{"id":"https://openalex.org/W4294151777","doi":"https://doi.org/10.1186/s42400-022-00123-y","title":"Embedded fuzzing: a review of challenges, tools, and solutions","display_name":"Embedded fuzzing: a review of challenges, tools, and solutions","publication_year":2022,"publication_date":"2022-09-02","ids":{"openalex":"https://openalex.org/W4294151777","doi":"https://doi.org/10.1186/s42400-022-00123-y"},"language":"en","primary_location":{"id":"doi:10.1186/s42400-022-00123-y","is_oa":true,"landing_page_url":"https://doi.org/10.1186/s42400-022-00123-y","pdf_url":"https://cybersecurity.springeropen.com/counter/pdf/10.1186/s42400-022-00123-y","source":{"id":"https://openalex.org/S3035238565","display_name":"Cybersecurity","issn_l":"2523-3246","issn":["2523-3246"],"is_oa":true,"is_in_doaj":true,"is_core":true,"host_organization":"https://openalex.org/P4310319965","host_organization_name":"Springer Nature","host_organization_lineage":["https://openalex.org/P4310319965"],"host_organization_lineage_names":["Springer Nature"],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Cybersecurity","raw_type":"journal-article"},"type":"article","indexed_in":["crossref","doaj"],"open_access":{"is_oa":true,"oa_status":"gold","oa_url":"https://cybersecurity.springeropen.com/counter/pdf/10.1186/s42400-022-00123-y","any_repository_has_fulltext":true},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5075474063","display_name":"Max Eisele","orcid":"https://orcid.org/0000-0002-6249-2077"},"institutions":[{"id":"https://openalex.org/I889804353","display_name":"Robert Bosch (Germany)","ror":"https://ror.org/01fe0jt45","country_code":"DE","type":"company","lineage":["https://openalex.org/I889804353"]}],"countries":["DE"],"is_corresponding":true,"raw_author_name":"Max Eisele","raw_affiliation_strings":["Safety, Security and Privacy, Robert Bosch GmbH, Renningen, Germany"],"raw_orcid":"https://orcid.org/0000-0002-6249-2077","affiliations":[{"raw_affiliation_string":"Safety, Security and Privacy, Robert Bosch GmbH, Renningen, Germany","institution_ids":["https://openalex.org/I889804353"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5087992933","display_name":"M. Maugeri","orcid":"https://orcid.org/0000-0002-6585-5494"},"institutions":[{"id":"https://openalex.org/I39063666","display_name":"University of Catania","ror":"https://ror.org/03a64bh57","country_code":"IT","type":"education","lineage":["https://openalex.org/I39063666"]}],"countries":["IT"],"is_corresponding":false,"raw_author_name":"Marcello Maugeri","raw_affiliation_strings":["Dept. of Math and Computer Science, Universit\u00e0 degli Studi di Catania, Catania, Italy"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Dept. of Math and Computer Science, Universit\u00e0 degli Studi di Catania, Catania, Italy","institution_ids":["https://openalex.org/I39063666"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5050582981","display_name":"Rachna Shriwas","orcid":"https://orcid.org/0000-0003-4531-1681"},"institutions":[{"id":"https://openalex.org/I4210151956","display_name":"Robert Bosch (India)","ror":"https://ror.org/04my8ty22","country_code":"IN","type":"company","lineage":["https://openalex.org/I4210151956","https://openalex.org/I889804353"]}],"countries":["IN"],"is_corresponding":false,"raw_author_name":"Rachna Shriwas","raw_affiliation_strings":["RBEI, Robert Bosch GmbH, Bangalore, India"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"RBEI, Robert Bosch GmbH, Bangalore, India","institution_ids":["https://openalex.org/I4210151956"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5103238218","display_name":"Christopher Huth","orcid":"https://orcid.org/0000-0002-9433-8330"},"institutions":[{"id":"https://openalex.org/I889804353","display_name":"Robert Bosch (Germany)","ror":"https://ror.org/01fe0jt45","country_code":"DE","type":"company","lineage":["https://openalex.org/I889804353"]}],"countries":["DE"],"is_corresponding":false,"raw_author_name":"Christopher Huth","raw_affiliation_strings":["Safety, Security and