{"id":"https://openalex.org/W4412703873","doi":"https://doi.org/10.1145/3696630.3728497","title":"GAFLERNA Ahoy! Integrating EM Side-Channel Analysis into Traditional Fuzzing Workflows","display_name":"GAFLERNA Ahoy! Integrating EM Side-Channel Analysis into Traditional Fuzzing Workflows","publication_year":2025,"publication_date":"2025-06-23","ids":{"openalex":"https://openalex.org/W4412703873","doi":"https://doi.org/10.1145/3696630.3728497"},"language":"en","primary_location":{"id":"doi:10.1145/3696630.3728497","is_oa":true,"landing_page_url":"https://doi.org/10.1145/3696630.3728497","pdf_url":"https://dl.acm.org/doi/pdf/10.1145/3696630.3728497","source":null,"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the 33rd ACM International Conference on the Foundations of Software Engineering","raw_type":"proceedings-article"},"type":"conference-paper","indexed_in":["crossref"],"open_access":{"is_oa":true,"oa_status":"gold","oa_url":"https://dl.acm.org/doi/pdf/10.1145/3696630.3728497","any_repository_has_fulltext":true},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5041264455","display_name":"Jorge Barredo","orcid":"https://orcid.org/0000-0001-5552-6825"},"institutions":[{"id":"https://openalex.org/I162361429","display_name":"Mondragon Unibertsitatea","ror":"https://ror.org/00wvqgd19","country_code":"ES","type":"education","lineage":["https://openalex.org/I162361429"]},{"id":"https://openalex.org/I4210140267","display_name":"Ikerlan","ror":"https://ror.org/03hp1m080","country_code":"ES","type":"company","lineage":["https://openalex.org/I4210140267"]}],"countries":["ES"],"is_corresponding":false,"raw_author_name":"Jorge Barredo","raw_affiliation_strings":["IKERLAN, Arrasate/Mondrag\u00f3n, Spain","Mondragon Unibertsitatea, Arrasate/Mondrag\u00f3n, Spain"],"raw_orcid":"https://orcid.org/0000-0001-5552-6825","affiliations":[{"raw_affiliation_string":"IKERLAN, Arrasate/Mondrag\u00f3n, Spain","institution_ids":["https://openalex.org/I4210140267"]},{"raw_affiliation_string":"Mondragon Unibertsitatea, Arrasate/Mondrag\u00f3n, Spain","institution_ids":["https://openalex.org/I162361429"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5065281209","display_name":"Justyna Petke","orcid":"https://orcid.org/0000-0002-7833-6044"},"institutions":[{"id":"https://openalex.org/I45129253","display_name":"University College London","ror":"https://ror.org/02jx3x895","country_code":"GB","type":"education","lineage":["https://openalex.org/I124357947","https://openalex.org/I45129253"]}],"countries":["GB"],"is_corresponding":false,"raw_author_name":"Justyna Petke","raw_affiliation_strings":["University College London, London, United Kingdom"],"raw_orcid":"https://orcid.org/0000-0002-7833-6044","affiliations":[{"raw_affiliation_string":"University College London, London, United Kingdom","institution_ids":["https://openalex.org/I45129253"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5013673413","display_name":"David Clark","orcid":"https://orcid.org/0000-0002-7004-934X"},"institutions":[{"id":"https://openalex.org/I45129253","display_name":"University College London","ror":"https://ror.org/02jx3x895","country_code":"GB","type":"education","lineage":["https://openalex.org/I124357947","https://openalex.org/I45129253"]}],"countries":["GB"],"is_corresponding":false,"raw_author_name":"David Clark","raw_affiliation_strings":["University College London, London, United Kingdom"],"raw_orcid":"https://orcid.org/0000-0002-7004-934X","affiliations":[{"raw_affiliation_string":"University College London, London, United Kingdom","institution_ids":["https://openalex.org/I45129253"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5058734486","display_name":"Daniel Blackwell","orcid":"https://orcid.org/0000-0001-7320-9057"},"institutions":[{"id":"https://openalex.org/I45129253","display_name":"University College London","ror":"https://ror.org/02jx3x895","country_code":"GB","type":"education","lineage":["https://openalex.org/I124357947","https://openalex.org/I45129253"]}],"countries":["GB"],"is_corresponding":false,"raw_author_name":"Daniel Blackwell","raw_affiliation_strings":["University College London, London, United Kingdom"],"raw_orcid":"https://orcid.org/0000-0001-7320-9057","affiliations":[{"raw_affiliation_string":"University College London, London, United Kingdom","institution_ids":["https://openalex.org/I45129253"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5076216328","display_name":"Maialen