{"id":"https://openalex.org/W4411523092","doi":"https://doi.org/10.1145/3728913","title":"Unlocking Low Frequency Syscalls in Kernel Fuzzing with Dependency-Based RAG","display_name":"Unlocking Low Frequency Syscalls in Kernel Fuzzing with Dependency-Based RAG","publication_year":2025,"publication_date":"2025-06-22","ids":{"openalex":"https://openalex.org/W4411523092","doi":"https://doi.org/10.1145/3728913"},"language":"en","primary_location":{"id":"doi:10.1145/3728913","is_oa":true,"landing_page_url":"https://doi.org/10.1145/3728913","pdf_url":null,"source":{"id":"https://openalex.org/S4404663975","display_name":"Proceedings of the ACM on software engineering.","issn_l":"2994-970X","issn":["2994-970X"],"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/P4310319798","host_organization_name":"Association for Computing Machinery","host_organization_lineage":["https://openalex.org/P4310319798"],"host_organization_lineage_names":["Association for Computing Machinery"],"type":"journal"},"license":"cc-by-nc-sa","license_id":"https://openalex.org/licenses/cc-by-nc-sa","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the ACM on Software Engineering","raw_type":"journal-article"},"type":"article","indexed_in":["crossref"],"open_access":{"is_oa":true,"oa_status":"hybrid","oa_url":"https://doi.org/10.1145/3728913","any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5100442940","display_name":"Zhiyu Zhang","orcid":"https://orcid.org/0009-0008-6298-9981"},"institutions":[{"id":"https://openalex.org/I19820366","display_name":"Chinese Academy of Sciences","ror":"https://ror.org/034t30j35","country_code":"CN","type":"government","lineage":["https://openalex.org/I19820366"]},{"id":"https://openalex.org/I4210156404","display_name":"Institute of Information Engineering","ror":"https://ror.org/04r53se39","country_code":"CN","type":"facility","lineage":["https://openalex.org/I19820366","https://openalex.org/I4210156404"]},{"id":"https://openalex.org/I4210165038","display_name":"University of Chinese Academy of Sciences","ror":"https://ror.org/05qbk4x57","country_code":"CN","type":"education","lineage":["https://openalex.org/I19820366","https://openalex.org/I4210165038"]}],"countries":["CN"],"is_corresponding":true,"raw_author_name":"Zhiyu Zhang","raw_affiliation_strings":["Institute of Information Engineering at Chinese Academy of Sciences, Beijing, China","University of Chinese Academy of Sciences, Beijing, China"],"affiliations":[{"raw_affiliation_string":"Institute of Information Engineering at Chinese Academy of Sciences, Beijing, China","institution_ids":["https://openalex.org/I4210156404","https://openalex.org/I19820366"]},{"raw_affiliation_string":"University of Chinese Academy of Sciences, Beijing, China","institution_ids":["https://openalex.org/I4210165038"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5024727535","display_name":"L F Li","orcid":null},"institutions":[{"id":"https://openalex.org/I19820366","display_name":"Chinese Academy of Sciences","ror":"https://ror.org/034t30j35","country_code":"CN","type":"government","lineage":["https://openalex.org/I19820366"]},{"id":"https://openalex.org/I4210156404","display_name":"Institute of Information Engineering","ror":"https://ror.org/04r53se39","country_code":"CN","type":"facility","lineage":["https://openalex.org/I19820366","https://openalex.org/I4210156404"]},{"id":"https://openalex.org/I4210165038","display_name":"University of Chinese Academy of Sciences","ror":"https://ror.org/05qbk4x57","country_code":"CN","type":"education","lineage":["https://openalex.org/I19820366","https://openalex.org/I4210165038"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Longxing Li","raw_affiliation_strings":["Institute of Information Engineering at Chinese Academy of Sciences, Beijing, China","University of Chinese Academy of Sciences, Beijing, China"],"affiliations":[{"raw_affiliation_string":"Institute of Information Engineering at Chinese Academy of Sciences, Beijing, China","institution_ids":["https://openalex.org/I4210156404","https://openalex.org/I19820366"]},{"raw_affiliation_string":"University of Chinese Academy of Sciences, Beijing, China","institution_ids":["https://openalex.org/I4210165038"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5072373338","display_name":"Ruigang