{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,2,25]],"date-time":"2026-02-25T17:13:44Z","timestamp":1772039624443,"version":"3.50.1"},"publisher-location":"Cham","reference-count":27,"publisher":"Springer Nature Switzerland","isbn-type":[{"value":"9783031575365","type":"print"},{"value":"9783031575372","type":"electronic"}],"license":[{"start":{"date-parts":[[2024,1,1]],"date-time":"2024-01-01T00:00:00Z","timestamp":1704067200000},"content-version":"tdm","delay-in-days":0,"URL":"https:\/\/www.springernature.com\/gp\/researchers\/text-and-data-mining"},{"start":{"date-parts":[[2024,1,1]],"date-time":"2024-01-01T00:00:00Z","timestamp":1704067200000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/www.springernature.com\/gp\/researchers\/text-and-data-mining"}],"content-domain":{"domain":["link.springer.com"],"crossmark-restriction":false},"short-container-title":[],"published-print":{"date-parts":[[2024]]},"DOI":"10.1007\/978-3-031-57537-2_16","type":"book-chapter","created":{"date-parts":[[2024,4,24]],"date-time":"2024-04-24T19:02:38Z","timestamp":1713985358000},"page":"253-268","update-policy":"https:\/\/doi.org\/10.1007\/springer_crossmark_policy","source":"Crossref","is-referenced-by-count":5,"title":["Green-Fuzz: Efficient Fuzzing for\u00a0Network Protocol Implementations"],"prefix":"10.1007","author":[{"given":"Seyed Behnam","family":"Andarzian","sequence":"first","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Cristian","family":"Daniele","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Erik","family":"Poll","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]}],"member":"297","published-online":{"date-parts":[[2024,4,25]]},"reference":[{"key":"16_CR1","unstructured":"Libfuzzer: A library for coverage-guided fuzz testing (2023). https:\/\/llvm.org\/docs\/LibFuzzer.html. Retrieved 2 Feb 2023"},{"key":"16_CR2","unstructured":"Zardus: preeny (2023). https:\/\/github.com\/zardus\/preeny. Retrieved 6 Jan 2023"},{"key":"16_CR3","unstructured":"Google: ClusterFuzz Trophies (2022). https:\/\/google.github.io\/clusterfuzz\/#trophies. Retrieved 12 Feb 2023"},{"key":"16_CR4","unstructured":"Tuveri, N.: Fuzzing open-SSL (2021). https:\/\/github.com\/openssl\/openssl\/blob\/master\/fuzz\/README.md. Retrieved 6 Feb 2023"},{"key":"16_CR5","unstructured":"Low, W.C.Y.: Dissecting Microsoft IMAP Client Protocol (2022). https:\/\/www.fortinet.com\/blog\/threat-research\/analyzing-microsoft-imap-client-protocol. Retrieved 6 Feb 2023"},{"key":"16_CR6","doi-asserted-by":"crossref","unstructured":"Aschermann, C., Schumilo, S., Abbasi, A., Holz, T.: Ijon: exploring deep state spaces via fuzzing. In: 2020 IEEE Symposium on Security and Privacy (SP), pp. 1597\u20131612. IEEE (2020)","DOI":"10.1109\/SP40000.2020.00117"},{"key":"16_CR7","unstructured":"Ba, J., B\u00f6hme, M., Mirzamomen, Z., Roychoudhury, A.: Stateful greybox fuzzing. In: 31st USENIX Security Symposium (USENIX Security 22), pp. 3255\u20133272 (2022)"},{"key":"16_CR8","doi-asserted-by":"publisher","first-page":"3401","DOI":"10.1007\/s00500-015-2017-6","volume":"21","author":"B Cui","year":"2017","unstructured":"Cui, B., Wang, F., Hao, Y., Chen, X.: WhirlingFuzzwork: a taint-analysis-based API in-memory fuzzing framework. Soft. Comput. 21, 3401\u20133414 (2017)","journal-title":"Soft. Comput."},{"key":"16_CR9","doi-asserted-by":"crossref","unstructured":"Daniele, C., Andarzian, S.B., Poll, E.: Fuzzers for stateful systems: survey and research directions (2023). arXiv preprint arXiv:2301.02490","DOI":"10.1145\/3648468"},{"key":"16_CR10","series-title":"Lecture Notes in Computer Science","doi-asserted-by":"publisher","first-page":"307","DOI":"10.1007\/978-3-319-11164-3_26","volume-title":"Runtime Verification","author":"M Isberner","year":"2014","unstructured":"Isberner, M., Howar, F., Steffen, B.: The TTT algorithm: a redundancy-free approach to active automata learning. In: Bonakdarpour, B., Smolka, S.A. (eds.) RV 2014. LNCS, vol. 8734, pp. 307\u2013322. Springer, Cham (2014). https:\/\/doi.org\/10.1007\/978-3-319-11164-3_26"},{"key":"16_CR11","doi-asserted-by":"crossref","unstructured":"Maier, D., Bittner, O., Munier, M., Beier, J.: FitM: binary-only coverage-guided fuzzing for stateful network protocols. In: Workshop on Binary Analysis Research (BAR), vol. 2022 (2022)","DOI":"10.14722\/bar.2022.23008"},{"key":"16_CR12","doi-asserted-by":"crossref","unstructured":"Natella, R., Pham, V.