Eceiza","orcid":"https://orcid.org/0000-0001-7755-2848"},"institutions":[{"id":"https://openalex.org/I4210140267","display_name":"Ikerlan","ror":"https://ror.org/03hp1m080","country_code":"ES","type":"company","lineage":["https://openalex.org/I4210140267"]}],"countries":["ES"],"is_corresponding":false,"raw_author_name":"Maialen Eceiza","raw_affiliation_strings":["IKERLAN, Arrasate/Mondrag\u00f3n, Spain"],"raw_orcid":"https://orcid.org/0000-0001-7755-2848","affiliations":[{"raw_affiliation_string":"IKERLAN, Arrasate/Mondrag\u00f3n, Spain","institution_ids":["https://openalex.org/I4210140267"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5035500193","display_name":"Jos\u00e9 Luis Flores","orcid":"https://orcid.org/0000-0002-5555-9712"},"institutions":[{"id":"https://openalex.org/I169108374","display_name":"University of the Basque Country","ror":"https://ror.org/000xsnr85","country_code":"ES","type":"education","lineage":["https://openalex.org/I169108374"]}],"countries":["ES"],"is_corresponding":false,"raw_author_name":"Jose Luis Flores","raw_affiliation_strings":["University of the Basque Country UPV/EHU, Donostia/San Sebasti\u00e1n, Spain"],"raw_orcid":"https://orcid.org/0000-0002-5555-9712","affiliations":[{"raw_affiliation_string":"University of the Basque Country UPV/EHU, Donostia/San Sebasti\u00e1n, Spain","institution_ids":["https://openalex.org/I169108374"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5050357792","display_name":"Mikel Iturbe","orcid":"https://orcid.org/0000-0001-9641-5646"},"institutions":[{"id":"https://openalex.org/I162361429","display_name":"Mondragon Unibertsitatea","ror":"https://ror.org/00wvqgd19","country_code":"ES","type":"education","lineage":["https://openalex.org/I162361429"]}],"countries":["ES"],"is_corresponding":false,"raw_author_name":"Mikel Iturbe","raw_affiliation_strings":["Mondragon Unibertsitatea, Arrasate/Mondrag\u00f3n, Spain"],"raw_orcid":"https://orcid.org/0000-0001-9641-5646","affiliations":[{"raw_affiliation_string":"Mondragon Unibertsitatea, Arrasate/Mondrag\u00f3n, Spain","institution_ids":["https://openalex.org/I162361429"]}]}],"institutions":[],"countries_distinct_count":2,"institutions_distinct_count":4,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":null,"has_fulltext":true,"cited_by_count":1,"citation_normalized_percentile":null,"cited_by_percentile_year":null,"biblio":{"volume":null,"issue":null,"first_page":"550","last_page":"554"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":0.9995999932289124,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":0.9995999932289124,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10951","display_name":"Cryptographic Implementations and Security","score":0.9980999827384949,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T12495","display_name":"Electrostatic Discharge in Electronics","score":0.9936000108718872,"subfield":{"id":"https://openalex.org/subfields/2208","display_name":"Electrical and Electronic Engineering"},"field":{"id":"https://openalex.org/fields/22","display_name":"Engineering"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/fuzz-testing","display_name":"Fuzz testing","score":0.9644644260406494},{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.6996439695358276},{"id":"https://openalex.org/keywords/side-channel-attack","display_name":"Side channel attack","score":0.6503881216049194},{"id":"https://openalex.org/keywords/workflow","display_name":"Workflow","score":0.5698820948600769},{"id":"https://openalex.org/keywords/channel","display_name":"Channel (broadcasting)","score":0.4345479905605316},{"id":"https://openalex.org/keywords/programming-language","display_name":"Programming language","score":0.2184794545173645},{"id":"https://openalex.org/keywords/database","display_name":"Database","score":0.1754215955734253},{"id":"https://openalex.org/keywords/computer-security","display_name":"Computer security","score":0.16016659140586853},{"id":"https://openalex.org/keywords/computer-network","display_name":"Computer network","score":0.13420888781547546},{"id":"https://openalex.org/keywords/cryptography","display_name":"Cryptography","score":0.08458176255226135},{"id":"https://openalex.org/keywords/software","display_name":"Software","score":0.08330434560775757}],"concepts":[{"id":"https://openalex.org/C111065885","wikidata":"https://www.wikidata.org/wiki/Q1189053","display_name":"Fuzz