{"id":"https://openalex.org/W4411450287","doi":"https://doi.org/10.1145/3715713","title":"MendelFuzz: The Return of the Deterministic Stage","display_name":"MendelFuzz: The Return of the Deterministic Stage","publication_year":2025,"publication_date":"2025-06-19","ids":{"openalex":"https://openalex.org/W4411450287","doi":"https://doi.org/10.1145/3715713"},"language":"en","primary_location":{"id":"doi:10.1145/3715713","is_oa":true,"landing_page_url":"https://doi.org/10.1145/3715713","pdf_url":null,"source":{"id":"https://openalex.org/S4404663975","display_name":"Proceedings of the ACM on software engineering.","issn_l":"2994-970X","issn":["2994-970X"],"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/P4310319798","host_organization_name":"Association for Computing Machinery","host_organization_lineage":["https://openalex.org/P4310319798"],"host_organization_lineage_names":["Association for Computing Machinery"],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the ACM on Software Engineering","raw_type":"journal-article"},"type":"article","indexed_in":["crossref"],"open_access":{"is_oa":true,"oa_status":"hybrid","oa_url":"https://doi.org/10.1145/3715713","any_repository_has_fulltext":true},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5107105914","display_name":"Han Zheng","orcid":"https://orcid.org/0009-0009-5689-3075"},"institutions":[{"id":"https://openalex.org/I5124864","display_name":"\u00c9cole Polytechnique F\u00e9d\u00e9rale de Lausanne","ror":"https://ror.org/02s376052","country_code":"CH","type":"education","lineage":["https://openalex.org/I2799323385","https://openalex.org/I5124864"]}],"countries":["CH"],"is_corresponding":false,"raw_author_name":"Han Zheng","raw_affiliation_strings":["EPFL, Lausanne, Switzerland"],"raw_orcid":"https://orcid.org/0009-0009-5689-3075","affiliations":[{"raw_affiliation_string":"EPFL, Lausanne, Switzerland","institution_ids":["https://openalex.org/I5124864"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5029770311","display_name":"Flavio Toffalini","orcid":"https://orcid.org/0000-0002-7114-5640"},"institutions":[{"id":"https://openalex.org/I5124864","display_name":"\u00c9cole Polytechnique F\u00e9d\u00e9rale de Lausanne","ror":"https://ror.org/02s376052","country_code":"CH","type":"education","lineage":["https://openalex.org/I2799323385","https://openalex.org/I5124864"]},{"id":"https://openalex.org/I904495901","display_name":"Ruhr University Bochum","ror":"https://ror.org/04tsk2644","country_code":"DE","type":"education","lineage":["https://openalex.org/I904495901"]}],"countries":["CH","DE"],"is_corresponding":false,"raw_author_name":"Flavio Toffalini","raw_affiliation_strings":["EPFL, Lausanne, Switzerland","Ruhr-Universit\u00e4t, Bochum, Germany"],"raw_orcid":"https://orcid.org/0000-0002-7114-5640","affiliations":[{"raw_affiliation_string":"EPFL, Lausanne, Switzerland","institution_ids":["https://openalex.org/I5124864"]},{"raw_affiliation_string":"Ruhr-Universit\u00e4t, Bochum, Germany","institution_ids":["https://openalex.org/I904495901"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5005260100","display_name":"Marcel B\u00f6hme","orcid":"https://orcid.org/0000-0002-4470-1824"},"institutions":[{"id":"https://openalex.org/I4210096592","display_name":"Max Planck Institute for Security and Privacy","ror":"https://ror.org/00bj0r217","country_code":"DE","type":"facility","lineage":["https://openalex.org/I149899117","https://openalex.org/I4210096592"]}],"countries":["DE"],"is_corresponding":false,"raw_author_name":"Marcel B\u00f6hme","raw_affiliation_strings":["MPI for Security and Privacy, Bochum, Germany"],"raw_orcid":"https://orcid.org/0000-0002-4470-1824","affiliations":[{"raw_affiliation_string":"MPI