{"id":"https://openalex.org/W4402860132","doi":"https://doi.org/10.1145/3697014","title":"ZigZagFuzz: Interleaved Fuzzing of Program Options and Files","display_name":"ZigZagFuzz: Interleaved Fuzzing of Program Options and Files","publication_year":2024,"publication_date":"2024-09-26","ids":{"openalex":"https://openalex.org/W4402860132","doi":"https://doi.org/10.1145/3697014"},"language":"en","primary_location":{"id":"doi:10.1145/3697014","is_oa":false,"landing_page_url":"https://doi.org/10.1145/3697014","pdf_url":null,"source":{"id":"https://openalex.org/S142627899","display_name":"ACM Transactions on Software Engineering and Methodology","issn_l":"1049-331X","issn":["1049-331X","1557-7392"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310319798","host_organization_name":"Association for Computing Machinery","host_organization_lineage":["https://openalex.org/P4310319798"],"host_organization_lineage_names":["Association for Computing Machinery"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"ACM Transactions on Software Engineering and Methodology","raw_type":"journal-article"},"type":"article","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5032177199","display_name":"Ahcheong Lee","orcid":"https://orcid.org/0000-0002-3798-3667"},"institutions":[{"id":"https://openalex.org/I157485424","display_name":"Korea Advanced Institute of Science and Technology","ror":"https://ror.org/05apxxy63","country_code":"KR","type":"education","lineage":["https://openalex.org/I157485424"]}],"countries":["KR"],"is_corresponding":true,"raw_author_name":"Ahcheong Lee","raw_affiliation_strings":["KAIST, Daejeon, South Korea","KAIST, South Korea"],"raw_orcid":"https://orcid.org/0000-0002-3798-3667","affiliations":[{"raw_affiliation_string":"KAIST, Daejeon, South Korea","institution_ids":["https://openalex.org/I157485424"]},{"raw_affiliation_string":"KAIST, South Korea","institution_ids":["https://openalex.org/I157485424"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5103518466","display_name":"Y.K. Choi","orcid":"https://orcid.org/0009-0009-8467-3424"},"institutions":[{"id":"https://openalex.org/I157485424","display_name":"Korea Advanced Institute of Science and Technology","ror":"https://ror.org/05apxxy63","country_code":"KR","type":"education","lineage":["https://openalex.org/I157485424"]}],"countries":["KR"],"is_corresponding":false,"raw_author_name":"Youngseok Choi","raw_affiliation_strings":["KAIST, Daejeon, South Korea","KAIST, South Korea"],"raw_orcid":"https://orcid.org/0009-0009-8467-3424","affiliations":[{"raw_affiliation_string":"KAIST, Daejeon, South Korea","institution_ids":["https://openalex.org/I157485424"]},{"raw_affiliation_string":"KAIST, South Korea","institution_ids":["https://openalex.org/I157485424"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5019241757","display_name":"Shin Hong","orcid":"https://orcid.org/0000-0003-4217-6031"},"institutions":[{"id":"https://openalex.org/I163753206","display_name":"Chungbuk National University","ror":"https://ror.org/02wnxgj78","country_code":"KR","type":"education","lineage":["https://openalex.org/I163753206"]}],"countries":["KR"],"is_corresponding":false,"raw_author_name":"Shin Hong","raw_affiliation_strings":["Chungbuk National University, Cheongju, South Korea","Chungbuk National University, South Korea"],"raw_orcid":"https://orcid.org/0000-0003-4217-6031","affiliations":[{"raw_affiliation_string":"Chungbuk National University, Cheongju, South Korea","institution_ids":["https://openalex.org/I163753206"]},{"raw_affiliation_string":"Chungbuk National University, South Korea","institution_ids":["https://openalex.org/I163753206"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5100765696","display_name":"Yunho Kim","orcid":"https://orcid.org/0000-0001-6366-6916"},"institutions":[{"id":"https://openalex.org/I4575257","display_name":"Hanyang University","ror":"https://ror.org/046865y68","country_code":"KR","type":"education","lineage":["https://openalex.org/I4575257"]}],"countries":["KR"],"is_corresponding":false,"raw_author_name":"Yunho Kim","raw_affiliation_strings":["Hanyang University, Seoul, South Korea","Hanyang University, South Korea"],"raw_orcid":"https://orcid.org/0000-0001-6366-6916","affiliations":[{"raw_affiliation_string":"Hanyang University, Seoul, South Korea","institution_ids":["https://openalex.org/I4575257"]},{"raw_affiliation_string":"Hanyang University, South Korea","institution_ids":["https://openalex.org/I4575257"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5079971094","display_name":"Kyutae Cho","orcid":null},"institutions":[{"id":"https://openalex.org/I206093572","display_name":"Nexen (Canada)","ror":"https://ror.org/04zwxgg32","country_code":"CA","type":"company","lineage":["https://openalex.org/I206093572"]},{"id":"https://openalex.org/I4210089444","display_name":"GS Caltex (South Korea)","ror":"https://ror.org/00bvkj141","country_code":"KR","type":"company","lineage":["https://openalex.org/I4210089444"]}],"countries":["CA","KR"],"is_corresponding":false,"raw_author_name":"Kyutae Cho","raw_affiliation_strings":["LIG Nex1 AI R&amp;D, Seoul, South Korea","LIG Nex1 AI R&amp;D, South Korea"],"raw_orcid":"https://orcid.org/0009-0008-4037-1486","affiliations":[{"raw_affiliation_string":"LIG Nex1 AI R&amp;D, Seoul, South Korea","institution_ids":["https://openalex.org/I206093572"]},{"raw_affiliation_string":"LIG Nex1 AI R&amp;D, South Korea","institution_ids":["https://openalex.org/I4210089444"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5081305477","display_name":"Moonzoo Kim","orcid":"https://orcid.org/0000-0002-1424-1177"},"institutions":[{"id":"https://openalex.org/I157485424","display_name":"Korea Advanced Institute of Science and Technology","ror":"https://ror.org/05apxxy63","country_code":"KR","type":"education","lineage":["https://openalex.org/I157485424"]}],"countries":["KR"],"is_corresponding":false,"raw_author_name":"Moonzoo Kim","raw_affiliation_strings":["KAIST, Daejeon, South Korea","KAIST, South Korea"],"raw_orcid":"https://orcid.org/0000-0002-1424-1177","affiliations":[{"raw_affiliation_string":"KAIST, Daejeon, South Korea","institution_ids":["https://openalex.org/I157485424"]},{"raw_affiliation_string":"KAIST, South Korea","institution_ids":["https://openalex.org/I157485424"]}]}],"institutions":[],"countries_distinct_count":2,"institutions_distinct_count":6,"corresponding_author_ids":["https://openalex.org/A5032177199"],"corresponding_institution_ids":["https://openalex.org/I157485424"],"apc_list":null,"apc_paid":null,"fwci":0.4642,"has_fulltext":false,"cited_by_count":1,"citation_normalized_percentile":{"value":0.68302277,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":{"min":96,"max":98},"biblio":{"volume":"34","issue":"2","first_page":"1","last_page":"31"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10743","display_name":"Software Testing and Debugging Techniques","score":0.9998000264167786,"subfield":{"id":"https://openalex.org/subfields/1712","display_name":"Software"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T10743","display_name":"Software Testing and Debugging Techniques","score":0.9998000264167786,"subfield":{"id":"https://openalex.org/subfields/1712","display_name":"Software"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11032","display_name":"VLSI and Analog Circuit Testing","score":0.9969000220298767,"subfield":{"id":"https://openalex.org/subfields/1708","display_name":"Hardware and Architecture"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10904","display_name":"Embedded Systems Design Techniques","score":0.9965000152587891,"subfield":{"id":"https://openalex.org/subfields/1708","display_name":"Hardware and Architecture"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/fuzz-testing","display_name":"Fuzz testing","score":0.9583236575126648},{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.8450301885604858},{"id":"https://openalex.org/keywords/programming-language","display_name":"Programming language","score":0.3797626495361328},{"id":"https://openalex.org/keywords/software","display_name":"Software","score":0.16752484440803528}],"concepts":[{"id":"https://openalex.org/C111065885","wikidata":"https://www.wikidata.org/wiki/Q1189053","display_name":"Fuzz testing","level":3,"score":0.9583236575126648},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.8450301885604858},{"id":"https://openalex.org/C199360897","wikidata":"https://www.wikidata.org/wiki/Q9143","display_name":"Programming language","level":1,"score":0.3797626495361328},{"id":"https://openalex.org/C2777904410","wikidata":"https://www.wikidata.org/wiki/Q7397","display_name":"Software","level":2,"score":0.16752484440803528}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1145/3697014","is_oa":false,"landing_page_url":"https://doi.org/10.1145/3697014","pdf_url":null,"source":{"id":"https://openalex.org/S142627899","display_name":"ACM Transactions on Software Engineering and Methodology","issn_l":"1049-331X","issn":["1049-331X","1557-7392"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310319798","host_organization_name":"Association for Computing Machinery","host_organization_lineage":["https://openalex.org/P4310319798"],"host_organization_lineage_names":["Association for Computing Machinery"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"ACM Transactions on Software Engineering and