-T.: Profuzzbench: a benchmark for stateful protocol fuzzing. In: Proceedings of the 30th ACM SIGSOFT international symposium on software testing and analysis, pp. 662\u2013665 (2021)","DOI":"10.1145\/3460319.3469077"},{"key":"16_CR13","doi-asserted-by":"crossref","unstructured":"Pham, V.-T., B\u00f6hme, M., Roychoudhury, A.: AFLNet: a greybox fuzzer for network protocols. In: 2020 IEEE 13th International Conference on Software Testing, Validation and Verification (ICST), pp. 460\u2013465. IEEE (2020)","DOI":"10.1109\/ICST46399.2020.00062"},{"key":"16_CR14","doi-asserted-by":"crossref","unstructured":"Schumilo, S., Aschermann, C., Jemmett, A., Abbasi, A., Holz, T.: Nyx-net: network fuzzing with incremental snapshots. In: Proceedings of the Seventeenth European Conference on Computer Systems, pp. 166\u2013180 (2022)","DOI":"10.1145\/3492321.3519591"},{"key":"16_CR15","unstructured":"Sutton, M., Greene, A., Amini, P.: Fuzzing: Brute Force Vulnerability Discovery. Pearson Education, London (2007)"},{"key":"16_CR16","doi-asserted-by":"publisher","first-page":"198668","DOI":"10.1109\/ACCESS.2020.3025037","volume":"8","author":"Y Yu","year":"2020","unstructured":"Yu, Y., Chen, Z., Gan, S., Wang, X.: SGPFuzzer: a state-driven smart graybox protocol fuzzer for network protocol implementations. IEEE Access 8, 198668\u2013198678 (2020)","journal-title":"IEEE Access"},{"issue":"18","key":"16_CR17","doi-asserted-by":"publisher","first-page":"5194","DOI":"10.3390\/s20185194","volume":"20","author":"Y Zeng","year":"2020","unstructured":"Zeng, Y., et al.: Multifuzz: a coverage-based multiparty-protocol Fuzzer for IoT publish\/subscribe protocols. Sensors 20(18), 5194 (2020)","journal-title":"Sensors"},{"key":"16_CR18","doi-asserted-by":"crossref","unstructured":"Luo, Z., Zuo, F., Shen, Y., Jiao, X., Chang, W., Jiang, Y.: ICS protocol fuzzing: coverage guided packet crack and generation. In: 2020 57th ACM\/IEEE Design Automation Conference (DAC), pp. 1\u20136. IEEE (2020)","DOI":"10.1109\/DAC18072.2020.9218603"},{"key":"16_CR19","unstructured":"Mozilla Security: Peach (2021). https:\/\/github.com\/MozillaSecurity\/peach. Retrieved 2 Feb 2023"},{"key":"16_CR20","doi-asserted-by":"crossref","unstructured":"Yu, B., Wang, P., Yue, T., Tang, Y.: Poster: fuzzing IoT firmware via multi-stage message generation. In: Proceedings of the 2019 ACM SIGSAC Conference on Computer and Communications Security (CCS 2019), pp. 2525\u20132527 (2019)","DOI":"10.1145\/3319535.3363247"},{"key":"16_CR21","doi-asserted-by":"crossref","unstructured":"Natella, R.: StateAFL: Greybox fuzzing for stateful network servers. Empir. Softw. Eng. 27(7) (2022)","DOI":"10.1007\/s10664-022-10233-3"},{"key":"16_CR22","unstructured":"Fioraldi, A., Maier, D., Ei\u00dffeldt, H., Heuse, M.: AFL++: combining incremental steps of fuzzing research. In: 14th USENIX Workshop on Offensive Technologies (WOOT 20) (2020)"},{"key":"16_CR23","unstructured":"The OPC foundation 2023: The OPC Unified Architecture (UA) (2023). https:\/\/opcfoundation.org\/about\/opc-technologies\/opc-ua\/. Retrieved 2 Apr 2023"},{"key":"16_CR24","unstructured":"Modbus Organization: Modbus data communications protocol (2023). https:\/\/modbus.org\/. Retrieved 2 Apr 2023"},{"key":"16_CR25","unstructured":"Cheremushkin, T.: OPC UA security analysis 2023. Technical report, Kaspersky (2023). https:\/\/ics-cert.kaspersky.com\/publications\/reports\/2018\/05\/10\/opc-ua-security-analysis\/. Retrieved 14 Apr 2023"},{"key":"16_CR26","unstructured":"Serebryany, K.: OSS-Fuzz-Google\u2019s continuous fuzzing service for open source software. In: USENIX 2017 (2017)"},{"key":"16_CR27","doi-asserted-by":"crossref","unstructured":"Klooster, T., Turkmen, F., Broenink, G., Hove, R.T., B\u00f6hme, M.: Continuous fuzzing: a study of the effectiveness and scalability of fuzzing in CI\/CD pipelines. In: 2023 IEEE\/ACM International Workshop on Search-Based and Fuzz Testing (SBFT), pp. 25\u201332. IEEE (2023)","DOI":"10.1109\/SBFT59156.2023.00015"}],"container-title":["Lecture Notes in Computer Science","Foundations and Practice of