{"id":"https://openalex.org/W7154595546","doi":"https://doi.org/10.1145/3803525.3804981","title":"Detecting Compiler-Introduced Security Bugs via IR Mutation and Coverage-Guided Fuzzing","display_name":"Detecting Compiler-Introduced Security Bugs via IR Mutation and Coverage-Guided Fuzzing","publication_year":2026,"publication_date":"2026-04-16","ids":{"openalex":"https://openalex.org/W7154595546","doi":"https://doi.org/10.1145/3803525.3804981"},"language":null,"primary_location":{"id":"doi:10.1145/3803525.3804981","is_oa":true,"landing_page_url":"https://doi.org/10.1145/3803525.3804981","pdf_url":null,"source":null,"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the 19th European Workshop on Systems Security","raw_type":"proceedings-article"},"type":"conference-paper","indexed_in":["crossref"],"open_access":{"is_oa":true,"oa_status":"gold","oa_url":"https://doi.org/10.1145/3803525.3804981","any_repository_has_fulltext":null},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5133746398","display_name":"Selim Oh","orcid":"https://orcid.org/0009-0002-7443-8673"},"institutions":[{"id":"https://openalex.org/I123900574","display_name":"Pohang University of Science and Technology","ror":"https://ror.org/04xysgw12","country_code":"KR","type":"education","lineage":["https://openalex.org/I123900574"]}],"countries":["KR"],"is_corresponding":false,"raw_author_name":"Selim Oh","raw_affiliation_strings":["Pohang University of Science and Technology, Pohang, Republic of Korea"],"raw_orcid":"https://orcid.org/0009-0002-7443-8673","affiliations":[{"raw_affiliation_string":"Pohang University of Science and Technology, Pohang, Republic of Korea","institution_ids":["https://openalex.org/I123900574"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5021364059","display_name":"Seulbae Kim","orcid":"https://orcid.org/0000-0001-9990-7953"},"institutions":[{"id":"https://openalex.org/I123900574","display_name":"Pohang University of Science and Technology","ror":"https://ror.org/04xysgw12","country_code":"KR","type":"education","lineage":["https://openalex.org/I123900574"]}],"countries":["KR"],"is_corresponding":false,"raw_author_name":"Seulbae Kim","raw_affiliation_strings":["Pohang University of Science and Technology, Pohang, Republic of Korea"],"raw_orcid":"https://orcid.org/0000-0001-9990-7953","affiliations":[{"raw_affiliation_string":"Pohang University of Science and Technology, Pohang, Republic of Korea","institution_ids":["https://openalex.org/I123900574"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":1,"corresponding_author_ids":[],"corresponding_institution_ids":["https://openalex.org/I123900574"],"apc_list":null,"apc_paid":null,"fwci":0.0,"has_fulltext":false,"cited_by_count":0,"citation_normalized_percentile":{"value":0.34634004,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":null,"biblio":{"volume":null,"issue":null,"first_page":"17","last_page":"23"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11424","display_name":"Security and Verification in Computing","score":0.8619999885559082,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11424","display_name":"Security and Verification in Computing","score":0.8619999885559082,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":0.04619999974966049,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10743","display_name":"Software Testing and Debugging Techniques","score":0.03920000046491623,"subfield":{"id":"https://openalex.org/subfields/1712","display_name":"Software"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/executable","display_name":"Executable","score":0.8151999711990356},{"id":"https://openalex.org/keywords/fuzz-testing","display_name":"Fuzz testing","score":0.6287999749183655},{"id":"https://openalex.org/keywords/compiler","display_name":"Compiler","score":0.626800000667572},{"id":"https://openalex.org/keywords/source-code","display_name":"Source code","score":0.5752999782562256},{"id":"https://openalex.org/keywords/code","display_name":"Code (set theory)","score":0.4984000027179718},{"id":"https://openalex.org/keywords/semantics","display_name":"Semantics (computer science)","score":0.38839998841285706},{"id":"https://openalex.org/keywords/computation","display_name":"Computation","score":0.3456999957561493}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.8267999887466431},{"id":"https://openalex.org/C160145156","wikidata":"https://www.wikidata.org/wiki/Q778586","display_name":"Executable","level":2,"score":0.8151999711990356},{"id":"https://openalex.org/C199360897","wikidata":"https://www.wikidata.org/wiki/Q9143","display_name":"Programming language","level":1,"score":0.6342999935150146},{"id":"https://openalex.org/C111065885","wikidata":"https://www.wikidata.org/wiki/Q1189053","display_name":"Fuzz testing","level":3,"score":0.6287999749183655},{"id":"https://openalex.org/C169590947","wikidata":"https://www.wikidata.org/wiki/Q47506","display_name":"Compiler","level":2,"score":0.626800000667572},{"id":"https://openalex.org/C43126263","wikidata":"https://www.wikidata.org/wiki/Q128751","display_name":"Source