{"id":"https://openalex.org/W4415059495","doi":"https://doi.org/10.1186/s42400-025-00474-2","title":"Fuzzbox: blending fuzzing into emulation for binary-only embedded targets","display_name":"Fuzzbox: blending fuzzing into emulation for binary-only embedded targets","publication_year":2026,"publication_date":"2026-05-11","ids":{"openalex":"https://openalex.org/W4415059495","doi":"https://doi.org/10.1186/s42400-025-00474-2"},"language":"en","primary_location":{"id":"doi:10.1186/s42400-025-00474-2","is_oa":true,"landing_page_url":"https://doi.org/10.1186/s42400-025-00474-2","pdf_url":"https://link.springer.com/content/pdf/10.1186/s42400-025-00474-2.pdf","source":{"id":"https://openalex.org/S3035238565","display_name":"Cybersecurity","issn_l":"2523-3246","issn":["2523-3246"],"is_oa":true,"is_in_doaj":true,"is_core":true,"host_organization":"https://openalex.org/P4310319965","host_organization_name":"Springer Nature","host_organization_lineage":["https://openalex.org/P4310319965"],"host_organization_lineage_names":["Springer Nature"],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Cybersecurity","raw_type":"journal-article"},"type":"article","indexed_in":["arxiv","crossref","datacite","doaj"],"open_access":{"is_oa":true,"oa_status":"diamond","oa_url":"https://link.springer.com/content/pdf/10.1186/s42400-025-00474-2.pdf","any_repository_has_fulltext":true},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5080540773","display_name":"Carmine Cesarano","orcid":"https://orcid.org/0009-0003-7557-4973"},"institutions":[{"id":"https://openalex.org/I71267560","display_name":"University of Naples Federico II","ror":"https://ror.org/05290cv24","country_code":"IT","type":"education","lineage":["https://openalex.org/I71267560"]}],"countries":["IT"],"is_corresponding":true,"raw_author_name":"Carmine Cesarano","raw_affiliation_strings":["DIETI, Universit\u00e0 degli Studi di Napoli Federico II, 80125, Naples, Italy"],"raw_orcid":"https://orcid.org/0009-0003-7557-4973","affiliations":[{"raw_affiliation_string":"DIETI, Universit\u00e0 degli Studi di Napoli Federico II, 80125, Naples, Italy","institution_ids":["https://openalex.org/I71267560"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5034602812","display_name":"Roberto Natella","orcid":"https://orcid.org/0000-0003-1084-4824"},"institutions":[{"id":"https://openalex.org/I71267560","display_name":"University of Naples Federico II","ror":"https://ror.org/05290cv24","country_code":"IT","type":"education","lineage":["https://openalex.org/I71267560"]}],"countries":["IT"],"is_corresponding":false,"raw_author_name":"Roberto Natella","raw_affiliation_strings":["DIETI, Universit\u00e0 degli Studi di Napoli Federico II, 80125, Naples, Italy"],"raw_orcid":"https://orcid.org/0000-0003-1084-4824","affiliations":[{"raw_affiliation_string":"DIETI, Universit\u00e0 degli Studi di Napoli Federico II, 80125, Naples, Italy","institution_ids":["https://openalex.org/I71267560"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":1,"corresponding_author_ids":["https://openalex.org/A5080540773"],"corresponding_institution_ids":["https://openalex.org/I71267560"],"apc_list":{"value":0,"currency":"USD","value_usd":0},"apc_paid":null,"fwci":0.0,"has_fulltext":true,"cited_by_count":0,"citation_normalized_percentile":{"value":0.0026679,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":null,"biblio":{"volume":"9","issue":"1","first_page":null,"last_page":null},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10101","display_name":"Cloud Computing and Resource Management","score":0.7498999834060669,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T10101","display_name":"Cloud Computing and Resource Management","score":0.7498999834060669,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10054","display_name":"Parallel Computing and Optimization Techniques","score":0.7070000171661377,"subfield":{"id":"https://openalex.org/subfields/1708","display_name":"Hardware and Architecture"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11948","display_name":"Machine Learning in Materials Science","score":0.6672000288963318,"subfield":{"id":"https://openalex.org/subfields/2505","display_name":"Materials