for Security and Privacy, Bochum, Germany","institution_ids":["https://openalex.org/I4210096592"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5065116578","display_name":"Mathias Payer","orcid":"https://orcid.org/0000-0001-5054-7547"},"institutions":[{"id":"https://openalex.org/I5124864","display_name":"\u00c9cole Polytechnique F\u00e9d\u00e9rale de Lausanne","ror":"https://ror.org/02s376052","country_code":"CH","type":"education","lineage":["https://openalex.org/I2799323385","https://openalex.org/I5124864"]}],"countries":["CH"],"is_corresponding":false,"raw_author_name":"Mathias Payer","raw_affiliation_strings":["EPFL, Lausanne, Switzerland"],"raw_orcid":"https://orcid.org/0000-0001-5054-7547","affiliations":[{"raw_affiliation_string":"EPFL, Lausanne, Switzerland","institution_ids":["https://openalex.org/I5124864"]}]}],"institutions":[],"countries_distinct_count":2,"institutions_distinct_count":4,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":2.128,"has_fulltext":false,"cited_by_count":2,"citation_normalized_percentile":{"value":0.87450109,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":{"min":91,"max":98},"biblio":{"volume":"2","issue":"FSE","first_page":"44","last_page":"64"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":0.9995999932289124,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":0.9995999932289124,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10743","display_name":"Software Testing and Debugging Techniques","score":0.9987000226974487,"subfield":{"id":"https://openalex.org/subfields/1712","display_name":"Software"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11424","display_name":"Security and Verification in Computing","score":0.9930999875068665,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.7641927003860474},{"id":"https://openalex.org/keywords/byte","display_name":"Byte","score":0.5907314419746399},{"id":"https://openalex.org/keywords/overhead","display_name":"Overhead (engineering)","score":0.4978446960449219},{"id":"https://openalex.org/keywords/code","display_name":"Code (set theory)","score":0.42621850967407227},{"id":"https://openalex.org/keywords/cover","display_name":"Cover (algebra)","score":0.4202398657798767},{"id":"https://openalex.org/keywords/algorithm","display_name":"Algorithm","score":0.395555704832077},{"id":"https://openalex.org/keywords/programming-language","display_name":"Programming language","score":0.10242500901222229},{"id":"https://openalex.org/keywords/set","display_name":"Set (abstract data type)","score":0.09407731890678406}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.7641927003860474},{"id":"https://openalex.org/C43364308","wikidata":"https://www.wikidata.org/wiki/Q8799","display_name":"Byte","level":2,"score":0.5907314419746399},{"id":"https://openalex.org/C2779960059","wikidata":"https://www.wikidata.org/wiki/Q7113681","display_name":"Overhead (engineering)","level":2,"score":0.4978446960449219},{"id":"https://openalex.org/C2776760102","wikidata":"https://www.wikidata.org/wiki/Q5139990","display_name":"Code (set theory)","level":3,"score":0.42621850967407227},{"id":"https://openalex.org/C2780428219","wikidata":"https://www.wikidata.org/wiki/Q16952335","display_name":"Cover (algebra)","level":2,"score":0.4202398657798767},{"id":"https://openalex.org/C11413529","wikidata":"https://www.wikidata.org/wiki/Q8366","display_name":"Algorithm","level":1,"score":0.395555704832077},{"id":"https://openalex.org/C199360897","wikidata":"https://www.wikidata.org/wiki/Q9143","display_name":"Programming language","level":1,"score":0.10242500901222229},{"id":"https://openalex.org/C177264268","wikidata":"https://www.wikidata.org/wiki/Q1514741","display_name":"Set (abstract data