{"id":"https://openalex.org/W4415758226","doi":"https://doi.org/10.1186/s42400-025-00377-2","title":"CAFLnet: a network protocol fuzzing framework based on selection algorithm with enhanced contextual information","display_name":"CAFLnet: a network protocol fuzzing framework based on selection algorithm with enhanced contextual information","publication_year":2025,"publication_date":"2025-11-01","ids":{"openalex":"https://openalex.org/W4415758226","doi":"https://doi.org/10.1186/s42400-025-00377-2"},"language":"en","primary_location":{"id":"doi:10.1186/s42400-025-00377-2","is_oa":true,"landing_page_url":"https://doi.org/10.1186/s42400-025-00377-2","pdf_url":"https://cybersecurity.springeropen.com/counter/pdf/10.1186/s42400-025-00377-2","source":{"id":"https://openalex.org/S3035238565","display_name":"Cybersecurity","issn_l":"2523-3246","issn":["2523-3246"],"is_oa":true,"is_in_doaj":true,"is_core":true,"host_organization":"https://openalex.org/P4310319965","host_organization_name":"Springer Nature","host_organization_lineage":["https://openalex.org/P4310319965"],"host_organization_lineage_names":["Springer Nature"],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Cybersecurity","raw_type":"journal-article"},"type":"article","indexed_in":["crossref","doaj"],"open_access":{"is_oa":true,"oa_status":"diamond","oa_url":"https://cybersecurity.springeropen.com/counter/pdf/10.1186/s42400-025-00377-2","any_repository_has_fulltext":true},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5100786217","display_name":"Zhiming Li","orcid":"https://orcid.org/0000-0002-6570-6325"},"institutions":[{"id":"https://openalex.org/I39333907","display_name":"Yanshan University","ror":"https://ror.org/02txfnf15","country_code":"CN","type":"education","lineage":["https://openalex.org/I39333907"]},{"id":"https://openalex.org/I4210117826","display_name":"Hebei University of Environmental Engineering","ror":"https://ror.org/02bjyz323","country_code":"CN","type":"education","lineage":["https://openalex.org/I4210117826"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Zhiming Li","raw_affiliation_strings":["School of Information Science and Engineering, YanShan University, Qinhuangdao, 066004, Hebei, China","The Key Laboratory for Software Engineering of Hebei Province, Qinhuangdao, 066004, Hebei, China"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"School of Information Science and Engineering, YanShan University, Qinhuangdao, 066004, Hebei, China","institution_ids":["https://openalex.org/I39333907"]},{"raw_affiliation_string":"The Key Laboratory for Software Engineering of Hebei Province, Qinhuangdao, 066004, Hebei, China","institution_ids":["https://openalex.org/I4210117826"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5102211103","display_name":"Shuquan Zhou","orcid":"https://orcid.org/0009-0000-0548-8170"},"institutions":[{"id":"https://openalex.org/I39333907","display_name":"Yanshan University","ror":"https://ror.org/02txfnf15","country_code":"CN","type":"education","lineage":["https://openalex.org/I39333907"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Shuquan Zhou","raw_affiliation_strings":["School of Information Science and Engineering, YanShan University, Qinhuangdao, 066004, Hebei, China"],"raw_orcid":"https://orcid.org/0009-0000-0548-8170","affiliations":[{"raw_affiliation_string":"School of Information Science and Engineering, YanShan University, Qinhuangdao, 066004, Hebei, China","institution_ids":["https://openalex.org/I39333907"]}]},{"author_position":"middle","author":{"id":null,"display_name":"Xiaokan Luo","orcid":null},"institutions":[{"id":"https://openalex.org/I39333907","display_name":"Yanshan University","ror":"https://ror.org/02txfnf15","country_code":"CN","type":"education","lineage":["https://openalex.org/I39333907"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Xiaokan Luo","raw_affiliation_strings":["School of Information Science and Engineering, YanShan University, Qinhuangdao, 066004, Hebei, China"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"School