Chemistry"},"field":{"id":"https://openalex.org/fields/25","display_name":"Materials Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/emulation","display_name":"Emulation","score":0.8806999921798706},{"id":"https://openalex.org/keywords/fuzz-testing","display_name":"Fuzz testing","score":0.8009999990463257},{"id":"https://openalex.org/keywords/source-code","display_name":"Source code","score":0.5784000158309937},{"id":"https://openalex.org/keywords/compiler","display_name":"Compiler","score":0.5773000121116638},{"id":"https://openalex.org/keywords/context","display_name":"Context (archaeology)","score":0.538100004196167},{"id":"https://openalex.org/keywords/code","display_name":"Code (set theory)","score":0.462799996137619},{"id":"https://openalex.org/keywords/hypervisor","display_name":"Hypervisor","score":0.44119998812675476}],"concepts":[{"id":"https://openalex.org/C149810388","wikidata":"https://www.wikidata.org/wiki/Q5374873","display_name":"Emulation","level":2,"score":0.8806999921798706},{"id":"https://openalex.org/C111065885","wikidata":"https://www.wikidata.org/wiki/Q1189053","display_name":"Fuzz testing","level":3,"score":0.8009999990463257},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.7739999890327454},{"id":"https://openalex.org/C43126263","wikidata":"https://www.wikidata.org/wiki/Q128751","display_name":"Source code","level":2,"score":0.5784000158309937},{"id":"https://openalex.org/C111919701","wikidata":"https://www.wikidata.org/wiki/Q9135","display_name":"Operating system","level":1,"score":0.5777000188827515},{"id":"https://openalex.org/C169590947","wikidata":"https://www.wikidata.org/wiki/Q47506","display_name":"Compiler","level":2,"score":0.5773000121116638},{"id":"https://openalex.org/C149635348","wikidata":"https://www.wikidata.org/wiki/Q193040","display_name":"Embedded system","level":1,"score":0.5410000085830688},{"id":"https://openalex.org/C2779343474","wikidata":"https://www.wikidata.org/wiki/Q3109175","display_name":"Context (archaeology)","level":2,"score":0.538100004196167},{"id":"https://openalex.org/C2776760102","wikidata":"https://www.wikidata.org/wiki/Q5139990","display_name":"Code (set theory)","level":3,"score":0.462799996137619},{"id":"https://openalex.org/C112904061","wikidata":"https://www.wikidata.org/wiki/Q1077480","display_name":"Hypervisor","level":4,"score":0.44119998812675476},{"id":"https://openalex.org/C200833197","wikidata":"https://www.wikidata.org/wiki/Q333707","display_name":"Compile time","level":3,"score":0.4058000147342682},{"id":"https://openalex.org/C2777904410","wikidata":"https://www.wikidata.org/wiki/Q7397","display_name":"Software","level":2,"score":0.39629998803138733},{"id":"https://openalex.org/C115903868","wikidata":"https://www.wikidata.org/wiki/Q80993","display_name":"Software engineering","level":1,"score":0.3797000050544739},{"id":"https://openalex.org/C199360897","wikidata":"https://www.wikidata.org/wiki/Q9143","display_name":"Programming language","level":1,"score":0.3684999942779541},{"id":"https://openalex.org/C133162039","wikidata":"https://www.wikidata.org/wiki/Q1061077","display_name":"Code generation","level":3,"score":0.32440000772476196},{"id":"https://openalex.org/C43214815","wikidata":"https://www.wikidata.org/wiki/Q7310987","display_name":"Reliability (semiconductor)","level":3,"score":0.29919999837875366},{"id":"https://openalex.org/C117447612","wikidata":"https://www.wikidata.org/wiki/Q1412670","display_name":"Software quality","level":4,"score":0.2930999994277954},{"id":"https://openalex.org/C43364308","wikidata":"https://www.wikidata.org/wiki/Q8799","display_name":"Byte","level":2,"score":0.2696000039577484},{"id":"https://openalex.org/C47434764","wikidata":"https://www.wikidata.org/wiki/Q1770035","display_name":"Dead code","level":5,"score":0.2623000144958496}],"mesh":[],"locations_count":4,"locations":[{"id":"doi:10.1186/s42400-025-00474-2","is_oa":true,"landing_page_url":"https://doi.org/10.1186/s42400-025-00474-2","pdf_url":"https://link.springer.com/content/pdf/10.1186/s42400-025-00474-2.pdf","source":{"id":"https://openalex.org/S3035238565","display_name":"Cybersecurity","issn_l":"2523-3246","issn":["2523-3246"],"is_oa":true,"is_in_doaj":true,"is_core":true,"host_organization":"https://openalex.org/P4310319965","host_organization_name":"Springer