{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,10,2]],"date-time":"2026-10-02T10:36:20Z","timestamp":1790937380306,"version":"4.1.0"},"publisher-location":"Cham","reference-count":46,"publisher":"Springer International Publishing","isbn-type":[{"value":"9783319457437","type":"print"},{"value":"9783319457444","type":"electronic"}],"license":[{"start":{"date-parts":[[2016,1,1]],"date-time":"2016-01-01T00:00:00Z","timestamp":1451606400000},"content-version":"tdm","delay-in-days":0,"URL":"https:\/\/www.springer.com\/tdm"},{"start":{"date-parts":[[2016,1,1]],"date-time":"2016-01-01T00:00:00Z","timestamp":1451606400000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/www.springer.com\/tdm"}],"content-domain":{"domain":["link.springer.com"],"crossmark-restriction":false},"short-container-title":[],"published-print":{"date-parts":[[2016]]},"DOI":"10.1007\/978-3-319-45744-4_29","type":"book-chapter","created":{"date-parts":[[2016,9,14]],"date-time":"2016-09-14T04:54:30Z","timestamp":1473828870000},"page":"581-601","update-policy":"https:\/\/doi.org\/10.1007\/springer_crossmark_policy","source":"Crossref","is-referenced-by-count":75,"title":["IFuzzer: An Evolutionary Interpreter Fuzzer Using Genetic Programming"],"prefix":"10.1007","author":[{"given":"Spandan","family":"Veggalam","sequence":"first","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Sanjay","family":"Rawat","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Istvan","family":"Haller","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Herbert","family":"Bos","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]}],"member":"297","published-online":{"date-parts":[[2016,9,15]]},"reference":[{"key":"29_CR1","unstructured":"Anupam, V., Mayer, A.J.: Security of web browser scripting languages: vulnerabilities, attacks, and remedies. In: Proceedings of the 7th USENIX Security Symposium, San Antonio, TX, USA, 26\u201329 January (1998)"},{"key":"29_CR2","doi-asserted-by":"crossref","unstructured":"Hallaraker, O., Vigna, G.: Detecting malicious javascript code in mozilla. In: Proceedings of the 10th IEEE International Conference on Engineering of Complex Computer Systems (ICECCS 2005), pp. 85\u201394 (2005)","DOI":"10.1109\/ICECCS.2005.35"},{"key":"29_CR3","unstructured":"Holler, C., Herzig, K., Zeller, A.: Fuzzing with code fragments. In: Proceedings of the 21th USENIX Security Symposium, pp. 445\u2013458, August 2012"},{"key":"29_CR4","doi-asserted-by":"crossref","unstructured":"Guang-Hong, L., Gang, W., Tao, Z., Jian-Mei, S., Zhuo-Chun, T.: Vulnerability analysis for x86 executables using genetic algorithm and fuzzing. In: Third International Conference on Convergence and Hybrid Information Technology (ICCIT 2008), pp. 491\u2013497, November 2008","DOI":"10.1109\/ICCIT.2008.9"},{"key":"29_CR5","doi-asserted-by":"crossref","unstructured":"Rawat, S., Mounier, L.: An evolutionary computing approach for hunting buffer overflow vulnerabilities: a case of aiming in dim light. In: Proceedings of the European Conference on Computer Network Defense (EC2ND 2010), pp. 37\u201345 (2010)","DOI":"10.1109\/EC2ND.2010.14"},{"key":"29_CR6","doi-asserted-by":"crossref","unstructured":"Sparks, S., Embleton, S., Cunningham, R., Zou, C.: Automated vulnerability analysis: leveraging control flow for evolutionary input crafting. In: Twenty-Third Annual Computer Security Applications Conference (ACSAC), pp. 477\u2013486 (2007)","DOI":"10.1109\/ACSAC.2007.4413013"},{"key":"29_CR7","doi-asserted-by":"publisher","first-page":"3125","DOI":"10.1016\/j.cor.2007.01.013","volume":"35","author":"C DelGrosso","year":"2008","unstructured":"DelGrosso, C., Antoniol, G., Merlo, E., Galinier, P.: Detecting buffer overflow via automatic test input data generation. Comput. Oper. Res. 35, 3125\u20133143 (2008)","journal-title":"Comput. Oper. Res."