{"id":"https://openalex.org/W7155532784","doi":"https://doi.org/10.1145/3767295.3769326","title":"Effective On-Hardware Fuzzing of Embedded Operating Systems","display_name":"Effective On-Hardware Fuzzing of Embedded Operating Systems","publication_year":2026,"publication_date":"2026-04-24","ids":{"openalex":"https://openalex.org/W7155532784","doi":"https://doi.org/10.1145/3767295.3769326"},"language":null,"primary_location":{"id":"doi:10.1145/3767295.3769326","is_oa":true,"landing_page_url":"https://doi.org/10.1145/3767295.3769326","pdf_url":null,"source":null,"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the 21st European Conference on Computer Systems","raw_type":"proceedings-article"},"type":"article","indexed_in":["crossref"],"open_access":{"is_oa":true,"oa_status":"gold","oa_url":"https://doi.org/10.1145/3767295.3769326","any_repository_has_fulltext":null},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5031776155","display_name":"Yuheng Shen","orcid":"https://orcid.org/0000-0002-2667-5431"},"institutions":[{"id":"https://openalex.org/I99065089","display_name":"Tsinghua University","ror":"https://ror.org/03cve4549","country_code":"CN","type":"education","lineage":["https://openalex.org/I99065089"]}],"countries":["CN"],"is_corresponding":true,"raw_author_name":"Yuheng Shen","raw_affiliation_strings":["Tsinghua University, Beijing, Beijing, China"],"raw_orcid":"https://orcid.org/0000-0002-2667-5431","affiliations":[{"raw_affiliation_string":"Tsinghua University, Beijing, Beijing, China","institution_ids":["https://openalex.org/I99065089"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5100693298","display_name":"Jianzhong Liu","orcid":"https://orcid.org/0000-0003-3612-4315"},"institutions":[{"id":"https://openalex.org/I108688024","display_name":"Qingdao University","ror":"https://ror.org/021cj6z65","country_code":"CN","type":"education","lineage":["https://openalex.org/I108688024"]},{"id":"https://openalex.org/I146773158","display_name":"Qingdao Agricultural University","ror":"https://ror.org/051qwcj72","country_code":"CN","type":"education","lineage":["https://openalex.org/I146773158"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Jianzhong Liu","raw_affiliation_strings":["Shandong University, QingDao, China"],"raw_orcid":"https://orcid.org/0000-0003-3612-4315","affiliations":[{"raw_affiliation_string":"Shandong University, QingDao, China","institution_ids":["https://openalex.org/I108688024","https://openalex.org/I146773158"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5134510510","display_name":"Qiming Guo","orcid":"https://orcid.org/0009-0006-2754-806X"},"institutions":[{"id":"https://openalex.org/I82880672","display_name":"Beihang University","ror":"https://ror.org/00wk2mp56","country_code":"CN","type":"education","lineage":["https://openalex.org/I82880672"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Qiming Guo","raw_affiliation_strings":["Beihang University, Beijing, Beijing, China"],"raw_orcid":"https://orcid.org/0009-0006-2754-806X","affiliations":[{"raw_affiliation_string":"Beihang University, Beijing, Beijing, China","institution_ids":["https://openalex.org/I82880672"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5111307140","display_name":"Yifei Chu","orcid":null},"institutions":[{"id":"https://openalex.org/I99065089","display_name":"Tsinghua University","ror":"https://ror.org/03cve4549","country_code":"CN","type":"education","lineage":["https://openalex.org/I99065089"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Yifei Chu","raw_affiliation_strings":["Tsinghua University, Beijing, Beijing, China"],"raw_orcid":"https://orcid.org/0009-0001-0179-8048","affiliations":[{"raw_affiliation_string":"Tsinghua University, Beijing, Beijing, China","institution_ids":["https://openalex.org/I99065089"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5024778103","display_name":"Qiang Zhang","orcid":"https://orcid.org/0000-0002-8425-4803"},"institutions":[{"id":"https://openalex.org/I16609230","display_name":"Hunan University","ror":"https://ror.org/05htk5m33","country_code":"CN","type":"education","lineage":["https://openalex.org/I16609230"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Qiang Zhang","raw_affiliation_strings":["Hunan University, Changsha, China"],"raw_orcid":"https://orcid.org/0000-0002-8425-4803","affiliations":[{"raw_affiliation_string":"Hunan