{"id":"https://openalex.org/W7162093981","doi":"https://doi.org/10.48550/arxiv.2605.21824","title":"Quality-Assured Fuzz Harness Generation via the Four Principles Framework","display_name":"Quality-Assured Fuzz Harness Generation via the Four Principles Framework","publication_year":2026,"publication_date":"2026-05-20","ids":{"openalex":"https://openalex.org/W7162093981","doi":"https://doi.org/10.48550/arxiv.2605.21824"},"language":null,"primary_location":{"id":"doi:10.48550/arxiv.2605.21824","is_oa":true,"landing_page_url":"https://doi.org/10.48550/arxiv.2605.21824","pdf_url":null,"source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":"2331-8422","issn":["2331-8422"],"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":null,"is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"Preprint"},"type":"preprint","indexed_in":["datacite"],"open_access":{"is_oa":true,"oa_status":"green","oa_url":"https://doi.org/10.48550/arxiv.2605.21824","any_repository_has_fulltext":true},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5136769004","display_name":"Ze Sheng","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Sheng, Ze","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"middle","author":{"id":"https://openalex.org/A5008013635","display_name":"Dmitrijs Trizna","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Trizna, Dmitrijs","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"middle","author":{"id":"https://openalex.org/A5136773092","display_name":"Luigino Camastra","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Camastra, Luigino","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"middle","author":{"id":"https://openalex.org/A5136792343","display_name":"Zhicheng Chen","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Chen, Zhicheng","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"middle","author":{"id":"https://openalex.org/A5125519604","display_name":"Qingxiao Xu","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Xu, Qingxiao","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"last","author":{"id":"https://openalex.org/A5136762512","display_name":"Jeff Huang","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Huang, Jeff","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]}],"institutions":[],"countries_distinct_count":0,"institutions_distinct_count":0,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":null,"has_fulltext":false,"cited_by_count":0,"citation_normalized_percentile":null,"cited_by_percentile_year":null,"biblio":{"volume":null,"issue":null,"first_page":null,"last_page":null},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10743","display_name":"Software Testing and Debugging Techniques","score":0.9115999937057495,"subfield":{"id":"https://openalex.org/subfields/1712","display_name":"Software"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T10743","display_name":"Software Testing and Debugging Techniques","score":0.9115999937057495,"subfield":{"id":"https://openalex.org/subfields/1712","display_name":"Software"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10260","display_name":"Software Engineering Research","score":0.023399999365210533,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11424","display_name":"Security and Verification in Computing","score":0.01860000006854534,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/fuzz-testing","display_name":"Fuzz testing","score":0.9189000129699707},{"id":"https://openalex.org/keywords/correctness","display_name":"Correctness","score":0.8636999726295471},{"id":"https://openalex.org/keywords/soundness","display_name":"Soundness","score":0.4564000070095062},{"id":"https://openalex.org/keywords/model-checking","display_name":"Model checking","score":0.40720000863075256},{"id":"https://openalex.org/keywords/quality","display_name":"Quality (philosophy)","score":0.3776000142097473},{"id":"https://openalex.org/keywords/pipeline","display_name":"Pipeline (software)","score":0.3231000006198883},{"id":"https://openalex.org/keywords/software-quality","display_name":"Software quality","score":0.31529998779296875},{"id":"https://openalex.org/keywords/point","display_name":"Point (geometry)","score":0.3127000033855438},{"id":"https://openalex.org/keywords/control-flow","display_name":"Control flow","score":0.3012000024318695}],"concepts":[{"id":"https://openalex.org/C111065885","wikidata":"https://www.wikidata.org/wiki/Q1189053","display_name":"Fuzz