{"id":"https://openalex.org/W4415583936","doi":"https://doi.org/10.1145/3755881.3755904","title":"Fuzzing for Stateful Protocol Programs Based on Constraints between States and Message Types","display_name":"Fuzzing for Stateful Protocol Programs Based on Constraints between States and Message Types","publication_year":2025,"publication_date":"2025-06-20","ids":{"openalex":"https://openalex.org/W4415583936","doi":"https://doi.org/10.1145/3755881.3755904"},"language":null,"primary_location":{"id":"doi:10.1145/3755881.3755904","is_oa":true,"landing_page_url":"https://doi.org/10.1145/3755881.3755904","pdf_url":"https://dl.acm.org/doi/pdf/10.1145/3755881.3755904","source":null,"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the 16th International Conference on Internetware","raw_type":"proceedings-article"},"type":"conference-paper","indexed_in":["crossref"],"open_access":{"is_oa":true,"oa_status":"gold","oa_url":"https://dl.acm.org/doi/pdf/10.1145/3755881.3755904","any_repository_has_fulltext":null},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5038651975","display_name":"Kunpeng Jian","orcid":"https://orcid.org/0009-0002-8304-1045"},"institutions":[{"id":"https://openalex.org/I4210108629","display_name":"Computer Network Information Center","ror":"https://ror.org/01s0wyf50","country_code":"CN","type":"facility","lineage":["https://openalex.org/I19820366","https://openalex.org/I4210108629"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Kunpeng Jian","raw_affiliation_strings":["Institute of Information Engineering, Chinese Academy of Sciences, Beijing, China; School of Cyber Security, University of Chinese Academy of Sciences, Beijing, China; ey Laboratory of Network Assessment Technology, Chinese Academy of Sciences, Beijing, China and Beijing Key Laboratory of Network Security and Protection Technology, Beijing, China"],"raw_orcid":"https://orcid.org/0009-0002-8304-1045","affiliations":[{"raw_affiliation_string":"Institute of Information Engineering, Chinese Academy of Sciences, Beijing, China; School of Cyber Security, University of Chinese Academy of Sciences, Beijing, China; ey Laboratory of Network Assessment Technology, Chinese Academy of Sciences, Beijing, China and Beijing Key Laboratory of Network Security and Protection Technology, Beijing, China","institution_ids":["https://openalex.org/I4210108629"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5073354871","display_name":"Yanyan Zou","orcid":"https://orcid.org/0000-0003-4787-4832"},"institutions":[{"id":"https://openalex.org/I4210108629","display_name":"Computer Network Information Center","ror":"https://ror.org/01s0wyf50","country_code":"CN","type":"facility","lineage":["https://openalex.org/I19820366","https://openalex.org/I4210108629"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Yanyan Zou","raw_affiliation_strings":["Institute of Information Engineering, Chinese Academy of Sciences, Beijing, China; School of Cyber Security, University of Chinese Academy of Sciences, Beijing, China; ey Laboratory of Network Assessment Technology, Chinese Academy of Sciences, Beijing, China and Beijing Key Laboratory of Network Security and Protection Technology, Beijing, China"],"raw_orcid":"https://orcid.org/0000-0003-4787-4832","affiliations":[{"raw_affiliation_string":"Institute of Information Engineering, Chinese Academy of Sciences, Beijing, China; School of Cyber Security, University of Chinese Academy of Sciences, Beijing, China; ey Laboratory of Network Assessment Technology, Chinese Academy of Sciences, Beijing, China and Beijing Key Laboratory of Network Security and Protection Technology, Beijing, China","institution_ids":["https://openalex.org/I4210108629"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5101852727","display_name":"Menghao Li","orcid":"https://orcid.org/0000-0002-5333-7630"},"institutions":[{"id":"https://openalex.org/I4210108629","display_name":"Computer Network Information Center","ror":"https://ror.org/01s0wyf50","country_code":"CN","type":"facility","lineage":["https://openalex.org/I19820366","https://openalex.org/I4210108629"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Menghao Li","raw_affiliation_strings":["Institute of Information Engineering, Chinese Academy of Sciences, Beijing, China; School of Cyber Security, University of Chinese Academy of Sciences, Beijing, China; ey Laboratory of Network Assessment Technology, Chinese Academy of Sciences, Beijing, China and Beijing Key Laboratory of Network Security and Protection Technology, Beijing, China"],"raw_orcid":"https://orcid.org/0000-0002-5333-7630","affiliations":[{"raw_affiliation_string":"Institute of Information Engineering, Chinese Academy of Sciences, Beijing, China; School of Cyber Security, University