Privacy, Robert Bosch GmbH, Renningen, Germany"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Safety, Security and Privacy, Robert Bosch GmbH, Renningen, Germany","institution_ids":["https://openalex.org/I889804353"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5051511023","display_name":"Giampaolo Bella","orcid":"https://orcid.org/0000-0002-7615-8643"},"institutions":[{"id":"https://openalex.org/I39063666","display_name":"University of Catania","ror":"https://ror.org/03a64bh57","country_code":"IT","type":"education","lineage":["https://openalex.org/I39063666"]}],"countries":["IT"],"is_corresponding":false,"raw_author_name":"Giampaolo Bella","raw_affiliation_strings":["Dept. of Math and Computer Science, Universit\u00e0 degli Studi di Catania, Catania, Italy"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Dept. of Math and Computer Science, Universit\u00e0 degli Studi di Catania, Catania, Italy","institution_ids":["https://openalex.org/I39063666"]}]}],"institutions":[],"countries_distinct_count":3,"institutions_distinct_count":3,"corresponding_author_ids":["https://openalex.org/A5075474063"],"corresponding_institution_ids":["https://openalex.org/I889804353"],"apc_list":{"value":1230,"currency":"USD","value_usd":1230},"apc_paid":{"value":1230,"currency":"USD","value_usd":1230},"fwci":8.8684,"has_fulltext":true,"cited_by_count":36,"citation_normalized_percentile":{"value":0.98071625,"is_in_top_1_percent":false,"is_in_top_10_percent":true},"cited_by_percentile_year":{"min":94,"max":100},"biblio":{"volume":"5","issue":"1","first_page":null,"last_page":null},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10743","display_name":"Software Testing and Debugging Techniques","score":0.9998000264167786,"subfield":{"id":"https://openalex.org/subfields/1712","display_name":"Software"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T10743","display_name":"Software Testing and Debugging Techniques","score":0.9998000264167786,"subfield":{"id":"https://openalex.org/subfields/1712","display_name":"Software"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":0.9955000281333923,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T12423","display_name":"Software Reliability and Analysis Research","score":0.989799976348877,"subfield":{"id":"https://openalex.org/subfields/1712","display_name":"Software"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/fuzz-testing","display_name":"Fuzz testing","score":0.969225287437439},{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.748830258846283},{"id":"https://openalex.org/keywords/pace","display_name":"Pace","score":0.6199661493301392},{"id":"https://openalex.org/keywords/software-engineering","display_name":"Software engineering","score":0.5491013526916504},{"id":"https://openalex.org/keywords/usable","display_name":"USable","score":0.49982118606567383},{"id":"https://openalex.org/keywords/software","display_name":"Software","score":0.45089203119277954},{"id":"https://openalex.org/keywords/table","display_name":"Table (database)","score":0.43137574195861816},{"id":"https://openalex.org/keywords/operating-system","display_name":"Operating system","score":0.18844732642173767},{"id":"https://openalex.org/keywords/world-wide-web","display_name":"World Wide Web","score":0.16690018773078918},{"id":"https://openalex.org/keywords/database","display_name":"Database","score":0.12280821800231934}],"concepts":[{"id":"https://openalex.org/C111065885","wikidata":"https://www.wikidata.org/wiki/Q1189053","display_name":"Fuzz testing","level":3,"score":0.969225287437439},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.748830258846283},{"id":"https://openalex.org/C2777526511","wikidata":"https://www.wikidata.org/wiki/Q691543","display_name":"Pace","level":2,"score":0.6199661493301392},{"id":"https://openalex.org/C115903868","wikidata":"https://www.wikidata.org/wiki/Q80993","display_name":"Software