{"id":"https://openalex.org/W4413267897","doi":"https://doi.org/10.1145/3696630.3728546","title":"Grey-Box Fuzzing in Constrained Ultra-Large Systems: Lessons for SE Community","display_name":"Grey-Box Fuzzing in Constrained Ultra-Large Systems: Lessons for SE Community","publication_year":2025,"publication_date":"2025-06-23","ids":{"openalex":"https://openalex.org/W4413267897","doi":"https://doi.org/10.1145/3696630.3728546"},"language":"en","primary_location":{"id":"doi:10.1145/3696630.3728546","is_oa":true,"landing_page_url":"https://doi.org/10.1145/3696630.3728546","pdf_url":null,"source":null,"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the 33rd ACM International Conference on the Foundations of Software Engineering","raw_type":"proceedings-article"},"type":"article","indexed_in":["crossref"],"open_access":{"is_oa":true,"oa_status":"gold","oa_url":"https://doi.org/10.1145/3696630.3728546","any_repository_has_fulltext":null},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5072377532","display_name":"Jiazhao Yu","orcid":null},"institutions":[{"id":"https://openalex.org/I157773358","display_name":"Sun Yat-sen University","ror":"https://ror.org/0064kty71","country_code":"CN","type":"education","lineage":["https://openalex.org/I157773358"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Jiazhao Yu","raw_affiliation_strings":["Sun Yat-sen University, Guangzhou, China"],"raw_orcid":"https://orcid.org/0009-0002-6484-3261","affiliations":[{"raw_affiliation_string":"Sun Yat-sen University, Guangzhou, China","institution_ids":["https://openalex.org/I157773358"]}]},{"author_position":"middle","author":{"id":null,"display_name":"Yanlun Tu","orcid":"https://orcid.org/0000-0002-3632-5339"},"institutions":[{"id":"https://openalex.org/I4210153035","display_name":"Shanghai Construction Group (China)","ror":"https://ror.org/04azzhq34","country_code":"CN","type":"company","lineage":["https://openalex.org/I4210153035"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Yanlun Tu","raw_affiliation_strings":["Ant Group, shanghai, China"],"raw_orcid":"https://orcid.org/0000-0002-3632-5339","affiliations":[{"raw_affiliation_string":"Ant Group, shanghai, China","institution_ids":["https://openalex.org/I4210153035"]}]},{"author_position":"middle","author":{"id":null,"display_name":"Zhanlei Zhang","orcid":"https://orcid.org/0009-0003-2455-4913"},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Zhanlei Zhang","raw_affiliation_strings":["Macquaire University, Sydney, Australia"],"raw_orcid":"https://orcid.org/0009-0003-2455-4913","affiliations":[{"raw_affiliation_string":"Macquaire University, Sydney, Australia","institution_ids":[]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5020793859","display_name":"Tiehua Zhang","orcid":"https://orcid.org/0000-0002-7195-4472"},"institutions":[{"id":"https://openalex.org/I116953780","display_name":"Tongji University","ror":"https://ror.org/03rc6as71","country_code":"CN","type":"education","lineage":["https://openalex.org/I116953780"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Tiehua Zhang","raw_affiliation_strings":["Tongji University, shanghai, China"],"raw_orcid":"https://orcid.org/0000-0002-7195-4472","affiliations":[{"raw_affiliation_string":"Tongji University, shanghai, China","institution_ids":["https://openalex.org/I116953780"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5101245892","display_name":"Cheng Xu","orcid":null},"institutions":[{"id":"https://openalex.org/I4210153035","display_name":"Shanghai Construction Group (China)","ror":"https://ror.org/04azzhq34","country_code":"CN","type":"company","lineage":["https://openalex.org/I4210153035"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Cheng Xu","raw_affiliation_strings":["Ant Group, shanghai, China"],"raw_orcid":"https://orcid.org/0009-0001-0067-2929","affiliations":[{"raw_affiliation_string":"Ant Group, shanghai, China","institution_ids":["https://openalex.org/I4210153035"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5084826798","display_name":"Weigang Wu","orcid":"https://orcid.org/0000-0002-4714-7021"},"institutions":[{"id":"https://openalex.org/I157773358","display_name":"Sun Yat-sen