testing","level":3,"score":0.9644644260406494},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.6996439695358276},{"id":"https://openalex.org/C49289754","wikidata":"https://www.wikidata.org/wiki/Q2267081","display_name":"Side channel attack","level":3,"score":0.6503881216049194},{"id":"https://openalex.org/C177212765","wikidata":"https://www.wikidata.org/wiki/Q627335","display_name":"Workflow","level":2,"score":0.5698820948600769},{"id":"https://openalex.org/C127162648","wikidata":"https://www.wikidata.org/wiki/Q16858953","display_name":"Channel (broadcasting)","level":2,"score":0.4345479905605316},{"id":"https://openalex.org/C199360897","wikidata":"https://www.wikidata.org/wiki/Q9143","display_name":"Programming language","level":1,"score":0.2184794545173645},{"id":"https://openalex.org/C77088390","wikidata":"https://www.wikidata.org/wiki/Q8513","display_name":"Database","level":1,"score":0.1754215955734253},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.16016659140586853},{"id":"https://openalex.org/C31258907","wikidata":"https://www.wikidata.org/wiki/Q1301371","display_name":"Computer network","level":1,"score":0.13420888781547546},{"id":"https://openalex.org/C178489894","wikidata":"https://www.wikidata.org/wiki/Q8789","display_name":"Cryptography","level":2,"score":0.08458176255226135},{"id":"https://openalex.org/C2777904410","wikidata":"https://www.wikidata.org/wiki/Q7397","display_name":"Software","level":2,"score":0.08330434560775757}],"mesh":[],"locations_count":3,"locations":[{"id":"doi:10.1145/3696630.3728497","is_oa":true,"landing_page_url":"https://doi.org/10.1145/3696630.3728497","pdf_url":"https://dl.acm.org/doi/pdf/10.1145/3696630.3728497","source":null,"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the 33rd ACM International Conference on the Foundations of Software Engineering","raw_type":"proceedings-article"},{"id":"pmh:oai:ebiltegia.mondragon.edu:20.500.11984/14265","is_oa":true,"landing_page_url":"https://hdl.handle.net/20.500.11984/14265","pdf_url":null,"source":{"id":"https://openalex.org/S4377196532","display_name":"eRepository Mondragon University (Mondragon University)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I162361429","host_organization_name":"Mondragon Unibertsitatea","host_organization_lineage":["https://openalex.org/I162361429"],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":"ACM Joint Meeting on European Software Engineering Conference and Symposium on the Foundations of Software Engineering (ESEC/FSE) 33. Trondheim (Noruega), June 23-28 2025","raw_type":null},{"id":"pmh:oai:eprints.ucl.ac.uk.OAI2:10207729","is_oa":false,"landing_page_url":"https://discovery.ucl.ac.uk/id/eprint/10207729/","pdf_url":null,"source":{"id":"https://openalex.org/S4306400024","display_name":"UCL Discovery (University College London)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I45129253","host_organization_name":"University College London","host_organization_lineage":["https://openalex.org/I45129253"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":"In: Proceedings of the 33rd ACM International Conference on the Foundations of Software Engineering (FSE Companion \u201925). (pp. pp. 550-554). ACM (2025)","raw_type":"Proceedings paper"}],"best_oa_location":{"id":"doi:10.1145/3696630.3728497","is_oa":true,"landing_page_url":"https://doi.org/10.1145/3696630.3728497","pdf_url":"https://dl.acm.org/doi/pdf/10.1145/3696630.3728497","source":null,"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the 33rd ACM International Conference on the Foundations of Software Engineering","raw_type":"proceedings-article"},"sustainable_development_goals":[{"display_name":"Decent work and economic growth","id":"https://metadata.un.org/sdg/8","score":0.4000000059604645}],"awards":[{"id":"https://openalex.org/G1643949827","display_name":null,"funder_award_id":"AEI/10.13039/501100011033","funder_id":"https://openalex.org/F4320335598","funder_display_name":"Agencia Estatal de Investigaci\u00f3n"},{"id":"https://openalex.org/G205667250","display_name":"EPSRC Centre for Doctoral Training in Cybersecurity","funder_award_id":"EP/S022503/1","funder_id":"https://openalex.org/F4320334627","funder_display_name":"Engineering and Physical Sciences Research Council"},{"id":"https://openalex.org/G2262748287","display_name":null,"funder_award_id":"501100011033","funder_id":"https://openalex.org/F4320335598","funder_display_name":"Agencia Estatal de Investigaci\u00f3n"},{"id":"https://openalex.org/G300979063","display_name":null,"funder_award_id":"10.13039/501100011033","funder_id":"https://openalex.org/F4320335598","funder_display_name":"Agencia