of Chinese Academy of Sciences, Beijing, China; ey Laboratory of Network Assessment Technology, Chinese Academy of Sciences, Beijing, China and Beijing Key Laboratory of Network Security and Protection Technology, Beijing, China","institution_ids":["https://openalex.org/I4210108629"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5050683592","display_name":"Wei Huo","orcid":"https://orcid.org/0009-0000-7121-1196"},"institutions":[{"id":"https://openalex.org/I4210108629","display_name":"Computer Network Information Center","ror":"https://ror.org/01s0wyf50","country_code":"CN","type":"facility","lineage":["https://openalex.org/I19820366","https://openalex.org/I4210108629"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Wei Huo","raw_affiliation_strings":["Institute of Information Engineering, Chinese Academy of Sciences, Beijing, China; School of Cyber Security, University of Chinese Academy of Sciences, Beijing, China; ey Laboratory of Network Assessment Technology, Chinese Academy of Sciences, Beijing, China and Beijing Key Laboratory of Network Security and Protection Technology, Beijing, China"],"raw_orcid":"https://orcid.org/0009-0000-7121-1196","affiliations":[{"raw_affiliation_string":"Institute of Information Engineering, Chinese Academy of Sciences, Beijing, China; School of Cyber Security, University of Chinese Academy of Sciences, Beijing, China; ey Laboratory of Network Assessment Technology, Chinese Academy of Sciences, Beijing, China and Beijing Key Laboratory of Network Security and Protection Technology, Beijing, China","institution_ids":["https://openalex.org/I4210108629"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":1,"corresponding_author_ids":[],"corresponding_institution_ids":["https://openalex.org/I4210108629"],"apc_list":null,"apc_paid":null,"fwci":0.0,"has_fulltext":true,"cited_by_count":0,"citation_normalized_percentile":{"value":0.35009488,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":null,"biblio":{"volume":null,"issue":null,"first_page":"305","last_page":"316"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10743","display_name":"Software Testing and Debugging Techniques","score":0.9998999834060669,"subfield":{"id":"https://openalex.org/subfields/1712","display_name":"Software"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T10743","display_name":"Software Testing and Debugging Techniques","score":0.9998999834060669,"subfield":{"id":"https://openalex.org/subfields/1712","display_name":"Software"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10142","display_name":"Formal Methods in Verification","score":0.9997000098228455,"subfield":{"id":"https://openalex.org/subfields/1703","display_name":"Computational Theory and Mathematics"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T12423","display_name":"Software Reliability and Analysis Research","score":0.9972000122070312,"subfield":{"id":"https://openalex.org/subfields/1712","display_name":"Software"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/stateful-firewall","display_name":"Stateful firewall","score":0.8307999968528748},{"id":"https://openalex.org/keywords/fuzz-testing","display_name":"Fuzz testing","score":0.7342000007629395},{"id":"https://openalex.org/keywords/protocol","display_name":"Protocol (science)","score":0.6464999914169312},{"id":"https://openalex.org/keywords/communications-protocol","display_name":"Communications protocol","score":0.39149999618530273}],"concepts":[{"id":"https://openalex.org/C22927095","wikidata":"https://www.wikidata.org/wiki/Q1784206","display_name":"Stateful firewall","level":3,"score":0.8307999968528748},{"id":"https://openalex.org/C111065885","wikidata":"https://www.wikidata.org/wiki/Q1189053","display_name":"Fuzz testing","level":3,"score":0.7342000007629395},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.7282999753952026},{"id":"https://openalex.org/C2780385302","wikidata":"https://www.wikidata.org/wiki/Q367158","display_name":"Protocol (science)","level":3,"score":0.6464999914169312},{"id":"https://openalex.org/C31258907","wikidata":"https://www.wikidata.org/wiki/Q1301371","display_name":"Computer network","level":1,"score":0.421099990606308},{"id":"https://openalex.org/C12269588","wikidata":"https://www.wikidata.org/wiki/Q132364","display_name":"Communications protocol","level":2,"score":0.39149999618530273},{"id":"https://openalex.org/C103613024","wikidata":"https://www.wikidata.org/wiki/Q230924","display_name":"Stateless protocol","level":3,"score":0.35760000348091125},{"id":"https://openalex.org/C199360897","wikidata":"https://www.wikidata.org/wiki/Q9143","display_name":"Programming language","level":1,"score":0.28360000252723694},{"id":"https://openalex.org/C80444323","wikidata":"https://www.wikidata.org/wiki/Q2878974","display_name":"Theoretical