},{"key":"29_CR8","series-title":"Lecture Notes in Computer Science","doi-asserted-by":"publisher","first-page":"50","DOI":"10.1007\/11751113_5","volume-title":"Rapid Integration of Software Engineering Techniques","author":"E Alba","year":"2006","unstructured":"Alba, E., Chicano, J.F.: Software testing with evolutionary strategies. In: Guelfi, N., Savidis, A. (eds.) RISE 2005. LNCS, vol. 3943, pp. 50\u201365. Springer, Heidelberg (2006)"},{"key":"29_CR9","unstructured":"Zalewski, M.: American fuzzy lop. http:\/\/lcamtuf.coredump.cx\/afl\/"},{"key":"29_CR10","unstructured":"DeMott, J., Enbody, R., Punch, W.F.: Revolutionizing the field of grey-box attack surface testing with evolutionary fuzzing (2007)"},{"key":"29_CR11","doi-asserted-by":"crossref","unstructured":"Weimer, W., Nguyen, T., LeGoues, C., Forrest, S.: Automatically finding patches using genetic programming. In: Proceedings of the 31st International Conference on Software Engineering (ICSE 2009), Washington, DC, USA, pp. 364\u2013374. IEEE Computer Society (2009)","DOI":"10.1109\/ICSE.2009.5070536"},{"key":"29_CR12","doi-asserted-by":"crossref","unstructured":"Kim, D., Nam, J., Song, J., Kim, S.: Automatic patch generation learned from human-written patches. In: Proceedings of the International Conference on Software Engineering (ICSE 2013), Piscataway, NJ, USA, pp. 802\u2013811. IEEE Press (2013)","DOI":"10.1109\/ICSE.2013.6606626"},{"issue":"2","key":"29_CR13","doi-asserted-by":"publisher","first-page":"276","DOI":"10.1109\/TSE.2012.14","volume":"39","author":"G Fraser","year":"2013","unstructured":"Fraser, G., Arcuri, A.: Whole test suite generation. IEEE Trans. Softw. Eng. 39(2), 276\u2013291 (2013)","journal-title":"IEEE Trans. Softw. Eng."},{"key":"29_CR14","doi-asserted-by":"publisher","first-page":"365","DOI":"10.1007\/s10710-010-9109-y","volume":"11","author":"RI McKay","year":"2010","unstructured":"McKay, R.I., Hoai, N.X., Whigham, P.A., Shan, Y., O\u2019Neill, M.: Grammar-based genetic programming: a survey. Genet. Program Evolvable Mach. 11, 365\u2013396 (2010)","journal-title":"Genet. Program Evolvable Mach."},{"issue":"4","key":"29_CR15","doi-asserted-by":"publisher","first-page":"263","DOI":"10.1002\/(SICI)1099-1689(199912)9:4<263::AID-STVR190>3.0.CO;2-Y","volume":"9","author":"RP Pargas","year":"1999","unstructured":"Pargas, R.P., Harrold, M.J., Peck, R.R.: Test-data generation using genetic algorithms. Softw. Test. Verification Reliab. 9(4), 263\u2013282 (1999)","journal-title":"Softw. Test. Verification Reliab."},{"key":"29_CR16","doi-asserted-by":"crossref","unstructured":"Poli, R., Langdon, W.B., McPhee, N.F., Koza, J.R.: A Field Guide to Genetic Programming (2008)","DOI":"10.1145\/1274000.1274124"},{"key":"29_CR17","doi-asserted-by":"crossref","unstructured":"Soule, T., Foster, J.A., Dickinson, J.: Code growth in genetic programming. In: Proceedings of the First Annual Conference Genetic Programming, pp. 215\u2013223, May 1996","DOI":"10.7551\/mitpress\/3242.003.0029"},{"key":"29_CR18","series-title":"Lecture Notes in Computer Science","doi-asserted-by":"publisher","first-page":"37","DOI":"10.1007\/BFb0055926","volume-title":"Genetic Programming","author":"WB Langdon","year":"1998","unstructured":"Langdon, W.B., Poli, R.: Fitness causes bloat: mutation. In: Banzhaf, W., Poli, R., Schoenauer, M., Fogarty, T.C. (eds.) EuroGP 1998. LNCS, vol. 1391, p. 37. Springer, Heidelberg (1998)"},{"key":"29_CR19","volume-title":"The Definitive ANTLR 4 Reference","author":"T Parr","year":"2013","unstructured":"Parr, T.: The Definitive ANTLR 4 Reference, 2nd edn. Pragmatic Bookshelf, Dallas (2013)","edition":"2"},{"key":"29_CR20","doi-asserted-by":"publisher","first-page":"309","DOI":"10.1162\/evco.2006.14.3.309","volume":"14","author":"S Luke","year":"2006","unstructured":"Luke, S., Panait, L.: A comparison of bloat control methods for genetic programming. Evol. Comput. 14, 309\u2013344 (2006)","journal-title":"Evol. Comput."},{"key":"29_CR21","doi-asserted-by":"publisher","first-page":"293","DOI":"10.1162\/evco.1998.6.4.293","volume":"6","author":"T Soule","year":"1998","unstructured":"Soule, T., Foster, J.A.: Effects of code growth and parsimony pressure on populations in genetic programming. Evol. Comput. 6, 293\u2013309 (1998)","journal-title":"Evol. Comput."