University","ror":"https://ror.org/0064kty71","country_code":"CN","type":"education","lineage":["https://openalex.org/I157773358"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Weigang Wu","raw_affiliation_strings":["Sun Yat-sen University, guangzhou, China"],"raw_orcid":"https://orcid.org/0000-0002-4714-7021","affiliations":[{"raw_affiliation_string":"Sun Yat-sen University, guangzhou, China","institution_ids":["https://openalex.org/I157773358"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5027335548","display_name":"Hong Jin Kang","orcid":"https://orcid.org/0000-0001-7335-7295"},"institutions":[{"id":"https://openalex.org/I129604602","display_name":"The University of Sydney","ror":"https://ror.org/0384j8v12","country_code":"AU","type":"education","lineage":["https://openalex.org/I129604602"]}],"countries":["AU"],"is_corresponding":false,"raw_author_name":"Hong Jin Kang","raw_affiliation_strings":["University of Sydney, sydney, Australia"],"raw_orcid":"https://orcid.org/0000-0001-7335-7295","affiliations":[{"raw_affiliation_string":"University of Sydney, sydney, Australia","institution_ids":["https://openalex.org/I129604602"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5081182489","display_name":"Xi Zheng","orcid":"https://orcid.org/0000-0002-2572-2355"},"institutions":[{"id":"https://openalex.org/I99043593","display_name":"Macquarie University","ror":"https://ror.org/01sf06y89","country_code":"AU","type":"education","lineage":["https://openalex.org/I99043593"]}],"countries":["AU"],"is_corresponding":false,"raw_author_name":"Xi Zheng","raw_affiliation_strings":["Macquarie University, sydney, Australia"],"raw_orcid":"https://orcid.org/0000-0002-2572-2355","affiliations":[{"raw_affiliation_string":"Macquarie University, sydney, Australia","institution_ids":["https://openalex.org/I99043593"]}]}],"institutions":[],"countries_distinct_count":2,"institutions_distinct_count":8,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":0.0,"has_fulltext":false,"cited_by_count":0,"citation_normalized_percentile":{"value":0.20421352,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":null,"biblio":{"volume":null,"issue":null,"first_page":"204","last_page":"214"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10715","display_name":"Distributed and Parallel Computing Systems","score":0.9718000292778015,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T10715","display_name":"Distributed and Parallel Computing Systems","score":0.9718000292778015,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T12784","display_name":"Modular Robots and Swarm Intelligence","score":0.9528999924659729,"subfield":{"id":"https://openalex.org/subfields/2210","display_name":"Mechanical Engineering"},"field":{"id":"https://openalex.org/fields/22","display_name":"Engineering"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11986","display_name":"Scientific Computing and Data Management","score":0.9441999793052673,"subfield":{"id":"https://openalex.org/subfields/1802","display_name":"Information Systems and Management"},"field":{"id":"https://openalex.org/fields/18","display_name":"Decision Sciences"},"domain":{"id":"https://openalex.org/domains/2","display_name":"Social Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/fuzz-testing","display_name":"Fuzz testing","score":0.9091767072677612},{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.6012323498725891},{"id":"https://openalex.org/keywords/operating-system","display_name":"Operating system","score":0.14874860644340515},{"id":"https://openalex.org/keywords/software","display_name":"Software","score":0.10829874873161316}],"concepts":[{"id":"https://openalex.org/C111065885","wikidata":"https://www.wikidata.org/wiki/Q1189053","display_name":"Fuzz testing","level":3,"score":0.9091767072677612},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.6012323498725891},{"id":"https://openalex.org/C111919701","wikidata":"https://www.wikidata.org/wiki/Q9135","display_name":"Operating system","level":1,"score":0.14874860644340515},{"id":"https://openalex.org/C2777904410","wikidata":"https://www.wikidata.org/wiki/Q7397","display_name":"Software","level":2,"score":0.10829874873161316}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1145/3696630.3728546","is_oa":true,"landing_page_url":"https://doi.org/10.1145/3696630.3728546","pdf_url":null,"source":null,"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the 