computer science","level":1,"score":0.260699987411499},{"id":"https://openalex.org/C120314980","wikidata":"https://www.wikidata.org/wiki/Q180634","display_name":"Distributed computing","level":1,"score":0.23340000212192535}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1145/3755881.3755904","is_oa":true,"landing_page_url":"https://doi.org/10.1145/3755881.3755904","pdf_url":"https://dl.acm.org/doi/pdf/10.1145/3755881.3755904","source":null,"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the 16th International Conference on Internetware","raw_type":"proceedings-article"}],"best_oa_location":{"id":"doi:10.1145/3755881.3755904","is_oa":true,"landing_page_url":"https://doi.org/10.1145/3755881.3755904","pdf_url":"https://dl.acm.org/doi/pdf/10.1145/3755881.3755904","source":null,"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the 16th International Conference on Internetware","raw_type":"proceedings-article"},"sustainable_development_goals":[],"awards":[],"funders":[],"has_content":{"pdf":true,"grobid_xml":true},"content_urls":{"pdf":"https://content.openalex.org/works/W4415583936.pdf","grobid_xml":"https://content.openalex.org/works/W4415583936.grobid-xml"},"referenced_works_count":15,"referenced_works":["https://openalex.org/W2009313640","https://openalex.org/W2059745470","https://openalex.org/W2129975948","https://openalex.org/W2427198867","https://openalex.org/W2736754676","https://openalex.org/W2920974348","https://openalex.org/W2938753454","https://openalex.org/W3019261932","https://openalex.org/W3088278208","https://openalex.org/W3164488987","https://openalex.org/W3200602700","https://openalex.org/W3207926955","https://openalex.org/W4221162498","https://openalex.org/W4285268429","https://openalex.org/W4285298338"],"related_works":[],"abstract_inverted_index":{"Stateful":[0],"protocol":[1,38,48,124],"programs":[2,15],"are":[3,91],"a":[4,30,122,139],"critical":[5],"component":[6],"of":[7,60,79,209],"the":[8,56,76,98,113,155,188],"network":[9],"systems,":[10],"and":[11,44,58,70,132,150,197,215,228],"vulnerabilities":[12,35],"in":[13,36,87,112,138,154,211,217,235],"these":[14,118],"can":[16],"lead":[17],"to":[18,28,63,103,165,170,181,221],"severe":[19],"consequences.Fuzzing,":[20],"as":[21],"an":[22,206],"effective":[23,173],"testing":[24],"technique,":[25],"has":[26],"proven":[27],"be":[29],"powerful":[31],"method":[32],"for":[33],"discovering":[34],"stateful":[37,47,123],"programs,":[39],"thereby":[40],"enhancing":[41],"their":[42,151],"reliability":[43],"security.However,":[45],"current":[46],"fuzzers":[49],"often":[50],"rely":[51],"on":[52,75],"randomly":[53],"mutating":[54],"both":[55],"content":[57],"sequence":[59,83,168],"messages,":[61],"leading":[62],"two":[64],"major":[65],"limitations.First,":[66],"constraints":[67,129,153],"between":[68,130,195],"states":[69,131],"message":[71,80,106,133,148,184],"types":[72,107,185],"impose":[73],"restrictions":[74],"valid":[77,93],"ordering":[78],"types.Completely":[81],"random":[82],"mutation":[84,169],"frequently":[85],"results":[86,201],"test":[88,174],"cases":[89],"that":[90,108,127,203],"partially":[92],"but":[94],"largely":[95],"discarded":[96],"by":[97,145],"program.Second,":[99],"existing":[100],"methods":[101],"struggle":[102],"generate":[104,171,182],"new":[105,183],"do":[109],"not":[110],"appear":[111],"initial":[114],"seed":[115,190],"corpus.To":[116],"overcome":[117],"limitations,":[119],"we":[120],"propose":[121],"fuzzing":[125],"approach":[126,137],"leverages":[128,162],"types.We":[134],"implement":[135],"this":[136,163],"prototype":[140],"tool":[141],"called":[142],"STCFuzz.STCFuzz":[143],"begins":[144],"identifying":[146],"states,":[147],"types,":[149],"associated":[152],"program":[156],"code":[157,218],"through":[158],"static":[159],"analysis.It":[160],"then":[161],"information":[164],"perform":[166],"constraint-based":[167],"more":[172,226,230],"cases.Additionally,":[175],"STC-Fuzz":[176],"utilizes":[177],"large":[178],"language":[179],"models":[180],"absent":[186],"from":[187],"original":[189],"corpus.We":[191],"conduct":[192],"comparative":[193],"experiments":[194],"STCFuzz":[196,204,224],"other":[198,222],"state-of-the-art":[199],"fuzzers.Experimental":[200],"demonstrate":[202],"achieves":[205],"average":[207],"improvement":[208],"13.4%":[210],"state":[212],"transition":[213],"coverage":[214,219],"7.7%":[216],"compared":[220],"fuzzers.Furthermore,":[223],"triggers":[225],"crashes":[227],"discovers":[229],"vulnerabilities,":[231],"highlighting":[232],"its":[233],"effectiveness":[234],"uncovering":[236],"security":[237],"flaws.":[238]},"counts_by_year":[],"updated_date":"2026-07-31T08:31:51.225901","created_date":"2025-10-28T00:00:00"}