University, Changsha, China","institution_ids":["https://openalex.org/I16609230"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5079764771","display_name":"Heyuan Shi","orcid":"https://orcid.org/0000-0002-9040-7247"},"institutions":[{"id":"https://openalex.org/I139660479","display_name":"Central South University","ror":"https://ror.org/00f1zfq44","country_code":"CN","type":"education","lineage":["https://openalex.org/I139660479"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Heyuan Shi","raw_affiliation_strings":["Central South University, Changsha, China"],"raw_orcid":"https://orcid.org/0000-0002-9040-7247","affiliations":[{"raw_affiliation_string":"Central South University, Changsha, China","institution_ids":["https://openalex.org/I139660479"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5134489890","display_name":"Yu Jiang","orcid":"https://orcid.org/0000-0003-0955-503X"},"institutions":[{"id":"https://openalex.org/I99065089","display_name":"Tsinghua University","ror":"https://ror.org/03cve4549","country_code":"CN","type":"education","lineage":["https://openalex.org/I99065089"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Yu Jiang","raw_affiliation_strings":["Tsinghua University, Beijing, Beijing, China"],"raw_orcid":"https://orcid.org/0000-0003-0955-503X","affiliations":[{"raw_affiliation_string":"Tsinghua University, Beijing, Beijing, China","institution_ids":["https://openalex.org/I99065089"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":7,"corresponding_author_ids":["https://openalex.org/A5031776155"],"corresponding_institution_ids":["https://openalex.org/I99065089"],"apc_list":null,"apc_paid":null,"fwci":0.0,"has_fulltext":false,"cited_by_count":0,"citation_normalized_percentile":{"value":0.96235521,"is_in_top_1_percent":false,"is_in_top_10_percent":true},"cited_by_percentile_year":null,"biblio":{"volume":null,"issue":null,"first_page":"439","last_page":"452"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11032","display_name":"VLSI and Analog Circuit Testing","score":0.5121999979019165,"subfield":{"id":"https://openalex.org/subfields/1708","display_name":"Hardware and Architecture"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11032","display_name":"VLSI and Analog Circuit Testing","score":0.5121999979019165,"subfield":{"id":"https://openalex.org/subfields/1708","display_name":"Hardware and Architecture"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T12122","display_name":"Physical Unclonable Functions (PUFs) and Hardware Security","score":0.06120000034570694,"subfield":{"id":"https://openalex.org/subfields/1708","display_name":"Hardware and Architecture"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10904","display_name":"Embedded Systems Design Techniques","score":0.05719999969005585,"subfield":{"id":"https://openalex.org/subfields/1708","display_name":"Hardware and Architecture"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/fuzz-testing","display_name":"Fuzz testing","score":0.4327999949455261},{"id":"https://openalex.org/keywords/reliability","display_name":"Reliability (semiconductor)","score":0.2840999960899353},{"id":"https://openalex.org/keywords/embedded-operating-system","display_name":"Embedded operating system","score":0.27129998803138733},{"id":"https://openalex.org/keywords/real-time-operating-system","display_name":"Real-time operating system","score":0.2711000144481659},{"id":"https://openalex.org/keywords/component","display_name":"Component (thermodynamics)","score":0.2671999931335449},{"id":"https://openalex.org/keywords/frame","display_name":"Frame (networking)","score":0.2653999924659729}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.5881999731063843},{"id":"https://openalex.org/C149635348","wikidata":"https://www.wikidata.org/wiki/Q193040","display_name":"Embedded system","level":1,"score":0.5557000041007996},{"id":"https://openalex.org/C111065885","wikidata":"https://www.wikidata.org/wiki/Q1189053","display_name":"Fuzz testing","level":3,"score":0.4327999949455261},{"id":"https://openalex.org/C111919701","wikidata":"https://www.wikidata.org/wiki/Q9135","display_name":"Operating system","level":1,"score":0.4226999878883362},{"id":"https://openalex.org/C127413603","wikidata":"https://www.wikidata.org/wiki/Q11023","display_name":"Engineering","level":0,"score":0.2930999994277954},{"id":"https://openalex.org/C43214815","wikidata":"https://www.wikidata.org/wiki/Q7310987","display_name":"Reliability (semiconductor)","level":3,"score":0.2840999960899353},{"id":"https://openalex.org/C35939892","wikidata":"https://www.wikidata.org/wiki/Q1139923","display_name":"Embedded operating system","level":3,"score":0.27129998803138733},{"id":"https://openalex.org/C28472234","wikidata":"https://www.wikidata.org/wiki/Q213666","display_name":"Real-time operating system","level":2,"score":0.2711000144481659},{"id":"https://openalex.org/C168167062","wikidata":"https://www.wikidata.org/wiki/Q1117970","display_name":"Component (thermodynamics)","level":2,"score":0.2671999931335449},{"id":"https://openalex.org/C126042441","wikidata":"https://www.wikidata.org/wiki/Q1324888","display_name":"Frame (networking)","level":2,"score":0.2653999924659729},{"id":"https://openalex.org/C26517878","wikidata":"https://www.wikidata.org/wiki/Q228039","display_name":"Key (lock)","level":2,"score":0.26499998569488525},{"id":"https://openalex.org/C79403827","wikidata":"https://www.wikidata.org/wiki/Q3988","display_name":"Real-time computing","level":1,"score":0.26109999418258667},{"id":"https://openalex.org/C2777904410","wikidata":"https://www.wikidata.org/wiki/Q7397","display_name":"Software","level":2,"score":0.2596000134944916},{"id":"https://openalex.org/C17500928","wikidata":"https://www.wikidata.org/wiki/Q959968","display_name":"Control system","level":2,"score":0.25769999623298645},{"id":"https://openalex.org/C2780668260","wikidata":"https://www.wikidata.org/wiki/Q2026556","display_name":"Operating table","level":2,"score":0.2500999867916107}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1145/3767295.3769326","is_oa":true,"landing_page_url":"https://doi.org/10.1145/3767295.3769326","pdf_url":null,"source":null,"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the 21st European Conference on Computer Systems","raw_type":"proceedings-article"}],"best_oa_location":{"id":"doi:10.1145/3767295.3769326","is_oa":true,"landing_page_url":"https://doi.org/10.1145/3767295.3769326","pdf_url":null,"source":null,"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the 21st European Conference on Computer Systems","raw_type":"proceedings-article"},"sustainable_development_goals":[{"score":0.7455052137374878,"id":"https://metadata.un.org/sdg/7","display_name":"Affordable and clean energy"}],"awards":[],"funders":[],"has_content":{"pdf":false,"grobid_xml":false},"content_urls":null,"referenced_works_count":5,"referenced_works":["https://openalex.org/W2535617737","https://openalex.org/W4308477756","https://openalex.org/W4384154462","https://openalex.org/W4394923185","https://openalex.org/W4405182060"],"related_works":[],"abstract_inverted_index":{"Fuzz":[0],"testing":[1],"embedded":[2,52,67,124],"OSs":[3,53],"is":[4],"difficult":[5],"because":[6],"their":[7],"implementations":[8],"vary":[9],"widely":[10],"and":[11,36,72,88,100,108,117,131],"rely":[12],"on":[13,55,79,121,137],"specialized":[14],"hardware.":[15,57,94],"These":[16],"factors":[17],"render":[18],"many":[19],"existing":[20],"methods":[21],"ineffective,":[22],"since":[23],"they":[24],"prevent":[25],"adapting":[26],"established":[27],"fuzzing":[28,143],"routines,":[29],"disrupt":[30],"communication":[31],"with":[32,64,76,140],"the":[33,59,65],"target":[34,66],"OS,":[35,68],"impede":[37],"observation":[38],"of":[39],"runtime":[40,98],"behavior.":[41],"This":[42],"paper":[43],"introduces":[44],"EOF,":[45],"a":[46,85,133],"feedback-guided":[47],"fuzzer":[48],"designed":[49],"to":[50,104],"test":[51,70],"running":[54],"actual":[56],"Through":[58],"debug":[60],"port,":[61],"EOF":[62,83,96,116,127],"communicates":[63],"executes":[69,89],"cases,":[71],"collect":[73],"feedback":[74],"data,":[75],"no":[77],"dependence":[78],"OS":[80],"services.":[81],"Then,":[82],"deploys":[84],"cross-platform":[86],"agent":[87],"API-aware":[90],"input":[91],"across":[92],"diverse":[93],"Last,":[95],"collects":[97],"coverage":[99,135],"critical":[101],"execution":[102],"events":[103],"identify":[105],"interesting":[106],"seeds":[107],"find":[109],"potential":[110],"bugs":[111,130],"during":[112],"fuzzing.":[113],"We":[114],"implemented":[115],"evaluated":[118],"its":[119],"performance":[120],"four":[122],"different":[123],"OSs,":[125],"where":[126],"discovered":[128],"19":[129],"achieved":[132],"50.84%":[134],"improvement":[136],"average":[138],"compared":[139],"other":[141],"comparable":[142],"methods.":[144]},"counts_by_year":[],"updated_date":"2026-04-29T09:16:38.111599","created_date":"2026-04-25T00:00:00"}