Estatal de Investigaci\u00f3n"},{"id":"https://openalex.org/G3480869486","display_name":null,"funder_award_id":"13039","funder_id":"https://openalex.org/F4320335598","funder_display_name":"Agencia Estatal de Investigaci\u00f3n"},{"id":"https://openalex.org/G5080475149","display_name":null,"funder_award_id":"10.13039","funder_id":"https://openalex.org/F4320335598","funder_display_name":"Agencia Estatal de Investigaci\u00f3n"},{"id":"https://openalex.org/G7084143925","display_name":null,"funder_award_id":"AEI/10","funder_id":"https://openalex.org/F4320335598","funder_display_name":"Agencia Estatal de Investigaci\u00f3n"},{"id":"https://openalex.org/G7266728691","display_name":null,"funder_award_id":"13039/501100011033","funder_id":"https://openalex.org/F4320335598","funder_display_name":"Agencia Estatal de Investigaci\u00f3n"},{"id":"https://openalex.org/G7535663061","display_name":null,"funder_award_id":"AEI/10.","funder_id":"https://openalex.org/F4320335598","funder_display_name":"Agencia Estatal de Investigaci\u00f3n"}],"funders":[{"id":"https://openalex.org/F4320321705","display_name":"Eusko Jaurlaritza","ror":"https://ror.org/00pz2fp31"},{"id":"https://openalex.org/F4320334627","display_name":"Engineering and Physical Sciences Research Council","ror":"https://ror.org/0439y7842"},{"id":"https://openalex.org/F4320335598","display_name":"Agencia Estatal de Investigaci\u00f3n","ror":null}],"has_content":{"pdf":true,"grobid_xml":true},"content_urls":{"pdf":"https://content.openalex.org/works/W4412703873.pdf","grobid_xml":"https://content.openalex.org/works/W4412703873.grobid-xml"},"referenced_works_count":16,"referenced_works":["https://openalex.org/W2128728535","https://openalex.org/W2929072158","https://openalex.org/W2947814692","https://openalex.org/W2963453404","https://openalex.org/W2989641698","https://openalex.org/W3179601963","https://openalex.org/W3185256938","https://openalex.org/W3203012334","https://openalex.org/W4286206335","https://openalex.org/W4289038676","https://openalex.org/W4298468057","https://openalex.org/W4304014266","https://openalex.org/W4323842583","https://openalex.org/W4400578969","https://openalex.org/W4403674658","https://openalex.org/W6761676719"],"related_works":["https://openalex.org/W4391375266","https://openalex.org/W2899084033","https://openalex.org/W2748952813","https://openalex.org/W2511770387","https://openalex.org/W3120811337","https://openalex.org/W2766647240","https://openalex.org/W4385301282","https://openalex.org/W2990186179","https://openalex.org/W4210660460","https://openalex.org/W3203597304"],"abstract_inverted_index":{"Fuzzing,":[0],"a":[1,65,86],"powerful":[2],"tool":[3],"for":[4,53,116],"vulnerability":[5],"discovery,":[6],"is":[7,33,51,131],"limited":[8,34],"by":[9],"the":[10,47,93,98,114,128],"coarse-grained,":[11],"binary":[12,30,129],"nature":[13],"of":[14,21,38],"its":[15],"crash":[16],"detection":[17],"oracle.":[18],"The":[19],"use":[20],"sanitizers":[22],"strengthens":[23],"this":[24,63],"oracle":[25,49],"but":[26],"requires":[27],"recompilation":[28],"or":[29],"rewriting,":[31],"and":[32,122],"to":[35,45,71,105,119],"known":[36,106],"patterns":[37],"vulnerabilities.":[39],"We":[40],"investigate":[41],"an":[42],"alternative":[43],"way":[44],"strengthen":[46],"implicit":[48],"that":[50],"suitable":[52],"small":[54],"(IoT-sized)":[55],"devices:":[56],"electromagnetic":[57],"(EM)":[58],"side-channel":[59],"analysis.":[60],"By":[61],"integrating":[62],"into":[64],"fuzzing":[66,121],"campaign":[67],"we":[68],"are":[69],"able":[70],"detect":[72],"anomalous":[73],"program":[74],"states":[75],"through":[76],"physical":[77],"execution":[78],"patterns.":[79],"GAFLERNA,":[80],"our":[81],"EM-enhanced":[82],"AFL++":[83],"framework,":[84],"achieves":[85],"87%":[87],"correlation":[88],"with":[89],"sanitizer":[90],"findings":[91],"in":[92],"best":[94],"case,":[95],"without":[96],"modifying":[97],"executable,":[99],"while":[100],"discovering":[101],"104":[102],"new":[103],"paths":[104],"crashes":[107],"across":[108],"four":[109],"real-world":[110],"programs.":[111],"This":[112],"reveals":[113],"potential":[115],"hardware-level":[117],"feedback":[118],"extend":[120],"analyse":[123],"IoT":[124],"programs":[125],"where":[126],"only":[127],"code":[130],"available.":[132]},"counts_by_year":[{"year":2026,"cited_by_count":1}],"updated_date":"2026-07-19T07:52:34.831488","created_date":"2025-10-10T00:00:00"}