},{"issue":"1","key":"29_CR22","doi-asserted-by":"publisher","first-page":"17","DOI":"10.1162\/evco.1995.3.1.17","volume":"3","author":"B-T Zhang","year":"1995","unstructured":"Zhang, B.-T., Mhlenbein, H.: Balancing accuracy and parsimony in genetic programming. Evol. Comput. 3(1), 17\u201338 (1995)","journal-title":"Evol. Comput."},{"key":"29_CR23","doi-asserted-by":"crossref","unstructured":"Poli, R., McPhee, N.F.: Covariant Parsimony Pressure in Genetic Programming. Citeseer (2008)","DOI":"10.1145\/1389095.1389340"},{"key":"29_CR24","unstructured":"McPeak, S., Wilkerson, D.S.: The delta tool. http:\/\/delta.tigris.org"},{"key":"29_CR25","unstructured":"Javascript delta tool. https:\/\/github.com\/wala\/jsdelta"},{"issue":"2","key":"29_CR26","doi-asserted-by":"publisher","first-page":"183","DOI":"10.1109\/32.988498","volume":"28","author":"A Zeller","year":"2002","unstructured":"Zeller, A., Hildebrandt, R.: Simplifying and isolating failure-inducing input. IEEE Trans. Software Eng. 28(2), 183\u2013200 (2002)","journal-title":"IEEE Trans. Software Eng."},{"key":"29_CR27","doi-asserted-by":"publisher","first-page":"308","DOI":"10.1109\/TSE.1976.233837","volume":"SE\u20132","author":"T McCabe","year":"1976","unstructured":"McCabe, T.: A complexity measure. IEEE Trans. Softw. Eng. SE\u20132, 308\u2013320 (1976)","journal-title":"IEEE Trans. Softw. Eng."},{"key":"29_CR28","doi-asserted-by":"crossref","unstructured":"Mitchell, R.J.: Managing complexity in software engineering. No.17 in IEE Computing series, P. Peregrinus Ltd. on behalf of the Institution of Electrical Engineers (1990)","DOI":"10.1049\/PBCM017E"},{"key":"29_CR29","unstructured":"Gosling, J., Joy, B., Steele, G., Bracha, G., Buckley, A.: The Java Language Specification: Java SE 8 Edition"},{"key":"29_CR30","unstructured":"ECMA International, Standard ECMA-262 - ECMAScript Language Specification. 5.1st edn., June 2011"},{"key":"29_CR31","unstructured":"https:\/\/bugzilla.mozilla.org\/show_bug.cgi?id=676763"},{"key":"29_CR32","unstructured":"Gdb \u2018exploitable\u2019 plugin. http:\/\/www.cert.org\/vulnerability-analysis\/tools\/triage.cfm"},{"key":"29_CR33","unstructured":"https:\/\/developer.mozilla.org\/en\/docs\/Web\/JavaScript\/Reference\/Strict_mode"},{"key":"29_CR34","unstructured":"https:\/\/www.mozilla.org\/en-US\/security\/advisories\/mfsa2015-102\/"},{"key":"29_CR35","doi-asserted-by":"publisher","first-page":"32","DOI":"10.1145\/96267.96279","volume":"33","author":"BP Miller","year":"1990","unstructured":"Miller, B.P., Fredriksen, L., So, B.: An empirical study of the reliability of UNIX utilities. Commun. ACM 33, 32\u201344 (1990)","journal-title":"Commun. ACM"},{"key":"29_CR36","unstructured":"Clarke, T.: Fuzzing for software vulnerability discovery. Department of Mathematic, Royal Holloway, University of London, Technical report RHUL-MA-2009-4 (2009)"},{"key":"29_CR37","unstructured":"Miller, C.: How smart is intelligent fuzzing-or-how stupid is dumb fuzzing, August 2007"},{"key":"29_CR38","series-title":"IFIP\u2014the International Federation for Information Processing","doi-asserted-by":"publisher","first-page":"173","DOI":"10.1007\/978-0-387-35413-2_16","volume-title":"Communications and Multimedia Security Issues of the New Century","author":"R Kaksonen","year":"2001","unstructured":"Kaksonen, R., Laakso, M., Takanen, A.: Software security assessment through specification mutations and fault injection. In: Steinmetz, R., Dittman, J., Steinebach, M. (eds.) Communications and Multimedia Security Issues of the New Century. IFIP\u2014the International Federation for Information Processing, vol. 64, pp. 173\u2013183. Springer, New York (2001)"},{"key":"29_CR39","doi-asserted-by":"crossref","unstructured":"Yang, X., Chen, Y., Eide, E., Regehr, J.: Finding and understanding bugs in C compilers. In: Proceedings of the 32nd ACM SIGPLAN Conference on Programming Language Design and Implementation, pp. 283\u2013294, June 2011","DOI":"10.1145\/1993316.1993532"},{"key":"29_CR40","unstructured":"Zalewski, M.: Announcing ref_fuzz a 2 year old