of Information Science and Engineering, YanShan University, Qinhuangdao, 066004, Hebei, China","institution_ids":["https://openalex.org/I39333907"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5045015284","display_name":"Hui-Ling Wei","orcid":"https://orcid.org/0000-0002-9067-2462"},"institutions":[{"id":"https://openalex.org/I39333907","display_name":"Yanshan University","ror":"https://ror.org/02txfnf15","country_code":"CN","type":"education","lineage":["https://openalex.org/I39333907"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Heping Wei","raw_affiliation_strings":["School of Information Science and Engineering, YanShan University, Qinhuangdao, 066004, Hebei, China"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"School of Information Science and Engineering, YanShan University, Qinhuangdao, 066004, Hebei, China","institution_ids":["https://openalex.org/I39333907"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5089365808","display_name":"G.-Z. Zhang","orcid":null},"institutions":[{"id":"https://openalex.org/I39333907","display_name":"Yanshan University","ror":"https://ror.org/02txfnf15","country_code":"CN","type":"education","lineage":["https://openalex.org/I39333907"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Guangkang Zhang","raw_affiliation_strings":["School of Information Science and Engineering, YanShan University, Qinhuangdao, 066004, Hebei, China"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"School of Information Science and Engineering, YanShan University, Qinhuangdao, 066004, Hebei, China","institution_ids":["https://openalex.org/I39333907"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":5,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":0.0,"has_fulltext":true,"cited_by_count":0,"citation_normalized_percentile":{"value":0.29436367,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":null,"biblio":{"volume":"8","issue":"1","first_page":null,"last_page":null},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10743","display_name":"Software Testing and Debugging Techniques","score":0.5978000164031982,"subfield":{"id":"https://openalex.org/subfields/1712","display_name":"Software"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T10743","display_name":"Software Testing and Debugging Techniques","score":0.5978000164031982,"subfield":{"id":"https://openalex.org/subfields/1712","display_name":"Software"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T12479","display_name":"Web Application Security Vulnerabilities","score":0.23909999430179596,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10734","display_name":"Information and Cyber Security","score":0.03779999911785126,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/fuzz-testing","display_name":"Fuzz testing","score":0.8902999758720398},{"id":"https://openalex.org/keywords/selection","display_name":"Selection (genetic algorithm)","score":0.6887999773025513},{"id":"https://openalex.org/keywords/benchmark","display_name":"Benchmark (surveying)","score":0.6496999859809875},{"id":"https://openalex.org/keywords/protocol","display_name":"Protocol (science)","score":0.5601000189781189},{"id":"https://openalex.org/keywords/vulnerability","display_name":"Vulnerability (computing)","score":0.4652000069618225},{"id":"https://openalex.org/keywords/session","display_name":"Session (web analytics)","score":0.445499986410141}],"concepts":[{"id":"https://openalex.org/C111065885","wikidata":"https://www.wikidata.org/wiki/Q1189053","display_name":"Fuzz testing","level":3,"score":0.8902999758720398},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.7936000227928162},{"id":"https://openalex.org/C81917197","wikidata":"https://www.wikidata.org/wiki/Q628760","display_name":"Selection (genetic algorithm)","level":2,"score":0.6887999773025513},{"id":"https://openalex.org/C185798385","wikidata":"https://www.wikidata.org/wiki/Q1161707","display_name":"Benchmark (surveying)","level":2,"score":0.6496999859809875},{"id":"https://openalex.org/C2780385302","wikidata":"https://www.wikidata.org/wiki/Q367158","display_name":"Protocol (science)","level":3,"score":0.5601000189781189},{"id":"https://openalex.org/C124101348","wikidata":"https://www.wikidata.org/wiki/Q172491","display_name":"Data mining","level":1,"score":0.48910000920295715},{"id":"https://openalex.org/C119857082","wikidata":"https://www.wikidata.org/wiki/Q2539","display_name":"Machine learning","level":1,"score":0.4738999903202057},{"id":"https://openalex.org/C95713431","wikidata":"https://www.wikidata.org/wiki/Q631425","display_name":"Vulnerability (computing)","level":2,"score":0.4652000069618225},{"id":"https://openalex.org/C2779182362","wikidata":"https://www.wikidata.org/wiki/Q17126187","display_name":"Session (web analytics)","level":2,"score":0.445499986410141},{"id":"https://openalex.org/C48103436","wikidata":"https://www.wikidata.org/wiki/Q599031","display_name":"State (computer science)","level":2,"score":0.43160000443458557},{"id":"https://openalex.org/C2779343474","wikidata":"https://www.wikidata.org/wiki/Q3109175","display_name":"Context (archaeology)","level":2,"score":0.428600013256073},{"id":"https://openalex.org/C2775973920","wikidata":"https://www.wikidata.org/wiki/Q3252726","display_name":"Selection algorithm","level":3,"score":0.41670000553131104},{"id":"https://openalex.org/C26517878","wikidata":"https://www.wikidata.org/wiki/Q228039","display_name":"Key (lock)","level":2,"score":0.4043999910354614},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.34310001134872437},{"id":"https://openalex.org/C148483581","wikidata":"https://www.wikidata.org/wiki/Q446488","display_name":"Feature selection","level":2,"score":0.3375999927520752},{"id":"https://openalex.org/C182590292","wikidata":"https://www.wikidata.org/wiki/Q989632","display_name":"Network security","level":2,"score":0.2786000072956085},{"id":"https://openalex.org/C80444323","wikidata":"https://www.wikidata.org/wiki/Q2878974","display_name":"Theoretical computer science","level":1,"score":0.2761000096797943}],"mesh":[],"locations_count":2,"locations":[{"id":"doi:10.1186/s42400-025-00377-2","is_oa":true,"landing_page_url":"https://doi.org/10.1186/s42400-025-00377-2","pdf_url":"https://cybersecurity.springeropen.com/counter/pdf/10.1186/s42400-025-00377-2","source":{"id":"https://openalex.org/S3035238565","display_name":"Cybersecurity","issn_l":"2523-3246","issn":["2523-3246"],"is_oa":true,"is_in_doaj":true,"is_core":true,"host_organization":"https://openalex.org/P4310319965","host_organization_name":"Springer Nature","host_organization_lineage":["https://openalex.org/P4310319965"],"host_organization_lineage_names":["Springer Nature"],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Cybersecurity","raw_type":"journal-article"},{"id":"pmh:oai:doaj.org/article:0178705784554b6ab22c7ab05d5cef2f","is_oa":true,"landing_page_url":"https://doaj.org/article/0178705784554b6ab22c7ab05d5cef2f","pdf_url":null,"source":{"id":"https://openalex.org/S4306401280","display_name":"DOAJ (DOAJ: Directory of Open Access Journals)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":null,"host_organization_name":null,"host_organization_lineage":[],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by-sa","license_id":"https://openalex.org/licenses/cc-by-sa","version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":"Cybersecurity, Vol 8, Iss 1, Pp 1-17 (2025)","raw_type":"article"}],"best_oa_location":{"id":"doi:10.1186/s42400-025-00377-2","is_oa":true,"landing_page_url":"https://doi.org/10.1186/s42400-025-00377-2","pdf_url":"https://cybersecurity.springeropen.com/counter/pdf/10.1186/s42400-025-00377-2","source":{"id":"https://openalex.org/S3035238565","display_name":"Cybersecurity","issn_l":"2523-3246","issn":["2523-3246"],"is_oa":true,"is_in_doaj":true,"is_core":true,"host_organization":"https://openalex.org/P4310319965","host_organization_name":"Springer Nature","host_organization_lineage":["https://openalex.org/P4310319965"],"host_organization_lineage_names":["Springer