engineering","level":1,"score":0.5491013526916504},{"id":"https://openalex.org/C2780615836","wikidata":"https://www.wikidata.org/wiki/Q2471869","display_name":"USable","level":2,"score":0.49982118606567383},{"id":"https://openalex.org/C2777904410","wikidata":"https://www.wikidata.org/wiki/Q7397","display_name":"Software","level":2,"score":0.45089203119277954},{"id":"https://openalex.org/C45235069","wikidata":"https://www.wikidata.org/wiki/Q278425","display_name":"Table (database)","level":2,"score":0.43137574195861816},{"id":"https://openalex.org/C111919701","wikidata":"https://www.wikidata.org/wiki/Q9135","display_name":"Operating system","level":1,"score":0.18844732642173767},{"id":"https://openalex.org/C136764020","wikidata":"https://www.wikidata.org/wiki/Q466","display_name":"World Wide Web","level":1,"score":0.16690018773078918},{"id":"https://openalex.org/C77088390","wikidata":"https://www.wikidata.org/wiki/Q8513","display_name":"Database","level":1,"score":0.12280821800231934},{"id":"https://openalex.org/C13280743","wikidata":"https://www.wikidata.org/wiki/Q131089","display_name":"Geodesy","level":1,"score":0.0},{"id":"https://openalex.org/C205649164","wikidata":"https://www.wikidata.org/wiki/Q1071","display_name":"Geography","level":0,"score":0.0}],"mesh":[],"locations_count":2,"locations":[{"id":"doi:10.1186/s42400-022-00123-y","is_oa":true,"landing_page_url":"https://doi.org/10.1186/s42400-022-00123-y","pdf_url":"https://cybersecurity.springeropen.com/counter/pdf/10.1186/s42400-022-00123-y","source":{"id":"https://openalex.org/S3035238565","display_name":"Cybersecurity","issn_l":"2523-3246","issn":["2523-3246"],"is_oa":true,"is_in_doaj":true,"is_core":true,"host_organization":"https://openalex.org/P4310319965","host_organization_name":"Springer Nature","host_organization_lineage":["https://openalex.org/P4310319965"],"host_organization_lineage_names":["Springer Nature"],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Cybersecurity","raw_type":"journal-article"},{"id":"pmh:oai:doaj.org/article:6a057066fbed40eeb4942c6cb04f0d4c","is_oa":true,"landing_page_url":"https://doaj.org/article/6a057066fbed40eeb4942c6cb04f0d4c","pdf_url":null,"source":{"id":"https://openalex.org/S4306401280","display_name":"DOAJ (DOAJ: Directory of Open Access Journals)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":null,"host_organization_name":null,"host_organization_lineage":[],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by-sa","license_id":"https://openalex.org/licenses/cc-by-sa","version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":"Cybersecurity, Vol 5, Iss 1, Pp 1-18 (2022)","raw_type":"article"}],"best_oa_location":{"id":"doi:10.1186/s42400-022-00123-y","is_oa":true,"landing_page_url":"https://doi.org/10.1186/s42400-022-00123-y","pdf_url":"https://cybersecurity.springeropen.com/counter/pdf/10.1186/s42400-022-00123-y","source":{"id":"https://openalex.org/S3035238565","display_name":"Cybersecurity","issn_l":"2523-3246","issn":["2523-3246"],"is_oa":true,"is_in_doaj":true,"is_core":true,"host_organization":"https://openalex.org/P4310319965","host_organization_name":"Springer Nature","host_organization_lineage":["https://openalex.org/P4310319965"],"host_organization_lineage_names":["Springer Nature"],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Cybersecurity","raw_type":"journal-article"},"sustainable_development_goals":[{"id":"https://metadata.un.org/sdg/10","display_name":"Reduced inequalities","score":0.7400000095367432}],"awards":[],"funders":[],"has_content":{"pdf":true,"grobid_xml":true},"content_urls":{"pdf":"https://content.openalex.org/works/W4294151777.pdf","grobid_xml":"https://content.openalex.org/works/W4294151777.grobid-xml"},"referenced_works_count":42,"referenced_works":["https://openalex.org/W1588463952","https://openalex.org/W2043118292","https://openalex.org/W2101512909","https://openalex.org/W2132574561","https://openalex.org/W2215262239","https://openalex.org/W2515236103","https://openalex.org/W2576376563","https://openalex.org/W2782780792","https://openalex.org/W2791018263","https://openalex.org/W2884769489","https://openalex.org/W2899727