{"id":"https://openalex.org/W4392735676","doi":"https://doi.org/10.48550/arxiv.2403.06281","title":"ES-Fuzz: Adaptive Modeling of MMIO Data Chunks for Firmware Fuzzing","display_name":"ES-Fuzz: Adaptive Modeling of MMIO Data Chunks for Firmware Fuzzing","publication_year":2024,"publication_date":"2024-03-10","ids":{"openalex":"https://openalex.org/W4392735676","doi":"https://doi.org/10.48550/arxiv.2403.06281"},"language":"en","primary_location":{"id":"pmh:oai:arXiv.org:2403.06281","is_oa":true,"landing_page_url":"https://arxiv.org/abs/2403.06281","pdf_url":"https://arxiv.org/pdf/2403.06281","source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":"2331-8422","issn":["2331-8422"],"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by-nc-sa","license_id":"https://openalex.org/licenses/cc-by-nc-sa","version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"text"},"type":"preprint","indexed_in":["arxiv","datacite"],"open_access":{"is_oa":true,"oa_status":"green","oa_url":"https://arxiv.org/pdf/2403.06281","any_repository_has_fulltext":true},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5094134487","display_name":"Wei-Lun Huang","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Huang, Wei-Lun","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"last","author":{"id":"https://openalex.org/A5110938088","display_name":"Kang G. Shin","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Shin, Kang G.","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]}],"institutions":[],"countries_distinct_count":0,"institutions_distinct_count":0,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":null,"has_fulltext":true,"cited_by_count":0,"citation_normalized_percentile":null,"cited_by_percentile_year":null,"biblio":{"volume":null,"issue":null,"first_page":null,"last_page":null},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10430","display_name":"Software Engineering Techniques and Practices","score":0.9807999730110168,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T10430","display_name":"Software Engineering Techniques and Practices","score":0.9807999730110168,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T13295","display_name":"Safety Systems Engineering in Autonomy","score":0.920199990272522,"subfield":{"id":"https://openalex.org/subfields/2213","display_name":"Safety, Risk, Reliability and Quality"},"field":{"id":"https://openalex.org/fields/22","display_name":"Engineering"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T12423","display_name":"Software Reliability and Analysis Research","score":0.9160000085830688,"subfield":{"id":"https://openalex.org/subfields/1712","display_name":"Software"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/fuzz-testing","display_name":"Fuzz testing","score":0.9818038940429688},{"id":"https://openalex.org/keywords/firmware","display_name":"Firmware","score":0.8060826063156128},{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.5870553851127625},{"id":"https://openalex.org/keywords/programming-language","display_name":"Programming language","score":0.2594408392906189},{"id":"https://openalex.org/keywords/operating-system","display_name":"Operating system","score":0.15123334527015686},{"id":"https://openalex.org/keywords/software","display_name":"Software","score":0.14026516675949097}],"concepts":[{"id":"https://openalex.org/C111065885","wikidata":"https://www.wikidata.org/wiki/Q1189053","display_name":"Fuzz testing","level":3,"score":0.9818038940429688},{"id":"https://openalex.org/C67212190","wikidata":"https://www.wikidata.org/wiki/Q104851","display_name":"Firmware","level":2,"score":0.8060826063156128},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.5870553851127625},{"id":"https://openalex.org/C199360897","wikidata":"https://www.wikidata.org/wiki/Q9143","display_name":"Programming language","level":1,"score":0.2594408392906189},{"id":"https://openalex.org/C111919701","wikidata":"https://www.wikidata.org/wiki/Q9135","display_name":"Operating