Nature"],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Cybersecurity","raw_type":"journal-article"},"sustainable_development_goals":[],"awards":[],"funders":[],"has_content":{"pdf":true,"grobid_xml":true},"content_urls":{"pdf":"https://content.openalex.org/works/W4415758226.pdf","grobid_xml":"https://content.openalex.org/works/W4415758226.grobid-xml"},"referenced_works_count":28,"referenced_works":["https://openalex.org/W2112420033","https://openalex.org/W2121972959","https://openalex.org/W2396961959","https://openalex.org/W2777430404","https://openalex.org/W2798388185","https://openalex.org/W2806377938","https://openalex.org/W2963064278","https://openalex.org/W2963163273","https://openalex.org/W2964241064","https://openalex.org/W2979357014","https://openalex.org/W3006477812","https://openalex.org/W3015408935","https://openalex.org/W3047947484","https://openalex.org/W3124739574","https://openalex.org/W3181528482","https://openalex.org/W3207926955","https://openalex.org/W4200379758","https://openalex.org/W4206275166","https://openalex.org/W4221162498","https://openalex.org/W4226265578","https://openalex.org/W4229077951","https://openalex.org/W4287833485","https://openalex.org/W4362466275","https://openalex.org/W4382941062","https://openalex.org/W4385412215","https://openalex.org/W4389617351","https://openalex.org/W4398788533","https://openalex.org/W4402696986"],"related_works":[],"abstract_inverted_index":{"Abstract":[0],"Network":[1],"protocol":[2,13,22],"fuzzing":[3,23,41],"is":[4,85],"a":[5,40,52,91,117,183,218],"critical":[6],"method":[7],"for":[8],"detecting":[9],"vulnerabilities":[10,210],"in":[11,20,143,177,198,205],"network":[12,21],"programs.":[14],"However,":[15],"traditional":[16],"selection":[17,53,83,93,120,145],"algorithms":[18],"used":[19],"often":[24],"fail":[25],"to":[26,78,123,136],"accurately":[27],"select":[28],"effective":[29],"states":[30],"and":[31,73,108,115,133,138,151,160,201,212,215],"seeds.":[32],"To":[33],"address":[34],"this":[35,37],"limitation,":[36],"paper":[38],"proposes":[39],"framework":[42,61,150,168,193],"called":[43],"Contextual":[44],"AFL":[45,152,170,196],"net":[46,48,153,171,197],"(CAFL":[47],"),":[49],"which":[50,102],"employs":[51],"algorithm":[54,84,94],"that":[55,166],"utilizes":[56],"enhanced":[57,112],"contextual":[58,80,113,125],"information.":[59,81],"This":[60],"introduces":[62],"key":[63],"metrics,":[64],"such":[65,127],"as":[66,128],"state":[67,70,92,199],"in-degree":[68],",":[69,72,77],"out-degree":[71],"trace-adjacent":[74],"call":[75],"count":[76],"enhance":[79],"The":[82,163],"divided":[86],"into":[87],"two":[88],"parts:":[89],"(1)":[90],"based":[95],"on":[96,188],"the":[97,104,144,161],"linear":[98],"upper":[99],"confidence":[100],"bound,":[101],"optimizes":[103],"balance":[105],"between":[106],"exploration":[107],"exploitation":[109],"by":[110,172],"utilizing":[111],"information,":[114,132],"(2)":[116],"tri-factor":[118],"seed":[119,129,141],"algorithm,":[121],"designed":[122],"utilize":[124],"information":[126,135],"labels,":[130],"execution":[131],"session":[134],"thoroughly":[137],"effectively":[139],"evaluate":[140],"value":[142],"process.":[146],"We":[147],"evaluated":[148],"our":[149,167,192],"using":[154],"eleven":[155],"benchmark":[156],"programs":[157],"from":[158],"ProFuzzBench":[159],"real-world.":[162],"results":[164],"demonstrate":[165],"outperformed":[169,195],"an":[173],"average":[174],"of":[175,179,186],"6.86%":[176],"terms":[178],"branch":[180],"coverage,":[181],"with":[182],"notable":[184],"increase":[185],"18.79%":[187],"PureFTPD.":[189],"In":[190],"addition,":[191],"slightly":[194],"discovery":[200],"exhibited":[202],"superior":[203],"performance":[204],"vulnerability":[206],"detection,":[207],"triggering":[208],"known":[209],"earlier":[211],"more":[213],"frequently":[214],"successfully":[216],"exposing":[217],"previously":[219],"unknown":[220],"vulnerability.":[221]},"counts_by_year":[],"updated_date":"2026-06-11T09:08:48.828518","created_date":"2025-11-01T00:00:00"}