code","level":2,"score":0.5752999782562256},{"id":"https://openalex.org/C2776760102","wikidata":"https://www.wikidata.org/wiki/Q5139990","display_name":"Code (set theory)","level":3,"score":0.4984000027179718},{"id":"https://openalex.org/C184337299","wikidata":"https://www.wikidata.org/wiki/Q1437428","display_name":"Semantics (computer science)","level":2,"score":0.38839998841285706},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.3544999957084656},{"id":"https://openalex.org/C45374587","wikidata":"https://www.wikidata.org/wiki/Q12525525","display_name":"Computation","level":2,"score":0.3456999957561493},{"id":"https://openalex.org/C501734568","wikidata":"https://www.wikidata.org/wiki/Q42918","display_name":"Mutation","level":3,"score":0.34529998898506165},{"id":"https://openalex.org/C204323151","wikidata":"https://www.wikidata.org/wiki/Q905424","display_name":"Range (aeronautics)","level":2,"score":0.30959999561309814},{"id":"https://openalex.org/C200833197","wikidata":"https://www.wikidata.org/wiki/Q333707","display_name":"Compile time","level":3,"score":0.3025999963283539},{"id":"https://openalex.org/C121822524","wikidata":"https://www.wikidata.org/wiki/Q5157582","display_name":"Computer security model","level":2,"score":0.2928999960422516},{"id":"https://openalex.org/C133162039","wikidata":"https://www.wikidata.org/wiki/Q1061077","display_name":"Code generation","level":3,"score":0.2921000123023987},{"id":"https://openalex.org/C152752567","wikidata":"https://www.wikidata.org/wiki/Q116877","display_name":"Code refactoring","level":3,"score":0.2824999988079071},{"id":"https://openalex.org/C80444323","wikidata":"https://www.wikidata.org/wiki/Q2878974","display_name":"Theoretical computer science","level":1,"score":0.2784000039100647},{"id":"https://openalex.org/C165696696","wikidata":"https://www.wikidata.org/wiki/Q11287","display_name":"Exploit","level":2,"score":0.27149999141693115},{"id":"https://openalex.org/C40842320","wikidata":"https://www.wikidata.org/wiki/Q19423","display_name":"Buffer overflow","level":2,"score":0.25589999556541443}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1145/3803525.3804981","is_oa":true,"landing_page_url":"https://doi.org/10.1145/3803525.3804981","pdf_url":null,"source":null,"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the 19th European Workshop on Systems Security","raw_type":"proceedings-article"}],"best_oa_location":{"id":"doi:10.1145/3803525.3804981","is_oa":true,"landing_page_url":"https://doi.org/10.1145/3803525.3804981","pdf_url":null,"source":null,"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the 19th European Workshop on Systems Security","raw_type":"proceedings-article"},"sustainable_development_goals":[{"display_name":"Peace, Justice and strong institutions","id":"https://metadata.un.org/sdg/16","score":0.778751015663147}],"awards":[],"funders":[],"has_content":{"grobid_xml":false,"pdf":false},"content_urls":null,"referenced_works_count":5,"referenced_works":["https://openalex.org/W3007855180","https://openalex.org/W3164004581","https://openalex.org/W4238083723","https://openalex.org/W4384154578","https://openalex.org/W4399850836"],"related_works":[],"abstract_inverted_index":{"Compilers":[0],"translate":[1],"source":[2,60],"code":[3,30],"into":[4],"executable":[5],"binaries":[6],"without":[7],"altering":[8],"their":[9],"intended":[10],"semantics.":[11],"To":[12],"improve":[13],"performance,":[14],"modern":[15],"compilers":[16],"apply":[17],"a":[18],"wide":[19],"range":[20],"of":[21,89],"optimizations,":[22],"such":[23],"as":[24,66,76],"eliminating":[25],"redundant":[26],"computations":[27],"and":[28,35,71],"removing":[29,90],"deemed":[31],"unnecessary,":[32],"that":[33,54],"analyze":[34],"transform":[36],"programs":[37],"under":[38,86],"strong":[39],"semantic":[40],"assumptions.":[41],"However,":[42],"aggressive":[43],"optimizations":[44],"designed":[45],"to":[46,65,109],"maximize":[47],"performance":[48],"can":[49],"inadvertently":[50],"introduce":[51],"security":[52],"vulnerabilities":[53],"did":[55],"not":[56],"exist":[57],"in":[58],"the":[59,87],"code.":[61,92],"These":[62],"are":[63,73],"referred":[64],"Compiler-Introduced":[67],"Security":[68],"Bugs":[69],"(CISBs),":[70],"they":[72,77],"particularly":[74],"dangerous":[75],"often":[78,107],"silently":[79],"eliminate":[80],"security-critical":[81],"checks":[82],"(e.g.,":[83],"bounds":[84],"checks)":[85],"guise":[88],"dead":[91],"Existing":[93],"research":[94],"on":[95,100],"CISBs":[96],"has":[97],"largely":[98],"relied":[99],"source-level":[101],"mutation":[102],"or":[103,114],"formal":[104],"verification,":[105],"which":[106],"fails":[108],"exercise":[110],"deep":[111],"optimization":[112],"logic":[113],"lacks":[115],"scalability.":[116]},"counts_by_year":[],"updated_date":"2026-07-29T14:22:42.915294","created_date":"2026-04-17T00:00:00"}