Liang","orcid":"https://orcid.org/0000-0002-8751-9918"},"institutions":[{"id":"https://openalex.org/I19820366","display_name":"Chinese Academy of Sciences","ror":"https://ror.org/034t30j35","country_code":"CN","type":"government","lineage":["https://openalex.org/I19820366"]},{"id":"https://openalex.org/I4210156404","display_name":"Institute of Information Engineering","ror":"https://ror.org/04r53se39","country_code":"CN","type":"facility","lineage":["https://openalex.org/I19820366","https://openalex.org/I4210156404"]},{"id":"https://openalex.org/I4210165038","display_name":"University of Chinese Academy of Sciences","ror":"https://ror.org/05qbk4x57","country_code":"CN","type":"education","lineage":["https://openalex.org/I19820366","https://openalex.org/I4210165038"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Ruigang Liang","raw_affiliation_strings":["Institute of Information Engineering at Chinese Academy of Sciences, Beijing, China","University of Chinese Academy of Sciences, Beijing, China"],"affiliations":[{"raw_affiliation_string":"Institute of Information Engineering at Chinese Academy of Sciences, Beijing, China","institution_ids":["https://openalex.org/I4210156404","https://openalex.org/I19820366"]},{"raw_affiliation_string":"University of Chinese Academy of Sciences, Beijing, China","institution_ids":["https://openalex.org/I4210165038"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5100437976","display_name":"Kai Chen","orcid":"https://orcid.org/0000-0002-5624-2987"},"institutions":[{"id":"https://openalex.org/I19820366","display_name":"Chinese Academy of Sciences","ror":"https://ror.org/034t30j35","country_code":"CN","type":"government","lineage":["https://openalex.org/I19820366"]},{"id":"https://openalex.org/I4210156404","display_name":"Institute of Information Engineering","ror":"https://ror.org/04r53se39","country_code":"CN","type":"facility","lineage":["https://openalex.org/I19820366","https://openalex.org/I4210156404"]},{"id":"https://openalex.org/I4210165038","display_name":"University of Chinese Academy of Sciences","ror":"https://ror.org/05qbk4x57","country_code":"CN","type":"education","lineage":["https://openalex.org/I19820366","https://openalex.org/I4210165038"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Kai Chen","raw_affiliation_strings":["Institute of Information Engineering at Chinese Academy of Sciences, Beijing, China","University of Chinese Academy of Sciences, Beijing, China"],"affiliations":[{"raw_affiliation_string":"Institute of Information Engineering at Chinese Academy of Sciences, Beijing, China","institution_ids":["https://openalex.org/I4210156404","https://openalex.org/I19820366"]},{"raw_affiliation_string":"University of Chinese Academy of Sciences, Beijing, China","institution_ids":["https://openalex.org/I4210165038"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":4,"corresponding_author_ids":["https://openalex.org/A5100442940"],"corresponding_institution_ids":["https://openalex.org/I19820366","https://openalex.org/I4210156404","https://openalex.org/I4210165038"],"apc_list":null,"apc_paid":null,"fwci":2.3118,"has_fulltext":false,"cited_by_count":1,"citation_normalized_percentile":{"value":0.87738364,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":{"min":91,"max":95},"biblio":{"volume":"2","issue":"ISSTA","first_page":"848","last_page":"870"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10743","display_name":"Software Testing and Debugging Techniques","score":0.9994000196456909,"subfield":{"id":"https://openalex.org/subfields/1712","display_name":"Software"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T10743","display_name":"Software Testing and Debugging Techniques","score":0.9994000196456909,"subfield":{"id":"https://openalex.org/subfields/1712","display_name":"Software"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":0.9940999746322632,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10260","display_name":"Software Engineering Research","score":0.9940000176429749,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/fuzz-testing","display_name":"Fuzz testing","score":0.9567450284957886},{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.9003359079360962},{"id":"https://openalex.org/keywords/kernel","display_name":"Kernel (algebra)","score":0.4997713565826416},{"id":"https://openalex.org/keywords/artificial-intelligence","display_name":"Artificial