33rd ACM International Conference on the Foundations of Software Engineering","raw_type":"proceedings-article"}],"best_oa_location":{"id":"doi:10.1145/3696630.3728546","is_oa":true,"landing_page_url":"https://doi.org/10.1145/3696630.3728546","pdf_url":null,"source":null,"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the 33rd ACM International Conference on the Foundations of Software Engineering","raw_type":"proceedings-article"},"sustainable_development_goals":[],"awards":[{"id":"https://openalex.org/G1551812961","display_name":"Advancing Robust Autonomy in Cyber-Physical Systems","funder_award_id":"FT240100269","funder_id":"https://openalex.org/F4320334704","funder_display_name":"Australian Research Council"}],"funders":[{"id":"https://openalex.org/F4320334704","display_name":"Australian Research Council","ror":"https://ror.org/05mmh0f86"}],"has_content":{"grobid_xml":false,"pdf":false},"content_urls":null,"referenced_works_count":15,"referenced_works":["https://openalex.org/W40327287","https://openalex.org/W2002934700","https://openalex.org/W2911282308","https://openalex.org/W2912416028","https://openalex.org/W2914452207","https://openalex.org/W3033777149","https://openalex.org/W3109716606","https://openalex.org/W4285827657","https://openalex.org/W4288084466","https://openalex.org/W4392652182","https://openalex.org/W4399213764","https://openalex.org/W4400484607","https://openalex.org/W4404839798","https://openalex.org/W4404851089","https://openalex.org/W6840989590"],"related_works":["https://openalex.org/W4391375266","https://openalex.org/W2899084033","https://openalex.org/W2748952813","https://openalex.org/W2511770387","https://openalex.org/W3120811337","https://openalex.org/W2766647240","https://openalex.org/W4385301282","https://openalex.org/W2990186179","https://openalex.org/W4210660460","https://openalex.org/W3203597304"],"abstract_inverted_index":{"Testing":[0],"ultra-large":[1],"microservices-based":[2],"FinTech":[3],"systems":[4],"presents":[5],"significant":[6],"challenges,":[7],"including":[8],"restricted":[9],"access":[10],"to":[11,39,82,89,125,152],"production":[12,85],"environments,":[13],"complex":[14],"dependencies,":[15],"and":[16,36,119,130,145,150],"stringent":[17],"security":[18],"constraints.":[19],"We":[20],"propose":[21],"SandBoxFuzz,":[22],"a":[23,53,95,109,134,143],"scalable":[24],"grey-box":[25],"fuzzing":[26,97],"technique":[27],"that":[28,70],"addresses":[29],"these":[30],"limitations":[31],"by":[32],"leveraging":[33],"aspect-oriented":[34],"programming":[35],"runtime":[37,67],"reflection":[38],"enable":[40],"dynamic":[41],"specification":[42],"mining,":[43],"generating":[44],"targeted":[45],"inputs":[46],"for":[47,66,148],"constrained":[48],"environments.":[49],"SandBoxFuzz":[50,77,107],"also":[51],"introduces":[52],"log-based":[54],"coverage":[55,68],"mechanism,":[56],"seamlessly":[57],"integrated":[58],"into":[59],"the":[60,64],"build":[61],"pipeline,":[62],"eliminating":[63],"need":[65],"agents":[69],"are":[71],"often":[72],"infeasible":[73],"in":[74,103,112,133],"industrial":[75,136],"settings.":[76],"has":[78],"been":[79],"successfully":[80],"deployed":[81],"Ant":[83],"Group's":[84],"line":[86],"and,":[87],"compared":[88],"an":[90],"initial":[91],"solution":[92],"built":[93],"on":[94],"state-of-the-art":[96],"framework,":[98],"it":[99],"demonstrates":[100],"superior":[101],"performance":[102],"their":[104],"microservices":[105,155],"software.":[106],"achieves":[108],"7.5%":[110],"increase":[111],"branch":[113],"coverage,":[114],"identifies":[115],"1,850":[116],"additional":[117],"exceptions,":[118],"reduces":[120],"setup":[121],"time":[122],"from":[123],"hours":[124],"minutes,":[126],"highlighting":[127],"its":[128],"effectiveness":[129],"practical":[131,144],"utility":[132],"real-world":[135],"environment.":[137],"By":[138],"open-sourcing":[139],"SandBoxFuzz1,":[140],"we":[141],"provide":[142],"effective":[146],"tool":[147],"researchers":[149],"practitioners":[151],"test":[153],"large-scale":[154],"systems.":[156]},"counts_by_year":[],"updated_date":"2026-06-22T08:00:12.763002","created_date":"2025-10-10T00:00:00"}