{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,6,26]],"date-time":"2026-06-26T04:51:34Z","timestamp":1782449494900,"version":"3.54.5"},"publisher-location":"Cham","reference-count":16,"publisher":"Springer Nature Switzerland","isbn-type":[{"value":"9783032078933","type":"print"},{"value":"9783032078940","type":"electronic"}],"license":[{"start":{"date-parts":[[2025,10,18]],"date-time":"2025-10-18T00:00:00Z","timestamp":1760745600000},"content-version":"tdm","delay-in-days":0,"URL":"https:\/\/www.springernature.com\/gp\/researchers\/text-and-data-mining"},{"start":{"date-parts":[[2025,10,18]],"date-time":"2025-10-18T00:00:00Z","timestamp":1760745600000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/www.springernature.com\/gp\/researchers\/text-and-data-mining"}],"content-domain":{"domain":["link.springer.com"],"crossmark-restriction":false},"short-container-title":[],"published-print":{"date-parts":[[2026]]},"DOI":"10.1007\/978-3-032-07894-0_14","type":"book-chapter","created":{"date-parts":[[2025,10,17]],"date-time":"2025-10-17T19:06:46Z","timestamp":1760728006000},"page":"263-282","update-policy":"https:\/\/doi.org\/10.1007\/springer_crossmark_policy","source":"Crossref","is-referenced-by-count":0,"title":["Edge Coverage Feedback of\u00a0Embedded Systems Fuzzing Based on\u00a0Debugging Interfaces"],"prefix":"10.1007","author":[{"ORCID":"https:\/\/orcid.org\/0000-0002-5847-2508","authenticated-orcid":false,"given":"Weihua","family":"Jiao","sequence":"first","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Qingbao","family":"Li","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Xilong","family":"Li","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Zhifeng","family":"Chen","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Weiping","family":"Yao","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Guimin","family":"Zhang","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Fei","family":"Cao","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]}],"member":"297","published-online":{"date-parts":[[2025,10,18]]},"reference":[{"key":"14_CR1","doi-asserted-by":"publisher","unstructured":"Agrawal, H.: Dominators, super blocks, and program coverage. In: Proceedings of the 21st ACM SIGPLAN-SIGACT Symposium on Principles of Programming Languages, pp. 25\u201334. POPL 1994, Association for Computing Machinery, New York, NY, USA (1994). https:\/\/doi.org\/10.1145\/174675.175935","DOI":"10.1145\/174675.175935"},{"key":"14_CR2","doi-asserted-by":"publisher","unstructured":"Beckmann, M., Steffan, J.: Coverage-guided fuzzing of embedded systems leveraging hardware tracing. In: Computer Security. ESORICS 2022 International Workshops: CyberICPS 2022, SECPRE 2022, SPOSE 2022, CPS4CIP 2022, CDT &SECOMANE 2022, EIS 2022, and SecAssure 2022, Copenhagen, Denmark, 26\u201330 September 2022, Revised Selected Papers, pp. 362\u2013378. Springer-Verlag, Berlin, Heidelberg (2022). https:\/\/doi.org\/10.1007\/978-3-031-25460-4_21","DOI":"10.1007\/978-3-031-25460-4_21"},{"key":"14_CR3","doi-asserted-by":"publisher","unstructured":"B\u00f6hme, M., Pham, V.T., Roychoudhury, A.: Coverage-based GreyBox fuzzing as Markov chain. IEEE Trans. Softw. Eng. 45(5), 489\u2013506 (2019). https:\/\/doi.org\/10.1109\/TSE.2017.2785841","DOI":"10.1109\/TSE.2017.2785841"},{"key":"14_CR4","doi-asserted-by":"publisher","unstructured":"Chen, C., Cui, B., Ma, J., Wu, R., Guo, J., Liu, W.: A systematic review of fuzzing techniques. Comput. Secur. 75, 118\u2013137 (2018). https:\/\/doi.org\/10.1016\/j.cose.2018.02.002","DOI":"10.1016\/j.cose.2018.02.002"},{"key":"14_CR5","unstructured":"Clements, A.A., et al.: HALucinator: firmware re-hosting through abstraction layer emulation. In: USENIX Security Symposium (2020). https:\/\/api.semanticscholar.org\/CorpusID:209379845"},{"key":"14_CR6","unstructured":"Corteggiani, N., Camurati, G., Francillon, A.: Inception: system-wide security testing of real-world embedded systems software. In: Usenix (ed.) USENIX 2018, 27th Usenix Security Symposium, 15-17 August 2018, Baltimore, MD, USA. Baltimore (2018). copyright Usenix. Personal use of this material is permitted. The definitive version of this paper was published in USENIX 2018, 27th Usenix Security Symposium, 15-17 August 2018, Baltimore, MD, USA and is available at:"},{"key":"14_CR7","doi-asserted-by":"crossref","unstructured":"Eisele, M., Ebert, D., Huth, C., Zeller, A.: Fuzzing embedded systems using debug interfaces. In: Proceedings of the 32nd ACM SIGSOFT International Symposium on Software Testing and Analysis (2023). https:\/\/api.semanticscholar.org\/CorpusID:259844933","DOI":"10.1145\/3597926.3598115"},{"key":"14_CR8","doi-asserted-by":"publisher","unstructured":"Feng, X., et al.: Snipuzz: black-box fuzzing of IoT firmware via message snippet inference. In: Proceedings of the 2021 ACM SIGSAC Conference on Computer and Communications Security, pp. 337\u2013350. CCS 2021, Association for