intelligence","score":0.4772743582725525},{"id":"https://openalex.org/keywords/machine-learning","display_name":"Machine learning","score":0.45402178168296814},{"id":"https://openalex.org/keywords/leverage","display_name":"Leverage (statistics)","score":0.43469494581222534},{"id":"https://openalex.org/keywords/programming-language","display_name":"Programming language","score":0.24742305278778076},{"id":"https://openalex.org/keywords/software","display_name":"Software","score":0.10567310452461243}],"concepts":[{"id":"https://openalex.org/C111065885","wikidata":"https://www.wikidata.org/wiki/Q1189053","display_name":"Fuzz testing","level":3,"score":0.9567450284957886},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.9003359079360962},{"id":"https://openalex.org/C74193536","wikidata":"https://www.wikidata.org/wiki/Q574844","display_name":"Kernel (algebra)","level":2,"score":0.4997713565826416},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.4772743582725525},{"id":"https://openalex.org/C119857082","wikidata":"https://www.wikidata.org/wiki/Q2539","display_name":"Machine learning","level":1,"score":0.45402178168296814},{"id":"https://openalex.org/C153083717","wikidata":"https://www.wikidata.org/wiki/Q6535263","display_name":"Leverage (statistics)","level":2,"score":0.43469494581222534},{"id":"https://openalex.org/C199360897","wikidata":"https://www.wikidata.org/wiki/Q9143","display_name":"Programming language","level":1,"score":0.24742305278778076},{"id":"https://openalex.org/C2777904410","wikidata":"https://www.wikidata.org/wiki/Q7397","display_name":"Software","level":2,"score":0.10567310452461243},{"id":"https://openalex.org/C114614502","wikidata":"https://www.wikidata.org/wiki/Q76592","display_name":"Combinatorics","level":1,"score":0.0},{"id":"https://openalex.org/C33923547","wikidata":"https://www.wikidata.org/wiki/Q395","display_name":"Mathematics","level":0,"score":0.0}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1145/3728913","is_oa":true,"landing_page_url":"https://doi.org/10.1145/3728913","pdf_url":null,"source":{"id":"https://openalex.org/S4404663975","display_name":"Proceedings of the ACM on software engineering.","issn_l":"2994-970X","issn":["2994-970X"],"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/P4310319798","host_organization_name":"Association for Computing Machinery","host_organization_lineage":["https://openalex.org/P4310319798"],"host_organization_lineage_names":["Association for Computing Machinery"],"type":"journal"},"license":"cc-by-nc-sa","license_id":"https://openalex.org/licenses/cc-by-nc-sa","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the ACM on Software Engineering","raw_type":"journal-article"}],"best_oa_location":{"id":"doi:10.1145/3728913","is_oa":true,"landing_page_url":"https://doi.org/10.1145/3728913","pdf_url":null,"source":{"id":"https://openalex.org/S4404663975","display_name":"Proceedings of the ACM on software engineering.","issn_l":"2994-970X","issn":["2994-970X"],"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/P4310319798","host_organization_name":"Association for Computing Machinery","host_organization_lineage":["https://openalex.org/P4310319798"],"host_organization_lineage_names":["Association for Computing Machinery"],"type":"journal"},"license":"cc-by-nc-sa","license_id":"https://openalex.org/licenses/cc-by-nc-sa","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the ACM on Software Engineering","raw_type":"journal-article"},"sustainable_development_goals":[],"awards":[],"funders":[],"has_content":{"pdf":false,"grobid_xml":false},"content_urls":null,"referenced_works_count":39,"referenced_works":["https://openalex.org/W40327287","https://openalex.org/W1973012451","https://openalex.org/W2701225458","https://openalex.org/W2747329762","https://openalex.org/W2750779823","https://openalex.org/W2751862727","https://openalex.org/W2927543040","https://openalex.org/W2933883078","https://openalex.org/W3027879771","https://openalex.org/W3034999214","https://openalex.org/W3133702157","https://openalex.org/W3207016455","https://openalex.org/W4221143046","https://openalex.org/W4284702560","https://openalex.org/W4288057782","https://openalex.org/W4292779060","https://openalex.org/W4321483931","https://openalex.org/W4327810158","