632","https://openalex.org/W2945462412","https://openalex.org/W2947814692","https://openalex.org/W2963147982","https://openalex.org/W2963804422","https://openalex.org/W2964241064","https://openalex.org/W2967187062","https://openalex.org/W2986938475","https://openalex.org/W2989119476","https://openalex.org/W3006130050","https://openalex.org/W3007193137","https://openalex.org/W3024280588","https://openalex.org/W3047947484","https://openalex.org/W3048076421","https://openalex.org/W3049735680","https://openalex.org/W3083637667","https://openalex.org/W3091157996","https://openalex.org/W3092928873","https://openalex.org/W3103619372","https://openalex.org/W3105962474","https://openalex.org/W3111743984","https://openalex.org/W3118666763","https://openalex.org/W3135762206","https://openalex.org/W3154093559","https://openalex.org/W3155102819","https://openalex.org/W3164551084","https://openalex.org/W3170245351","https://openalex.org/W3212565000","https://openalex.org/W4210654156","https://openalex.org/W4220830491","https://openalex.org/W4288085970","https://openalex.org/W4289038676"],"related_works":["https://openalex.org/W2511770387","https://openalex.org/W3120811337","https://openalex.org/W2766647240","https://openalex.org/W4385301282","https://openalex.org/W2990186179","https://openalex.org/W4210660460","https://openalex.org/W3203597304","https://openalex.org/W4248424560","https://openalex.org/W3119380829","https://openalex.org/W2521811015"],"abstract_inverted_index":{"Abstract":[0],"Fuzzing":[1],"has":[2,30],"become":[3,42],"one":[4],"of":[5,16,67,75,92,117,126,143,162],"the":[6,14,21,26,47,57,65,90,118,141,150,154,159,166,171,177,203],"best-established":[7],"methods":[8],"to":[9,25,41,139,169,176,202],"uncover":[10],"software":[11,22],"bugs.":[12],"Meanwhile,":[13],"market":[15],"embedded":[17,96,144],"systems,":[18,97],"which":[19,98,190],"binds":[20],"execution":[23,172],"tightly":[24],"very":[27],"hardware":[28,62],"architecture,":[29],"grown":[31],"at":[32],"a":[33,73,82,86,134,185],"steady":[34],"pace,":[35],"and":[36,61,69,164],"that":[37,152],"pace":[38],"is":[39,174],"anticipated":[40],"yet":[43],"more":[44],"sustained":[45],"in":[46,89,109,114,191],"near":[48],"future.":[49],"Embedded":[50],"systems":[51],"also":[52],"benefit":[53],"from":[54],"fuzzing,":[55],"but":[56],"innumerable":[58],"existing":[59],"architectures":[60],"peripherals":[63],"complicate":[64],"development":[66],"general":[68],"usable":[70],"approaches,":[71],"hence":[72],"plethora":[74],"tools":[76],"have":[77],"recently":[78],"appeared.":[79],"Here":[80],"comes":[81],"stringent":[83],"need":[84],"for":[85,95,103,198],"systematic":[87],"review":[88,131,183],"area":[91],"fuzzing":[93],"approaches":[94,151,167],"we":[99,137],"term":[100],"\u201cembedded":[101],"fuzzing\u201d":[102],"brevity.":[104],"The":[105,130,181],"inclusion":[106,155],"criteria":[107],"chosen":[108],"this":[110],"article":[111],"are":[112],"semi-objective":[113],"their":[115],"coverage":[116],"most":[119],"relevant":[120,160],"publication":[121],"venues":[122],"as":[123,125],"well":[124],"our":[127],"personal":[128],"judgement.":[129],"rests":[132],"on":[133],"formal":[135],"definition":[136],"develop":[138],"represent":[140],"realm":[142],"fuzzing.":[145],"It":[146],"continues":[147],"by":[148],"discussing":[149],"satisfy":[153],"criteria,":[156],"then":[157],"defines":[158],"elements":[161],"comparison":[163],"groups":[165],"according":[168],"how":[170],"environment":[173],"served":[175],"system":[178],"under":[179],"test.":[180],"resulting":[182],"produces":[184],"table":[186],"with":[187],"42":[188],"entries,":[189],"turn":[192],"supports":[193],"discussion":[194],"suggesting":[195],"vast":[196],"room":[197],"future":[199],"research":[200],"due":[201],"limitations":[204],"noted.":[205]},"counts_by_year":[{"year":2026,"cited_by_count":1},{"year":2025,"cited_by_count":14},{"year":2024,"cited_by_count":13},{"year":2023,"cited_by_count":8}],"updated_date":"2026-07-29T09:40:50.615796","created_date":"2025-10-10T00:00:00"}