Methodology","raw_type":"journal-article"}],"best_oa_location":null,"sustainable_development_goals":[],"awards":[{"id":"https://openalex.org/G7950906315","display_name":null,"funder_award_id":"(HY-2020)","funder_id":"https://openalex.org/F4320321142","funder_display_name":"Hanyang University"}],"funders":[{"id":"https://openalex.org/F4320321142","display_name":"Hanyang University","ror":"https://ror.org/046865y68"},{"id":"https://openalex.org/F4320332195","display_name":"Samsung","ror":"https://ror.org/04w3jy968"}],"has_content":{"pdf":false,"grobid_xml":false},"content_urls":null,"referenced_works_count":36,"referenced_works":["https://openalex.org/W2131191620","https://openalex.org/W2535617737","https://openalex.org/W2613534458","https://openalex.org/W2757104921","https://openalex.org/W2777430404","https://openalex.org/W2794670092","https://openalex.org/W2865298191","https://openalex.org/W2951091523","https://openalex.org/W2954292831","https://openalex.org/W2960121311","https://openalex.org/W2961870034","https://openalex.org/W2963350015","https://openalex.org/W2963846926","https://openalex.org/W2964097210","https://openalex.org/W2967191362","https://openalex.org/W2969901236","https://openalex.org/W2974819274","https://openalex.org/W2979357014","https://openalex.org/W3008477014","https://openalex.org/W3015291177","https://openalex.org/W3019428952","https://openalex.org/W3102086861","https://openalex.org/W3104664063","https://openalex.org/W3124739574","https://openalex.org/W3155466149","https://openalex.org/W3160244102","https://openalex.org/W3162301386","https://openalex.org/W3163844163","https://openalex.org/W3194771370","https://openalex.org/W4205761538","https://openalex.org/W4254882388","https://openalex.org/W4289038676","https://openalex.org/W4298112463","https://openalex.org/W4308641885","https://openalex.org/W4319736431","https://openalex.org/W6737694244"],"related_works":["https://openalex.org/W4391375266","https://openalex.org/W2748952813","https://openalex.org/W2511770387","https://openalex.org/W3120811337","https://openalex.org/W3203597304","https://openalex.org/W4385301282","https://openalex.org/W2990186179","https://openalex.org/W4248424560","https://openalex.org/W3023977444","https://openalex.org/W4210660460"],"abstract_inverted_index":{"Command-line":[0],"options":[1,33,64,100,149,206],"(e.g.,":[2],"-l":[3],",":[4,6],"-F":[5],"-R":[7],"for":[8],"ls":[9],")":[10],"given":[11],"to":[12,80,119,157,194],"a":[13,124],"command-line":[14],"program":[15,32,63,86,99,126,135,148,205],"can":[16,34],"significantly":[17],"alternate":[18],"the":[19,22,57,74,85,90,114,181,200,219,226],"behaviors":[20],"of":[21,84,97,103,123,134,146,152],"program.":[23],"Thus,":[24],"fuzzing":[25,159],"not":[26],"only":[27],"file":[28,66,91,105,139,154],"input":[29,92,165],"but":[30],"also":[31],"improve":[35,158],"test":[36,50,170,189],"coverage":[37,51,190],"and":[38,52,65,89,107,138,191,214,225],"bug":[39,231],"detection.":[40],"In":[41],"this":[42],"article,":[43],"we":[44],"propose":[45],"ZigZagFuzz":[46,72,94,142,162,187],"which":[47],"achieves":[48],"higher":[49],"detects":[53,192],"more":[54,197],"bugs":[55,198,221],"than":[56,199],"state-of-the-art":[58,201],"fuzzers":[59,202],"by":[60,167,223],"separately":[61],"mutating":[62,98,104,147,153],"inputs":[67,106,140,171],"in":[68],"an":[69,131],"iterative/interleaving":[70],"manner.":[71],"applies":[73],"following":[75],"three":[76],"core":[77],"ideas.":[78],"First,":[79],"utilize":[81],"different":[82,116],"characteristics":[83],"option":[87,136],"domain":[88],"domain,":[93],"separates":[95],"phases":[96,145,151],"from":[101],"ones":[102],"performs":[108],"two":[109,115],"distinct":[110],"mutation":[111],"strategies":[112],"on":[113,173,180],"domains.":[117],"Second,":[118],"reach":[120],"deep":[121],"segments":[122],"target":[125],"that":[127,186,203],"are":[128],"accessed":[129],"through":[130],"interleaving":[132],"sequence":[133],"checks":[137],"checks,":[141],"continuously":[143],"interleaves":[144],"with":[150],"inputs.":[155],"Finally,":[156],"performance":[160],"further,":[161],"periodically":[163],"shrinks":[164],"corpus":[166],"removing":[168],"similar":[169],"based":[172],"their":[174],"function":[175],"coverage.":[176],"The":[177],"experiment":[178],"results":[179],"20":[182],"real-world":[183],"programs":[184],"show":[185],"improves":[188],"1.9":[193],"10.6":[195],"times":[196],"mutate":[204],"such":[207],"as":[208],"AFL++-argv,":[209],"AFL++-all,":[210],"Eclipser,":[211],"CarpetFuzz,":[212],"ConfigFuzz,":[213],"POWER.":[215],"We":[216],"have":[217],"reported":[218],"new":[220],"detected":[222],"ZigZagFuzz,":[224],"original":[227],"developers":[228],"confirmed":[229],"our":[230],"reports.":[232]},"counts_by_year":[{"year":2026,"cited_by_count":1}],"updated_date":"2025-12-23T23:11:35.936235","created_date":"2025-10-10T00:00:00"}
