-1000":[71],"analys":[72],"framework,":[73],"find":[75],"is":[79],"only":[80],"certain":[83],"classes":[84],"of":[85]},"counts_by_year":[],"updated_date":"2025-11-06T03:46:38.306776","created_date":"2025-10-10T00:00:00"}