Computing Machinery, New York, NY, USA (2021). https:\/\/doi.org\/10.1145\/3460120.3484543","DOI":"10.1145\/3460120.3484543"},{"key":"14_CR9","doi-asserted-by":"publisher","unstructured":"Gan, S., et al.: CollAFL: path sensitive fuzzing. In: 2018 IEEE Symposium on Security and Privacy, SP 2018, Proceedings, 21-23 May 2018, San Francisco, California, USA, pp. 679\u2013696. IEEE Computer Society (2018). https:\/\/doi.org\/10.1109\/SP.2018.00040","DOI":"10.1109\/SP.2018.00040"},{"key":"14_CR10","doi-asserted-by":"publisher","unstructured":"IEEE: IEEE standard for test access port and boundary-scan architecture. IEEE Std 1149.1-2013 (Revision of IEEE Std 1149.1-2001), pp. 1\u2013444 (2013). https:\/\/doi.org\/10.1109\/IEEESTD.2013.6515989","DOI":"10.1109\/IEEESTD.2013.6515989"},{"key":"14_CR11","doi-asserted-by":"publisher","unstructured":"Jiao, W., Li, X., Li, Q., Cao, F., Li, X., Yue, S.: Adaptive mutation based on multi-population evolution strategy for GreyBox fuzzing. Inf. Sci. 705, 121959 (2025). https:\/\/doi.org\/10.1016\/j.ins.2025.121959, https:\/\/www.sciencedirect.com\/science\/article\/pii\/S002002552500091X","DOI":"10.1016\/j.ins.2025.121959"},{"key":"14_CR12","doi-asserted-by":"crossref","unstructured":"Li, W., Shi, J., Li, F., Lin, J., Wang, W., Guan, L.: $$\\mu $$AFL: non-intrusive feedback-driven fuzzing for microcontroller firmware. In: 2022 IEEE\/ACM 44th International Conference on Software Engineering (ICSE), pp. 1\u201312 (2022). https:\/\/api.semanticscholar.org\/CorpusID:246634279","DOI":"10.1145\/3510003.3510208"},{"key":"14_CR13","unstructured":"Scharnowski, T., et al.: Fuzzware: using precise MMIO modeling for effective firmware fuzzing. In: USENIX Security Symposium (2022). https:\/\/api.semanticscholar.org\/CorpusID:240302533"},{"key":"14_CR14","unstructured":"Seyed\u00a0Talebi, S.M., Tavakoli, H., Zhang, H., Zhang, Z., Sani, A., Qian, Z.: Charm: facilitating dynamic analysis of device drivers of mobile systems. In: USENIX Security Symposium (2018)"},{"key":"14_CR15","doi-asserted-by":"publisher","unstructured":"Zaddach, J., Bruno, L., Francillon, A., Balzarotti, D.: Avatar: a framework to support dynamic security analysis of embedded systems\u2019 firmwares. In: NDSS (2014). https:\/\/doi.org\/10.14722\/ndss.2014.23229","DOI":"10.14722\/ndss.2014.23229"},{"key":"14_CR16","unstructured":"Zhou, W., Guan, L., Liu, P., Zhang, Y.: Automatic firmware emulation through invalidity-guided knowledge inference (extended version). In: USENIX Security Symposium (2021). https:\/\/api.semanticscholar.org\/CorpusID:235469057"}],"container-title":["Lecture Notes in Computer Science","Computer Security \u2013 ESORICS 2025"],"original-title":[],"language":"en","link":[{"URL":"https:\/\/link.springer.com\/content\/pdf\/10.1007\/978-3-032-07894-0_14","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2026,6,26]],"date-time":"2026-06-26T04:43:26Z","timestamp":1782449006000},"score":1,"resource":{"primary":{"URL":"https:\/\/link.springer.com\/10.1007\/978-3-032-07894-0_14"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2025,10,18]]},"ISBN":["9783032078933","9783032078940"],"references-count":16,"URL":"https:\/\/doi.org\/10.1007\/978-3-032-07894-0_14","relation":{},"ISSN":["0302-9743","1611-3349"],"issn-type":[{"value":"0302-9743","type":"print"},{"value":"1611-3349","type":"electronic"}],"subject":[],"published":{"date-parts":[[2025,10,18]]},"assertion":[{"value":"18 October 2025","order":1,"name":"first_online","label":"First Online","group":{"name":"ChapterHistory","label":"Chapter History"}},{"value":"ESORICS","order":1,"name":"conference_acronym","label":"Conference Acronym","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"European Symposium on Research in Computer Security","order":2,"name":"conference_name","label":"Conference Name","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"Toulouse","order":3,"name":"conference_city","label":"Conference City","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"France","order":4,"name":"conference_country","label":"Conference Country","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"2025","order":5,"name":"conference_year","label":"Conference Year","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"22 September 2025","order":7,"name":"conference_start_date","label":"Conference Start Date","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"24 September 2025","order":8,"name":"conference_end_date","label":"Conference End Date","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"30","order":9,"name":"conference_number","label":"Conference Number","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"esorics2025","order":10,"name":"conference_id","label":"Conference ID","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"https:\/\/www.esorics2025.org\/","order":11,"name":"conference_url","label":"Conference URL","group":{"name":"ConferenceInfo","label":"Conference Information"}}]}}