Security"],"original-title":[],"language":"en","link":[{"URL":"https:\/\/link.springer.com\/content\/pdf\/10.1007\/978-3-031-57537-2_16","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2024,4,24]],"date-time":"2024-04-24T19:04:55Z","timestamp":1713985495000},"score":1,"resource":{"primary":{"URL":"https:\/\/link.springer.com\/10.1007\/978-3-031-57537-2_16"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2024]]},"ISBN":["9783031575365","9783031575372"],"references-count":27,"URL":"https:\/\/doi.org\/10.1007\/978-3-031-57537-2_16","relation":{},"ISSN":["0302-9743","1611-3349"],"issn-type":[{"value":"0302-9743","type":"print"},{"value":"1611-3349","type":"electronic"}],"subject":[],"published":{"date-parts":[[2024]]},"assertion":[{"value":"25 April 2024","order":1,"name":"first_online","label":"First Online","group":{"name":"ChapterHistory","label":"Chapter History"}},{"value":"FPS","order":1,"name":"conference_acronym","label":"Conference Acronym","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"International Symposium on Foundations and Practice of Security","order":2,"name":"conference_name","label":"Conference Name","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"Bordeaux","order":3,"name":"conference_city","label":"Conference City","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"France","order":4,"name":"conference_country","label":"Conference Country","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"2023","order":5,"name":"conference_year","label":"Conference Year","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"11 December 2023","order":7,"name":"conference_start_date","label":"Conference Start Date","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"13 December 2023","order":8,"name":"conference_end_date","label":"Conference End Date","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"fps2023","order":10,"name":"conference_id","label":"Conference ID","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"https:\/\/www.fps-2023.com\/","order":11,"name":"conference_url","label":"Conference URL","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"Single-blind","order":1,"name":"type","label":"Type","group":{"name":"ConfEventPeerReviewInformation","label":"Peer Review Information (provided by the conference organizers)"}},{"value":"Easychair","order":2,"name":"conference_management_system","label":"Conference Management System","group":{"name":"ConfEventPeerReviewInformation","label":"Peer Review Information (provided by the conference organizers)"}},{"value":"80","order":3,"name":"number_of_submissions_sent_for_review","label":"Number of Submissions Sent for Review","group":{"name":"ConfEventPeerReviewInformation","label":"Peer Review Information (provided by the conference organizers)"}},{"value":"27","order":4,"name":"number_of_full_papers_accepted","label":"Number of Full Papers Accepted","group":{"name":"ConfEventPeerReviewInformation","label":"Peer Review Information (provided by the conference organizers)"}},{"value":"8","order":5,"name":"number_of_short_papers_accepted","label":"Number of Short Papers Accepted","group":{"name":"ConfEventPeerReviewInformation","label":"Peer Review Information (provided by the conference organizers)"}},{"value":"34% - The value is computed by the equation \"Number of Full Papers Accepted \/ Number of Submissions Sent for Review * 100\" and then rounded to a whole number.","order":6,"name":"acceptance_rate_of_full_papers","label":"Acceptance Rate of Full Papers","group":{"name":"ConfEventPeerReviewInformation","label":"Peer Review Information (provided by the conference organizers)"}},{"value":"3","order":7,"name":"average_number_of_reviews_per_paper","label":"Average Number of Reviews per Paper","group":{"name":"ConfEventPeerReviewInformation","label":"Peer Review Information (provided by the conference organizers)"}},{"value":"4","order":8,"name":"average_number_of_papers_per_reviewer","label":"Average Number of Papers per Reviewer","group":{"name":"ConfEventPeerReviewInformation","label":"Peer Review Information (provided by the conference organizers)"}},{"value":"Yes","order":9,"name":"external_reviewers_involved","label":"External Reviewers Involved","group":{"name":"ConfEventPeerReviewInformation","label":"Peer Review Information (provided by the conference organizers)"}}]}}