testing","level":3,"score":0.9189000129699707},{"id":"https://openalex.org/C55439883","wikidata":"https://www.wikidata.org/wiki/Q360812","display_name":"Correctness","level":2,"score":0.8636999726295471},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.7689999938011169},{"id":"https://openalex.org/C39920170","wikidata":"https://www.wikidata.org/wiki/Q693083","display_name":"Soundness","level":2,"score":0.4564000070095062},{"id":"https://openalex.org/C115903868","wikidata":"https://www.wikidata.org/wiki/Q80993","display_name":"Software engineering","level":1,"score":0.446399986743927},{"id":"https://openalex.org/C110251889","wikidata":"https://www.wikidata.org/wiki/Q1569697","display_name":"Model checking","level":2,"score":0.40720000863075256},{"id":"https://openalex.org/C199360897","wikidata":"https://www.wikidata.org/wiki/Q9143","display_name":"Programming language","level":1,"score":0.40630000829696655},{"id":"https://openalex.org/C2779530757","wikidata":"https://www.wikidata.org/wiki/Q1207505","display_name":"Quality (philosophy)","level":2,"score":0.3776000142097473},{"id":"https://openalex.org/C43521106","wikidata":"https://www.wikidata.org/wiki/Q2165493","display_name":"Pipeline (software)","level":2,"score":0.3231000006198883},{"id":"https://openalex.org/C117447612","wikidata":"https://www.wikidata.org/wiki/Q1412670","display_name":"Software quality","level":4,"score":0.31529998779296875},{"id":"https://openalex.org/C28719098","wikidata":"https://www.wikidata.org/wiki/Q44946","display_name":"Point (geometry)","level":2,"score":0.3127000033855438},{"id":"https://openalex.org/C160191386","wikidata":"https://www.wikidata.org/wiki/Q868299","display_name":"Control flow","level":2,"score":0.3012000024318695},{"id":"https://openalex.org/C159718280","wikidata":"https://www.wikidata.org/wiki/Q5526353","display_name":"Gas meter prover","level":3,"score":0.2985999882221222},{"id":"https://openalex.org/C120314980","wikidata":"https://www.wikidata.org/wiki/Q180634","display_name":"Distributed computing","level":1,"score":0.2980000078678131},{"id":"https://openalex.org/C20574231","wikidata":"https://www.wikidata.org/wiki/Q844605","display_name":"Backward compatibility","level":2,"score":0.2978000044822693},{"id":"https://openalex.org/C2777655017","wikidata":"https://www.wikidata.org/wiki/Q1501161","display_name":"Toolbox","level":2,"score":0.2969000041484833},{"id":"https://openalex.org/C1009929","wikidata":"https://www.wikidata.org/wiki/Q179550","display_name":"Software bug","level":3,"score":0.2897999882698059},{"id":"https://openalex.org/C111498074","wikidata":"https://www.wikidata.org/wiki/Q173326","display_name":"Formal verification","level":2,"score":0.2897000014781952},{"id":"https://openalex.org/C2780385302","wikidata":"https://www.wikidata.org/wiki/Q367158","display_name":"Protocol (science)","level":3,"score":0.2851000130176544},{"id":"https://openalex.org/C184337299","wikidata":"https://www.wikidata.org/wiki/Q1437428","display_name":"Semantics (computer science)","level":2,"score":0.2842999994754791},{"id":"https://openalex.org/C177264268","wikidata":"https://www.wikidata.org/wiki/Q1514741","display_name":"Set (abstract data type)","level":2,"score":0.2827000021934509},{"id":"https://openalex.org/C40842320","wikidata":"https://www.wikidata.org/wiki/Q19423","display_name":"Buffer overflow","level":2,"score":0.2824999988079071},{"id":"https://openalex.org/C198008173","wikidata":"https://www.wikidata.org/wiki/Q1040040","display_name":"Computation tree logic","level":3,"score":0.27720001339912415},{"id":"https://openalex.org/C62354387","wikidata":"https://www.wikidata.org/wiki/Q875399","display_name":"Boundary (topology)","level":2,"score":0.27459999918937683},{"id":"https://openalex.org/C2781018962","wikidata":"https://www.wikidata.org/wiki/Q5164884","display_name":"Container (type theory)","level":2,"score":0.27410000562667847},{"id":"https://openalex.org/C2777904410","wikidata":"https://www.wikidata.org/wiki/Q7397","display_name":"Software","level":2,"score":0.2671999931335449},{"id":"https://openalex.org/C2778755073","wikidata":"https://www.wikidata.org/wiki/Q10858537","display_name":"Scale (ratio)","level":2,"score":0.2669999897480011},{"id":"https://openalex.org/C25016198","wikidata":"https://www.wikidata.org/wiki/Q781833","display_name":"Temporal logic","level":2,"score":0.2646999955177307},{"id":"https://openalex.org/C146222976","wikidata":"https://www.wikidata.org/wiki/Q1204997","display_name":"Business