fuzzer. http:\/\/lcamtuf.blogspot.in\/2010\/06\/announcing-reffuzz-2yo-fuzzer.html"},{"key":"29_CR41","unstructured":"Zalewski, M.: Announcing cross_fuzz a potential 0-day in circulation and more. http:\/\/lcamtuf.blogspot.in\/2011\/01\/announcing-crossfuzz-potential-0-day-in.html"},{"key":"29_CR42","unstructured":"Rudersman, J.: Introducing jsfunfuzz. http:\/\/www.squarefree.com\/2007\/08\/02\/introducing-jsfunfuzz"},{"key":"29_CR43","unstructured":"Arya, A., Neckar, C.: Fuzzing for security. http:\/\/blog.chromium.org\/2012\/04\/fuzzing-for-security.html"},{"issue":"6","key":"29_CR44","doi-asserted-by":"publisher","first-page":"957","DOI":"10.1016\/j.infsof.2008.12.005","volume":"51","author":"W Afzal","year":"2009","unstructured":"Afzal, W., Torkar, R., Feldt, R.: A systematic review of search-based testing for non-functional system properties. Inf. Softw. Technol. 51(6), 957\u2013976 (2009)","journal-title":"Inf. Softw. Technol."},{"issue":"2","key":"29_CR45","doi-asserted-by":"publisher","first-page":"105","DOI":"10.1002\/stvr.294","volume":"14","author":"P McMinn","year":"2004","unstructured":"McMinn, P.: Search-based software test data generation: a survey. Softw. Test. Verification Reliab. 14(2), 105\u2013156 (2004)","journal-title":"Softw. Test. Verification Reliab."},{"key":"29_CR46","series-title":"Lecture Notes in Computer Science","doi-asserted-by":"crossref","first-page":"138","DOI":"10.1007\/978-3-319-09940-8_10","volume-title":"Search-Based Software Engineering","author":"FM Kifetew","year":"2014","unstructured":"Kifetew, F.M., Tiella, R., Tonella, P.: Combining stochastic grammars and genetic programming for coverage testing at the system level. In: Goues, C., Yoo, S. (eds.) SSBSE 2014. LNCS, vol. 8636, pp. 138\u2013152. Springer, Heidelberg (2014)"}],"container-title":["Lecture Notes in Computer Science","Computer Security \u2013 ESORICS 2016"],"original-title":[],"language":"en","link":[{"URL":"https:\/\/link.springer.com\/content\/pdf\/10.1007\/978-3-319-45744-4_29","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2025,6,10]],"date-time":"2025-06-10T18:37:32Z","timestamp":1749580652000},"score":1,"resource":{"primary":{"URL":"https:\/\/link.springer.com\/10.1007\/978-3-319-45744-4_29"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2016]]},"ISBN":["9783319457437","9783319457444"],"references-count":46,"URL":"https:\/\/doi.org\/10.1007\/978-3-319-45744-4_29","relation":{},"ISSN":["0302-9743","1611-3349"],"issn-type":[{"value":"0302-9743","type":"print"},{"value":"1611-3349","type":"electronic"}],"subject":[],"published":{"date-parts":[[2016]]},"assertion":[{"value":"15 September 2016","order":1,"name":"first_online","label":"First Online","group":{"name":"ChapterHistory","label":"Chapter History"}},{"value":"ESORICS","order":1,"name":"conference_acronym","label":"Conference Acronym","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"European Symposium on Research in Computer Security","order":2,"name":"conference_name","label":"Conference Name","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"Heraklion","order":3,"name":"conference_city","label":"Conference City","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"Greece","order":4,"name":"conference_country","label":"Conference Country","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"2016","order":5,"name":"conference_year","label":"Conference Year","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"26 September 2016","order":7,"name":"conference_start_date","label":"Conference Start Date","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"30 September 2016","order":8,"name":"conference_end_date","label":"Conference End Date","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"21","order":9,"name":"conference_number","label":"Conference Number","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"esorics2016","order":10,"name":"conference_id","label":"Conference ID","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"This content has been made available to all.","name":"free","label":"Free to read"}]}}