Nature","host_organization_lineage":["https://openalex.org/P4310319965"],"host_organization_lineage_names":["Springer Nature"],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Cybersecurity","raw_type":"journal-article"},{"id":"pmh:oai:arXiv.org:2509.05643","is_oa":true,"landing_page_url":"https://arxiv.org/abs/2509.05643","pdf_url":"https://arxiv.org/pdf/2509.05643","source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":"2331-8422","issn":["2331-8422"],"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"text"},{"id":"pmh:oai:doaj.org/article:eb9d320dc9354f089057689dcaf51ede","is_oa":true,"landing_page_url":"https://doaj.org/article/eb9d320dc9354f089057689dcaf51ede","pdf_url":null,"source":{"id":"https://openalex.org/S4306401280","display_name":"DOAJ (DOAJ: Directory of Open Access Journals)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":null,"host_organization_name":null,"host_organization_lineage":[],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by-sa","license_id":"https://openalex.org/licenses/cc-by-sa","version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":"Cybersecurity, Vol 9, Iss 1 (2026)","raw_type":"article"},{"id":"doi:10.48550/arxiv.2509.05643","is_oa":true,"landing_page_url":"https://doi.org/10.48550/arxiv.2509.05643","pdf_url":null,"source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":"2331-8422","issn":["2331-8422"],"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":null,"is_accepted":false,"is_published":null,"raw_source_name":null,"raw_type":"Preprint"}],"best_oa_location":{"id":"doi:10.1186/s42400-025-00474-2","is_oa":true,"landing_page_url":"https://doi.org/10.1186/s42400-025-00474-2","pdf_url":"https://link.springer.com/content/pdf/10.1186/s42400-025-00474-2.pdf","source":{"id":"https://openalex.org/S3035238565","display_name":"Cybersecurity","issn_l":"2523-3246","issn":["2523-3246"],"is_oa":true,"is_in_doaj":true,"is_core":true,"host_organization":"https://openalex.org/P4310319965","host_organization_name":"Springer Nature","host_organization_lineage":["https://openalex.org/P4310319965"],"host_organization_lineage_names":["Springer Nature"],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Cybersecurity","raw_type":"journal-article"},"sustainable_development_goals":[],"awards":[],"funders":[],"has_content":{"grobid_xml":true,"pdf":true},"content_urls":{"pdf":"https://content.openalex.org/works/W4415059495.pdf","grobid_xml":"https://content.openalex.org/works/W4415059495.grobid-xml"},"referenced_works_count":0,"referenced_works":[],"related_works":[],"abstract_inverted_index":{"Abstract":[0],"Coverage-guided":[1],"fuzzing":[2],"has":[3],"been":[4],"widely":[5],"applied":[6],"to":[7,31,37,47],"address":[8],"zero-day":[9],"vulnerabilities":[10],"in":[11,65,96],"general-purpose":[12],"software":[13],"and":[14,39,43,77,85],"operating":[15],"systems.":[16],"This":[17],"approach":[18],"relies":[19],"on":[20],"instrumenting":[21],"the":[22,70,90,97,115],"target":[23],"code":[24,62,83],"at":[25],"compile":[26],"time.":[27],"However,":[28],"applying":[29],"it":[30,59],"industrial":[32,110],"systems":[33],"remains":[34],"challenging,":[35],"due":[36],"proprietary":[38,101],"closed-source":[40],"compiler":[41],"toolchains":[42],"lack":[44],"of":[45,72,92,99,106,117],"access":[46],"source":[48,82],"code.":[49],"FuzzBox":[50,93,118],"addresses":[51],"these":[52],"limitations":[53],"by":[54],"integrating":[55],"emulation":[56],"with":[57],"fuzzing:":[58],"dynamically":[60],"instruments":[61],"during":[63],"execution":[64],"a":[66,100],"virtualized":[67],"environment,":[68],"for":[69,109],"injection":[71],"fuzz":[73],"inputs,":[74],"failure":[75],"detection,":[76],"coverage":[78],"analysis,":[79],"without":[80],"requiring":[81],"recompilation":[84],"hardware-specific":[86],"dependencies.":[87],"We":[88],"show":[89],"effectiveness":[91],"through":[94],"experiments":[95],"context":[98],"MILS":[102],"(Multiple":[103],"Independent":[104],"Levels":[105],"Security)":[107],"hypervisor":[108],"applications.":[111],"Additionally,":[112],"we":[113],"analyze":[114],"applicability":[116],"across":[119],"commercial":[120],"IoT":[121],"firmware,":[122],"showcasing":[123],"its":[124],"broad":[125],"portability.":[126]},"counts_by_year":[],"updated_date":"2026-08-26T07:47:46.906454","created_date":"2025-10-11T00:00:00"}