{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,5,4]],"date-time":"2026-05-04T08:04:50Z","timestamp":1777881890114,"version":"3.51.4"},"publisher-location":"Cham","reference-count":33,"publisher":"Springer Nature Switzerland","isbn-type":[{"value":"9783032248381","type":"print"},{"value":"9783032248398","type":"electronic"}],"license":[{"start":{"date-parts":[[2026,1,1]],"date-time":"2026-01-01T00:00:00Z","timestamp":1767225600000},"content-version":"tdm","delay-in-days":0,"URL":"https:\/\/www.springernature.com\/gp\/researchers\/text-and-data-mining"},{"start":{"date-parts":[[2026,1,1]],"date-time":"2026-01-01T00:00:00Z","timestamp":1767225600000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/www.springernature.com\/gp\/researchers\/text-and-data-mining"}],"content-domain":{"domain":["link.springer.com"],"crossmark-restriction":false},"short-container-title":[],"published-print":{"date-parts":[[2026]]},"DOI":"10.1007\/978-3-032-24839-8_3","type":"book-chapter","created":{"date-parts":[[2026,4,29]],"date-time":"2026-04-29T06:43:44Z","timestamp":1777445024000},"page":"34-49","update-policy":"https:\/\/doi.org\/10.1007\/springer_crossmark_policy","source":"Crossref","is-referenced-by-count":0,"title":["LLM-Guided Fuzzing for\u00a0Pathological Input Generation"],"prefix":"10.1007","author":[{"ORCID":"https:\/\/orcid.org\/0000-0001-8470-3835","authenticated-orcid":false,"given":"Didier","family":"Ishimwe","sequence":"first","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-4255-4592","authenticated-orcid":false,"given":"Thanhvu","family":"Nguyen","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]}],"member":"297","published-online":{"date-parts":[[2026,4,30]]},"reference":[{"key":"3_CR1","doi-asserted-by":"crossref","unstructured":"Arcaini, P., Bombarda, A., Gargantini, A.: A search-based benchmark generator for constrained combinatorial testing models. In: 2025 IEEE International Conference on Software Testing, Verification and Validation Workshops (ICSTW), pp. 278\u2013287. IEEE (2025)","DOI":"10.1109\/ICSTW64639.2025.10962457"},{"key":"3_CR2","doi-asserted-by":"crossref","unstructured":"Berglund, M., Drewes, F., Van Der\u00a0Merwe, B.: Analyzing catastrophic backtracking behavior in practical regular expression matching. arXiv preprint arXiv:1405.5599 (2014)","DOI":"10.4204\/EPTCS.151.7"},{"issue":"4","key":"3_CR3","doi-asserted-by":"publisher","first-page":"1","DOI":"10.1145\/3532184","volume":"25","author":"W Blair","year":"2022","unstructured":"Blair, W., Mambretti, A., Arshad, S., Weissbacher, M., Robertson, W., Kirda, E., Egele, M.: Hotfuzz: discovering temporal and spatial denial-of-service vulnerabilities through guided micro-fuzzing. ACM Trans. Priv. Secur. 25(4), 1\u201335 (2022)","journal-title":"ACM Trans. Priv. Secur."},{"key":"3_CR4","doi-asserted-by":"crossref","unstructured":"Breck, J., Cyphert, J., Kincaid, Z., Reps, T.: Templates and recurrences: better together. In: Proceedings of the 41st ACM SIGPLAN Conference on Programming Language Design and Implementation, PLDI 2020, pp. 688\u2013702. Association for Computing Machinery, New York, NY, USA (2020)","DOI":"10.1145\/3385412.3386035"},{"key":"3_CR5","doi-asserted-by":"crossref","unstructured":"Burnim, J., Juvekar, S., Sen, K.: Wise: automated test generation for worst-case complexity. In: 2009 IEEE 31st International Conference on Software Engineering, pp. 463\u2013473. IEEE (2009)","DOI":"10.1109\/ICSE.2009.5070545"},{"key":"3_CR6","unstructured":"Carter, K., Ho, S.M.G., Larsen, M.M.A., Sundman, M., Kirkeby, M.H.: Energy and time complexity