logic","level":2,"score":0.2621999979019165},{"id":"https://openalex.org/C149635348","wikidata":"https://www.wikidata.org/wiki/Q193040","display_name":"Embedded system","level":1,"score":0.2615000009536743},{"id":"https://openalex.org/C26517878","wikidata":"https://www.wikidata.org/wiki/Q228039","display_name":"Key (lock)","level":2,"score":0.25699999928474426}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.48550/arxiv.2605.21824","is_oa":true,"landing_page_url":"https://doi.org/10.48550/arxiv.2605.21824","pdf_url":null,"source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":"2331-8422","issn":["2331-8422"],"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":null,"is_accepted":false,"is_published":null,"raw_source_name":null,"raw_type":"Preprint"}],"best_oa_location":{"id":"doi:10.48550/arxiv.2605.21824","is_oa":true,"landing_page_url":"https://doi.org/10.48550/arxiv.2605.21824","pdf_url":null,"source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":"2331-8422","issn":["2331-8422"],"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":null,"is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"Preprint"},"sustainable_development_goals":[],"awards":[],"funders":[],"has_content":{"grobid_xml":false,"pdf":false},"content_urls":null,"referenced_works_count":0,"referenced_works":[],"related_works":[],"abstract_inverted_index":{"Fuzz":[0],"testing":[1],"is":[2,94],"the":[3,18,24,45,60,88,95,117,162,189,218],"dominant":[4],"technique":[5],"for":[6,235],"finding":[7],"memory-safety":[8],"vulnerabilities":[9],"in":[10,134],"C/C++":[11],"software,":[12],"yet":[13],"its":[14,92],"effectiveness":[15],"hinges":[16],"on":[17,153],"quality":[19,70,208],"of":[20,35,47,121,168,231],"fuzz":[21],"harnesses":[22,141,214,234],"--":[23,99,116],"programs":[25],"that":[26,83,139,198],"bridge":[27],"fuzzers":[28],"and":[29,54,111,127,160,179,239],"library":[30],"APIs.":[31],"A":[32],"growing":[33],"body":[34],"tools":[36],"now":[37],"automate":[38],"harness":[39,67,122],"generation,":[40,188],"but":[41],"none":[42],"systematically":[43,84],"ensures":[44],"correctness":[46,86,123],"produced":[48],"harnesses:":[49],"logic":[50],"errors,":[51],"API":[52,103],"misuse,":[53],"lifecycle":[55],"violations":[56,222],"go":[57],"undetected":[58],"at":[59,243],"source":[61],"level.":[62],"As":[63],"LLM-driven":[64],"generation":[65,89],"scales":[66],"creation,":[68],"uncontrolled":[69],"turns":[71],"scale":[72],"into":[73],"a":[74,145,207,229],"liability.":[75],"We":[76,130,227],"present":[77],"QuartetFuzz,":[78],"an":[79,135],"autonomous":[80,136],"harness-generation":[81],"system":[82,163,219],"improves":[85],"throughout":[87],"process.":[90],"At":[91],"core":[93],"Four":[96],"Principles":[97],"framework":[98],"Logic":[100],"Correctness":[101],"(P1),":[102],"Protocol":[104],"Compliance":[105],"(P2),":[106],"Security":[107],"Boundary":[108],"Respect":[109],"(P3),":[110],"Entry":[112],"Point":[113],"Adequacy":[114],"(P4)":[115],"first":[118],"source-level":[119],"definition":[120],"with":[124],"mathematical":[125],"specifications":[126],"implementable":[128],"checks.":[129],"operationalize":[131],"these":[132],"principles":[133],"LLM":[137],"agent":[138],"produces":[140],"satisfying":[142],"P1-P4":[143],"through":[144],"generate-check-fix":[146],"loop":[147],"before":[148],"any":[149],"fuzzing":[150],"begins.":[151],"Deployed":[152],"23":[154],"open-source":[155],"projects":[156],"spanning":[157],"C/C++,":[158],"Java,":[159],"JavaScript,":[161],"submits":[164],"42":[165],"bug":[166],"reports,":[167],"which":[169],"29":[170],"are":[171,182,241],"fixed":[172],"or":[173],"confirmed":[174],"upstream":[175],"(including":[176],"3":[177],"CVEs)":[178],"only":[180],"2":[181],"rejected":[183],"(4.8%":[184],"FP":[185],"rate).":[186],"During":[187],"built-in":[190],"P1/P2":[191],"checks":[192],"automatically":[193],"intercepted":[194],"58":[195],"harness-induced":[196],"crashes":[197],"would":[199],"otherwise":[200],"have":[201],"been":[202],"false":[203],"positives.":[204],"Applied":[205],"as":[206],"auditor":[209],"to":[210],"586":[211],"existing":[212],"production":[213],"across":[215],"70":[216],"projects,":[217],"identifies":[220],"53":[221],"(45":[223],"confirmed,":[224],"35":[225],"fixed).":[226],"release":[228],"dataset":[230,240],"100":[232],"labeled":[233],"reproducible":[236],"evaluation.":[237],"Code":[238],"available":[242],"https://github.com/OwenSanzas/QuartetFuzz":[244]},"counts_by_year":[],"updated_date":"2026-07-28T07:46:37.118299","created_date":"2026-05-23T00:00:00"}