system","level":1,"score":0.15123334527015686},{"id":"https://openalex.org/C2777904410","wikidata":"https://www.wikidata.org/wiki/Q7397","display_name":"Software","level":2,"score":0.14026516675949097}],"mesh":[],"locations_count":2,"locations":[{"id":"pmh:oai:arXiv.org:2403.06281","is_oa":true,"landing_page_url":"https://arxiv.org/abs/2403.06281","pdf_url":"https://arxiv.org/pdf/2403.06281","source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":"2331-8422","issn":["2331-8422"],"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by-nc-sa","license_id":"https://openalex.org/licenses/cc-by-nc-sa","version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"text"},{"id":"doi:10.48550/arxiv.2403.06281","is_oa":true,"landing_page_url":"https://doi.org/10.48550/arxiv.2403.06281","pdf_url":null,"source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":"2331-8422","issn":["2331-8422"],"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":null,"is_accepted":false,"is_published":null,"raw_source_name":null,"raw_type":"Preprint"}],"best_oa_location":{"id":"pmh:oai:arXiv.org:2403.06281","is_oa":true,"landing_page_url":"https://arxiv.org/abs/2403.06281","pdf_url":"https://arxiv.org/pdf/2403.06281","source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":"2331-8422","issn":["2331-8422"],"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by-nc-sa","license_id":"https://openalex.org/licenses/cc-by-nc-sa","version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"text"},"sustainable_development_goals":[],"awards":[],"funders":[],"has_content":{"grobid_xml":true,"pdf":true},"content_urls":{"pdf":"https://content.openalex.org/works/W4392735676.pdf","grobid_xml":"https://content.openalex.org/works/W4392735676.grobid-xml"},"referenced_works_count":0,"referenced_works":[],"related_works":["https://openalex.org/W2748952813","https://openalex.org/W2511770387","https://openalex.org/W3120811337","https://openalex.org/W3203597304","https://openalex.org/W4385301282","https://openalex.org/W2990186179","https://openalex.org/W4248424560","https://openalex.org/W3023977444","https://openalex.org/W3207216830","https://openalex.org/W4378373752"],"abstract_inverted_index":{"Fuzzing":[0],"has":[1],"been":[2],"widely":[3],"used":[4],"for":[5],"testing":[6],"embedded-system":[7],"firmware":[8,40,54,140],"in":[9,52,150,157,166],"a":[10,56,69,95,100,113,172],"fully":[11],"rehosted":[12],"environment":[13],"without":[14,162],"real":[15],"peripherals,":[16],"native":[17],"system":[18],"supports,":[19],"or":[20],"access":[21],"to":[22,42,81,117,148],"the":[23,31,39,53,75,104,164,167,180],"source":[24],"code":[25,44],"and":[26,98,134,153,179],"specifications.":[27],"Some":[28],"fuzzers":[29],"emulate":[30,47],"MMIO":[32,50,65,89,120,176],"behavior":[33],"of":[34,160,175,183],"missing":[35],"peripherals":[36],"based":[37],"on":[38,132,137],"binaries":[41],"boost":[43],"coverage.":[45],"They":[46],"each":[48,109,184],"individual":[49],"read":[51],"with":[55],"fixed":[57],"model.":[58],"We":[59,78,128],"find":[60],"this":[61,83],"ineffective":[62],"when":[63,103],"multiple":[64],"reads":[66],"collectively":[67],"retrieve":[68],"data":[70,90,177],"chunk,":[71],"which":[72],"greatly":[73],"impedes":[74],"coverage":[76,84,106,145,165],"growth.":[77],"propose":[79],"ES-Fuzz":[80,92,131,142],"overcome":[82],"bottleneck":[85],"by":[86,146],"adaptively":[87],"modeling":[88],"chunks.":[91],"runs":[93],"alongside":[94],"given":[96],"fuzzer":[97],"starts":[99],"new":[101,119],"run":[102],"fuzzer's":[105],"stagnates.":[107],"In":[108],"run,":[110],"it":[111,136],"analyzes":[112],"high-coverage":[114],"test":[115],"case":[116],"infer":[118],"data-chunk":[121],"models":[122,170],"that":[123],"unlock":[124],"additional":[125,155],"execution":[126],"paths.":[127],"have":[129],"implemented":[130],"Fuzzware":[133],"evaluated":[135],"24":[138],"popular":[139],"binaries.":[141],"boosts":[143],"Fuzzware's":[144],"up":[147],"68%":[149],"11":[151],"--":[152,159],"triggers":[154],"bugs":[156],"5":[158],"them":[161],"degrading":[163],"remainder.":[168],"Its":[169],"describe":[171],"wide":[173],"range":[174],"chunks":[178],"firmware's":[181],"use":[182],"across":[185],"various":[186],"contexts.":[187]},"counts_by_year":[],"updated_date":"2026-08-22T07:34:49.880490","created_date":"2024-03-13T00:00:00"}