type)","level":2,"score":0.09407731890678406},{"id":"https://openalex.org/C127413603","wikidata":"https://www.wikidata.org/wiki/Q11023","display_name":"Engineering","level":0,"score":0.0},{"id":"https://openalex.org/C78519656","wikidata":"https://www.wikidata.org/wiki/Q101333","display_name":"Mechanical engineering","level":1,"score":0.0}],"mesh":[],"locations_count":2,"locations":[{"id":"doi:10.1145/3715713","is_oa":true,"landing_page_url":"https://doi.org/10.1145/3715713","pdf_url":null,"source":{"id":"https://openalex.org/S4404663975","display_name":"Proceedings of the ACM on software engineering.","issn_l":"2994-970X","issn":["2994-970X"],"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/P4310319798","host_organization_name":"Association for Computing Machinery","host_organization_lineage":["https://openalex.org/P4310319798"],"host_organization_lineage_names":["Association for Computing Machinery"],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the ACM on Software Engineering","raw_type":"journal-article"},{"id":"pmh:oai:infoscience.epfl.ch:20.500.14299/251493","is_oa":true,"landing_page_url":"https://infoscience.epfl.ch/handle/20.500.14299/251493","pdf_url":null,"source":{"id":"https://openalex.org/S4306400487","display_name":"Infoscience (Ecole Polytechnique F\u00e9d\u00e9rale de Lausanne)","issn_l":null,"issn":null,"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":null,"host_organization_name":null,"host_organization_lineage":[],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"research article"}],"best_oa_location":{"id":"doi:10.1145/3715713","is_oa":true,"landing_page_url":"https://doi.org/10.1145/3715713","pdf_url":null,"source":{"id":"https://openalex.org/S4404663975","display_name":"Proceedings of the ACM on software engineering.","issn_l":"2994-970X","issn":["2994-970X"],"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/P4310319798","host_organization_name":"Association for Computing Machinery","host_organization_lineage":["https://openalex.org/P4310319798"],"host_organization_lineage_names":["Association for Computing Machinery"],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the ACM on Software Engineering","raw_type":"journal-article"},"sustainable_development_goals":[{"display_name":"Peace, Justice and strong institutions","id":"https://metadata.un.org/sdg/16","score":0.8299999833106995}],"awards":[{"id":"https://openalex.org/G3513429588","display_name":null,"funder_award_id":"PCEGP2 186974","funder_id":"https://openalex.org/F4320320924","funder_display_name":"Schweizerischer Nationalfonds zur F\u00f6rderung der Wissenschaftlichen Forschung"}],"funders":[{"id":"https://openalex.org/F4320320924","display_name":"Schweizerischer Nationalfonds zur F\u00f6rderung der Wissenschaftlichen Forschung","ror":"https://ror.org/00yjd3n13"}],"has_content":{"pdf":false,"grobid_xml":false},"content_urls":null,"referenced_works_count":18,"referenced_works":["https://openalex.org/W2350778671","https://openalex.org/W2613534458","https://openalex.org/W2804093830","https://openalex.org/W2894732341","https://openalex.org/W2911282308","https://openalex.org/W2912797383","https://openalex.org/W2914452207","https://openalex.org/W2914630606","https://openalex.org/W2947182139","https://openalex.org/W3082737479","https://openalex.org/W4237993802","https://openalex.org/W4238124605","https://openalex.org/W4253752119","https://openalex.org/W4285417467","https://openalex.org/W4365806382","https://openalex.org/W4411337147","https://openalex.org/W6737694244","https://openalex.org/W6756301311"],"related_works":["https://openalex.org/W2051487156","https://openalex.org/W3042604642","https://openalex.org/W4242642347","https://openalex.org/W121858127","https://openalex.org/W2073681303","https://openalex.org/W2775143306","https://openalex.org/W4289329995","https://openalex.org/W2373574911","https://openalex.org/W2130675906","https://openalex.org/W2105209172"],"abstract_inverted_index":{"Can":[0],"a":[1,14,103,179,186,191,227,244],"fuzzer":[2],"cover":[3],"more":[4,92],"code":[5],"with":[6,270],"minimal":[7],"corruption":[8],"of":[9,36,45,115,142,155,162,169,200,230,236,247,281],"the":[10,18,37,55,63,67,74,79,88,99,109,117,134,139,150,153,156,160,166,173,197,201,234,237,248,273],"initial":[11],"seed?":[12],"Before":[13],"seed":[15,56,192],"is":[16,132],"fuzzed,":[17],"early":[19],"greybox":[20],"fuzzers":[21,107,269],"first":[22],"systematically":[23],"enumerated":[24],"slightly":[25],"corrupted":[26],"inputs":[27,69,171,203],"by":[28,112,148,241],"applying":[29,94],"every":[30,34],"mutation":[31,96],"operator":[32],"to":[33,54,61,102,159,216,225],"part":[35,246],"seed,":[38],"once":[39],"per":[40],"generated":[41,170],"input.":[42],"The":[43],"hope":[44],"this":[46],"so-called":[47],"\u201cdeterministic\u201d":[48],"stage":[49,90,111,131,158,240,276],"was":[50],"that":[51,86,177,266],"simple":[52],"changes":[53],"would":[57,70],"be":[58],"less":[59],"likely":[60],"break":[62],"complex":[64],"file":[65],"format;":[66],"resulting":[68],"find":[71,176],"bugs":[72],"in":[73,136,190,279],"program":[75],"logic":[76],"well":[77],"beyond":[78],"program\u2019s":[80],"parser.":[81],"However,":[82],"when":[83],"experiments":[84],"showed":[85],"disabling":[87],"deterministic":[89,110,118,127,130,144,157,239,250,275],"achieves":[91],"coverage,":[93],"multiple":[95],"operators":[97],"at":[98],"same":[100],"time":[101],"single":[104],"input,":[105],"most":[106],"disabled":[108],"default.":[113],"Instead":[114],"ignoring":[116],"stage,":[119],"we":[120,175,209],"analyze":[121],"its":[122],"potential":[123],"and":[124,152,184,205,261,271,283,301],"substantially":[125],"improve":[126],"exploration.":[128,145],"Our":[129,263],"now":[133],"default":[135,306],"AFL++,":[137],"reverting":[138],"earlier":[140],"decision":[141],"dropping":[143],"We":[146,253],"start":[147],"investigating":[149],"overhead":[151],"contribution":[154],"discovery":[161],"coverage-increasing":[163,202],"inputs.":[164,232],"While":[165],"sheer":[167],"number":[168,229],"explains":[172],"overhead,":[174],"only":[178,185,242],"few":[180,187],"critical":[181,188,219],"seeds":[182,220],"(20%),":[183],"bytes":[189,222],"(0.5%)":[193],"are":[194],"responsible":[195],"for":[196],"vast":[198],"majority":[199],"(83%":[204],"84%,":[206],"respectively).":[207],"Hence,":[208],"develop":[210],"an":[211],"efficient":[212],"technique,":[213],"called":[214],",":[215],"identify":[217],"these":[218],"/":[221],"so":[223],"as":[224,305],"prune":[226],"large":[228],"unnecessary":[231],"retains":[233],"benefits":[235],"classic":[238],"enumerating":[243],"tiny":[245],"total":[249],"state":[251],"space.":[252],"evaluate":[254],"implementation":[255],"on":[256,291],"two":[257],"benchmarking":[258],"frameworks,":[259],"FuzzBench":[260],"Magma.":[262],"evaluation":[264],"shows":[265],"outperforms":[267],"state-of-the-art":[268],"without":[272],"(old)":[274],"enabled,":[277],"both":[278],"terms":[280],"coverage":[282],"bug":[284],"finding.":[285],"also":[286],"discovered":[287],"8":[288],"new":[289],"CVEs":[290],"exhaustively":[292],"fuzzed":[293],"security-critical":[294],"applications.":[295],"Finally,":[296],"has":[297],"been":[298],"independently":[299],"evaluated":[300],"integrated":[302],"into":[303],"AFL++":[304],"option.":[307]},"counts_by_year":[{"year":2026,"cited_by_count":1},{"year":2025,"cited_by_count":1}],"updated_date":"2026-06-11T09:08:48.828518","created_date":"2025-10-10T00:00:00"}