https://openalex.org/W4376167329","https://openalex.org/W4378591002","https://openalex.org/W4385080390","https://openalex.org/W4385899890","https://openalex.org/W4386185625","https://openalex.org/W4386982649","https://openalex.org/W4388857643","https://openalex.org/W4388867283","https://openalex.org/W4389519352","https://openalex.org/W4390041933","https://openalex.org/W4391579642","https://openalex.org/W4391724785","https://openalex.org/W4393299232","https://openalex.org/W4394769544","https://openalex.org/W4402263592","https://openalex.org/W4402955715","https://openalex.org/W4404101430","https://openalex.org/W4408894640","https://openalex.org/W6756301311","https://openalex.org/W6778883912","https://openalex.org/W6852746770"],"related_works":["https://openalex.org/W3072699177","https://openalex.org/W2961085424","https://openalex.org/W4306674287","https://openalex.org/W4387369504","https://openalex.org/W4394896187","https://openalex.org/W3170094116","https://openalex.org/W4386462264","https://openalex.org/W3107602296","https://openalex.org/W4364306694","https://openalex.org/W4312192474"],"abstract_inverted_index":{"Most":[0],"coverage-guided":[1],"kernel":[2,65,114,215,245,270],"fuzzers":[3,57,66,89],"test":[4],"operating":[5],"system":[6],"kernels":[7],"based":[8,76,177],"on":[9,77,98,178,262],"syscall":[10,61,70,104,161],"sequence":[11],"synthesis.":[12],"However,":[13,92],"there":[14],"are":[15,273],"still":[16],"syscalls":[17],"rarely":[18],"or":[19],"not":[20],"covered":[21],"(called":[22],"low":[23],"frequency":[24],"syscalls,":[25],"LFS)":[26],"in":[27,214],"a":[28,131,145,205,226],"period":[29],"of":[30,46,141,147,153,208,230],"fuzzing,":[31],"meaning":[32],"the":[33,43,47,73,78,103,112,139,151,154,164,174,179,198],"relevant":[34],"code":[35,249],"branches":[36],"remain":[37],"unexplored.":[38],"This":[39],"is":[40],"due":[41],"to":[42,58,101,117,137,149,181,196,236,242],"complex":[44],"dependencies":[45,71,162,180],"LFS":[48,123,253],"and":[49,84,143,191,232,238,257],"mutation":[50],"uncertainty,":[51],"which":[52],"makes":[53],"it":[54],"difficult":[55],"for":[56,122,185,201,211],"generate":[59,119,223],"corresponding":[60],"sequences.":[62],"Since":[63],"many":[64],"can":[67,222,233],"dynamically":[68],"learn":[69],"from":[72,163,173],"current":[74],"corpus":[75,176,200],"choice":[79],"table":[80],"mechanism,":[81],"providing":[82],"comprehensive":[83],"high-quality":[85],"seeds":[86,95,121,193,224],"could":[87],"help":[88],"cover":[90],"LFS.":[91,202],"constructing":[93],"such":[94],"relies":[96],"heavily":[97],"expert":[99],"experience":[100],"resolve":[102],"dependencies.":[105],"In":[106],"this":[107],"paper,":[108],"we":[109],"propose":[110,204],"SyzGPT,":[111],"first":[113],"fuzzing":[115,175,199],"framework":[116],"automatically":[118,159],"effective":[120],"via":[124,167],"Large":[125],"Language":[126],"Model":[127],"(LLM).":[128],"We":[129,203],"leverage":[130],"dependency-based":[132],"retrieval-augmented":[133],"generation":[134,213],"(DRAG)":[135],"method":[136],"unlock":[138],"potential":[140],"LLM":[142],"design":[144],"series":[146],"steps":[148],"improve":[150],"effectiveness":[152],"generated":[155],"seeds.":[156],"First,":[157],"SyzGPT":[158,170,188,221,247,265],"extracts":[160],"existing":[165],"documentation":[166],"LLM.":[168,186],"Second,":[169],"retrieves":[171],"programs":[172],"construct":[182],"adaptive":[183],"context":[184],"Last,":[187],"periodically":[189],"generates":[190],"repairs":[192],"with":[194,225,275],"feedback":[195],"enrich":[197],"novel":[206],"set":[207],"evaluation":[209,218],"metrics":[210],"seed":[212],"domain.":[216],"Our":[217],"shows":[219],"that":[220],"high":[227],"valid":[228],"rate":[229],"87.84%":[231],"be":[234],"extended":[235],"offline":[237],"fine-tuned":[239],"LLMs.":[240],"Compared":[241],"seven":[243],"state-of-the-art":[244],"fuzzers,":[246],"improves":[248],"coverage":[250,254],"by":[251,255,260],"17.73%,":[252],"58.00%,":[256],"vulnerability":[258],"detection":[259],"323.22%":[261],"average.":[263],"Besides,":[264],"independently":[266],"discovered":[267],"26":[268],"unknown":[269],"bugs":[271],"(10":[272],"LFS-related),":[274],"11":[276],"confirmed.":[277]},"counts_by_year":[{"year":2025,"cited_by_count":1}],"updated_date":"2026-03-27T05:58:40.876381","created_date":"2025-10-10T00:00:00"}