for sorting algorithms in java. arXiv preprint arXiv:2311.07298 (2023)"},{"key":"3_CR7","unstructured":"Cormen, T.H., Leiserson, C.E., Rivest, R.L., Stein, C.: Introduction to Algorithms. MIT Press (2009)"},{"key":"3_CR8","doi-asserted-by":"crossref","unstructured":"Deng, Y., Xia, C.S., Peng, H., Yang, C., Zhang, L.: Large language models are zero-shot fuzzers: fuzzing deep-learning libraries via large language models. In: Proceedings of the 32nd ACM SIGSOFT International Symposium on Software Testing and Analysis, pp. 423\u2013435 (2023)","DOI":"10.1145\/3597926.3598067"},{"key":"3_CR9","doi-asserted-by":"crossref","unstructured":"Doan, L., Nguyen, T.: AI-assisted autoformalization of combinatorics problems in proof assistants. In: 2025 IEEE\/ACM 47th International Conference on Software Engineering: New Ideas and Emerging Results (ICSE-NIER), pp.\u00a01\u20135. IEEE (2025)","DOI":"10.1109\/ICSE-NIER66352.2025.00006"},{"key":"3_CR10","doi-asserted-by":"crossref","unstructured":"Ishimwe, D., Nguyen, K., Nguyen, T.: Dynaplex: analyzing program complexity using dynamically inferred recurrence relations. Proc. ACM Program. Lang. 5(OOPSLA), 1\u201323 (2021)","DOI":"10.1145\/3485515"},{"key":"3_CR11","doi-asserted-by":"crossref","unstructured":"Lemieux, C., Inala, J.P., Lahiri, S.K., Sen, S.: Codamosa: escaping coverage plateaus in test generation with pre-trained large language models. In: 2023 IEEE\/ACM 45th International Conference on Software Engineering (ICSE), pp. 919\u2013931. IEEE (2023)","DOI":"10.1109\/ICSE48619.2023.00085"},{"key":"3_CR12","doi-asserted-by":"crossref","unstructured":"Lemieux, C., Padhye, R., Sen, K., Song, D.: Perffuzz: automatically generating pathological inputs. In: Proceedings of the 27th ACM SIGSOFT International Symposium on Software Testing and Analysis, pp. 254\u2013265 (2018)","DOI":"10.1145\/3213846.3213874"},{"key":"3_CR13","unstructured":"Li, Y., et al.: $$\\{$$RegexScalpel$$\\}$$: regular expression denial of service ($$\\{ \\{ \\{ \\{ \\{$$ReDoS$$\\} \\} \\} \\} \\}$$) defense by $$\\{$$Localize-and-Fix$$\\}$$. In: 31st USENIX Security Symposium (USENIX Security 2022), pp. 4183\u20134200 (2022)"},{"key":"3_CR14","doi-asserted-by":"crossref","unstructured":"Liu, Y., Meng, W.: Acquirer: a hybrid approach to detecting algorithmic complexity vulnerabilities. In: Proceedings of the 2022 ACM SIGSAC Conference on Computer and Communications Security, pp. 2071\u20132084 (2022)","DOI":"10.1145\/3548606.3559337"},{"key":"3_CR15","doi-asserted-by":"crossref","unstructured":"Liu, Y., Zhang, M., Meng, W.: Revealer: detecting and exploiting regular expression denial-of-service vulnerabilities. In: 2021 IEEE Symposium on Security and Privacy (SP), pp. 1468\u20131484. IEEE (2021)","DOI":"10.1109\/SP40001.2021.00062"},{"key":"3_CR16","doi-asserted-by":"crossref","unstructured":"Nam, D., Macvean, A., Hellendoorn, V., Vasilescu, B., Myers, B.: Using an LLM to help with code understanding. In: Proceedings of the IEEE\/ACM 46th International Conference on Software Engineering, pp. 1\u201313 (2024)","DOI":"10.1145\/3597503.3639187"},{"key":"3_CR17","doi-asserted-by":"crossref","unstructured":"Noller, Y., Kersten, R., P\u0103s\u0103reanu, C.S.: Badger: complexity analysis with fuzzing and symbolic execution. In: International Symposium on Software Testing and Analysis, pp. 322\u2013332 (2018)","DOI":"10.1145\/3213846.3213868"},{"key":"3_CR18","unstructured":"Ollama: Gpt-oss:20b (2025). https:\/\/ollama.com\/library\/gpt-oss%3A20b"},{"key":"3_CR19","unstructured":"OpenAI: GPT-4 technical report. CoRR abs\/2303.08774 (2023). https:\/\/doi.org\/10.48550\/arXiv.2303.08774"},{"key":"3_CR20","doi-asserted-by":"crossref","unstructured":"Petsios, T., Zhao, J., Keromytis, A.D., Jana, S.: Slowfuzz: automated domain-independent detection of algorithmic complexity vulnerabilities. In: Proceedings of the 2017 ACM SIGSAC Conference on Computer and Communications Security, pp. 2155\u20132168 (2017)","DOI":"10.1145\/3133956.3134073"},{"key":"3_CR21","doi-asserted-by":"publisher","DOI":"10.1016\/j.infsof.2024.107523","volume":"175","author":"C Pornprasit","year":"2024","unstructured":"Pornprasit, C., Tantithamthavorn, C.: Fine-tuning and prompt engineering for large language models-based code review automation. Inf. Softw. Technol. 175, 107523 (2024)","journal-title":"Inf. Softw. Technol."},{"key":"3_CR22","unstructured":"Raimondi, F., Chang, B.Y.E.: Calculating the differential cost of code changes (2022). https:\/\/www.amazon.science\/blog\/calculating-the-differential-cost-of-code-changes"},{"key":"3_CR23","unstructured":"Sch\u00e4fer, M., Nadi, S., Eghbali, A., Tip, F.: Adaptive test generation using a large language model. arXiv preprint arXiv:2302.06527 (2023)"},{"key":"3_CR24","doi-asserted-by":"crossref","unstructured":"Shen, Y., Jiang, Y., Xu, C., Yu, P., Ma, X., Lu, J.: Rescue: crafting regular expression DoS attacks. In: Proceedings of the 33rd ACM\/IEEE International Conference on Automated Software Engineering, pp. 225\u2013235 (2018)","DOI":"10.1145\/3238147.3238159"},{"key":"3_CR25","doi-asserted-by":"crossref","unstructured":"Sobania, D., Briesch, M., Hanna, C., Petke, J.: An analysis of the automatic bug fixing performance of chatgpt. In: 2023 IEEE\/ACM International Workshop on Automated Program Repair (APR), pp. 23\u201330. IEEE (2023)","DOI":"10.1109\/APR59189.2023.00012"},{"key":"3_CR26","doi-asserted-by":"crossref","unstructured":"Wang, D., Hoffmann, J.: Type-guided worst-case input generation. Proc. ACM Program. Lang. 3(POPL), 1\u201330 (2019)","DOI":"10.1145\/3290326"},{"key":"3_CR27","doi-asserted-by":"crossref","unstructured":"Wang, P., Wang, D., Chlipala, A.: Timl: a functional language for practical complexity analysis with invariants. Proc. ACM Program. Lang. 1(OOPSLA), 79 (2017)","DOI":"10.1145\/3133903"},{"key":"3_CR28","doi-asserted-by":"crossref","unstructured":"Wei, J., Chen, J., Feng, Y., Ferles, K., Dillig, I.: Singularity: pattern fuzzing for worst case complexity. In: Proceedings of the 2018 26th ACM Joint Meeting on European Software Engineering Conference and Symposium on the Foundations of Software Engineering, pp. 213\u2013223 (2018)","DOI":"10.1145\/3236024.3236039"},{"key":"3_CR29","series-title":"Lecture Notes in Computer Science","doi-asserted-by":"publisher","first-page":"3","DOI":"10.1007\/978-3-662-54580-5_1","volume-title":"Tools and Algorithms for the Construction and Analysis of Systems","author":"V W\u00fcstholz","year":"2017","unstructured":"W\u00fcstholz, V., Olivo, O., Heule, M.J.H., Dillig, I.: Static detection of DoS vulnerabilities in programs that use regular expressions. In: Legay, A., Margaria, T. (eds.) TACAS 2017. LNCS, vol. 10206, pp. 3\u201320. Springer, Heidelberg (2017). https:\/\/doi.org\/10.1007\/978-3-662-54580-5_1"},{"key":"3_CR30","doi-asserted-by":"crossref","unstructured":"Xia, C.S., Paltenghi, M., Le\u00a0Tian, J., Pradel, M., Zhang, L.: Fuzz4all: universal fuzzing with large language models. In: Proceedings of the IEEE\/ACM 46th International Conference on Software Engineering, pp. 1\u201313 (2024)","DOI":"10.1145\/3597503.3639121"},{"key":"3_CR31","doi-asserted-by":"crossref","unstructured":"Yang, C., Chen, J., Lin, B., Wang, Z., Zhou, J.: Advancing code coverage: incorporating program analysis with large language models. ACM Trans. Softw. Eng. Methodol. (2025)","DOI":"10.1145\/3748505"},{"key":"3_CR32","doi-asserted-by":"crossref","unstructured":"\u017dikeli\u0107, \u0110., Chang, B.Y.E., Bolignano, P., Raimondi, F.: Differential cost analysis with simultaneous potentials and anti-potentials. In: Proceedings of the 43rd ACM SIGPLAN International Conference on Programming Language Design and Implementation, pp. 442\u2013457 (2022)","DOI":"10.1145\/3519939.3523435"},{"issue":"1","key":"3_CR33","doi-asserted-by":"publisher","first-page":"661","DOI":"10.1007\/s10586-017-0730-x","volume":"20","author":"V Zlomisli\u0107","year":"2017","unstructured":"Zlomisli\u0107, V., Fertalj, K., Sruk, V.: Denial of service attacks, defences and research challenges. Clust. Comput. 20(1), 661\u2013671 (2017). https:\/\/doi.org\/10.1007\/s10586-017-0730-x","journal-title":"Clust. Comput."}],"container-title":["Lecture Notes in Computer Science","Search-Based Software Engineering"],"original-title":[],"language":"en","link":[{"URL":"https:\/\/link.springer.com\/content\/pdf\/10.1007\/978-3-032-24839-8_3","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2026,5,1]],"date-time":"2026-05-01T00:56:12Z","timestamp":1777596972000},"score":1,"resource":{"primary":{"URL":"https:\/\/link.springer.com\/10.1007\/978-3-032-24839-8_3"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2026]]},"ISBN":["9783032248381","9783032248398"],"references-count":33,"URL":"https:\/\/doi.org\/10.1007\/978-3-032-24839-8_3","relation":{},"ISSN":["0302-9743","1611-3349"],"issn-type":[{"value":"0302-9743","type":"print"},{"value":"1611-3349","type":"electronic"}],"subject":[],"published":{"date-parts":[[2026]]},"assertion":[{"value":"30 April 2026","order":1,"name":"first_online","label":"First Online","group":{"name":"ChapterHistory","label":"Chapter History"}},{"value":"The authors have no competing interests to declare that are relevant to the content of this article.","order":1,"name":"Ethics","group":{"name":"EthicsHeading","label":"Disclosure of Interests"}},{"value":"SSBSE","order":1,"name":"conference_acronym","label":"Conference Acronym","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"International Symposium on Search Based Software Engineering","order":2,"name":"conference_name","label":"Conference Name","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"Seoul","order":3,"name":"conference_city","label":"Conference City","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"Korea (Republic of)","order":4,"name":"conference_country","label":"Conference Country","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"2025","order":5,"name":"conference_year","label":"Conference Year","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"16 November 2025","order":7,"name":"conference_start_date","label":"Conference Start Date","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"16 November 2025","order":8,"name":"conference_end_date","label":"Conference End Date","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"17","order":9,"name":"conference_number","label":"Conference Number","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"ssbse2025","order":10,"name":"conference_id","label":"Conference ID","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"https:\/\/conf.researchr.org\/home\/ssbse-2025","order":11,"name":"conference_url","label":"Conference URL","group":{"name":"ConferenceInfo","label":"Conference Information"}}]}}