{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2025,2,21]],"date-time":"2025-02-21T07:20:17Z","timestamp":1740122417126,"version":"3.37.3"},"reference-count":64,"publisher":"Springer Science and Business Media LLC","issue":"6","license":[{"start":{"date-parts":[[2019,5,31]],"date-time":"2019-05-31T00:00:00Z","timestamp":1559260800000},"content-version":"tdm","delay-in-days":0,"URL":"http:\/\/www.springer.com\/tdm"},{"start":{"date-parts":[[2019,5,31]],"date-time":"2019-05-31T00:00:00Z","timestamp":1559260800000},"content-version":"vor","delay-in-days":0,"URL":"http:\/\/www.springer.com\/tdm"}],"content-domain":{"domain":["link.springer.com"],"crossmark-restriction":false},"short-container-title":["Empir Software Eng"],"published-print":{"date-parts":[[2019,12]]},"DOI":"10.1007\/s10664-019-09725-6","type":"journal-article","created":{"date-parts":[[2019,5,31]],"date-time":"2019-05-31T15:02:38Z","timestamp":1559314958000},"page":"3630-3658","update-policy":"https:\/\/doi.org\/10.1007\/springer_crossmark_policy","source":"Crossref","is-referenced-by-count":11,"title":["Evolutionary Fuzzing of Android OS Vendor System Services"],"prefix":"10.1007","volume":"24","author":[{"given":"Domenico","family":"Cotroneo","sequence":"first","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"ORCID":"https:\/\/orcid.org\/0000-0001-9358-7100","authenticated-orcid":false,"given":"Antonio Ken","family":"Iannillo","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Roberto","family":"Natella","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]}],"member":"297","published-online":{"date-parts":[[2019,5,31]]},"reference":[{"key":"9725_CR1","unstructured":"Android (2018) Android \u2013 Certified - Partners. https:\/\/www.android.com\/certified\/partners\/"},{"key":"9725_CR2","unstructured":"Android Open-Source Project (2016) Android Open Source Project. https:\/\/source.android.com\/"},{"key":"9725_CR3","unstructured":"Android Studio (2017) Android Debug Bridge. https:\/\/developer.android.com\/studio\/command-line\/adb.html"},{"key":"9725_CR4","unstructured":"AndroidXRef (2017a) Cross Reference: InputManager.java - injectInputEvent. http:\/\/androidxref.com\/7.0.0_r1\/xref\/frameworks\/base\/core\/java\/android\/hardware\/input\/InputManager.java#833"},{"key":"9725_CR5","unstructured":"AndroidXRef (2017b) Cross Reference: Intent.java. http:\/\/androidxref.com\/7.0.0_r1\/xref\/frameworks\/base\/core\/java\/android\/content\/Intent.java"},{"key":"9725_CR6","unstructured":"AndroidXRef (2019) Cross Reference: AIDL service definitions. androidxref.com\/7.0.0_r1\/s?path=aidl&project=frameworks"},{"key":"9725_CR7","doi-asserted-by":"crossref","unstructured":"Arcuri A (2018) Evomaster: Evolutionary multi-context automated system test generation. In: IEEE Conference on Software Testing, Validation and Verification","DOI":"10.1109\/ICST.2018.00046"},{"issue":"3","key":"9725_CR8","doi-asserted-by":"publisher","first-page":"219","DOI":"10.1002\/stvr.1486","volume":"24","author":"A Arcuri","year":"2014","unstructured":"Arcuri A, Briand L (2014) A hitchhiker\u2019s guide to statistical tests for assessing randomized algorithms in software engineering. Software Testing, Verification and Reliability 24(3):219\u2013250","journal-title":"Software Testing, Verification and Reliability"},{"key":"9725_CR9","doi-asserted-by":"crossref","unstructured":"Au KWY, Zhou YF, Huang Z, Lie D (2012) Pscout: Analyzing the android permission specification. In: Proc ACM Conf on Computer and Communications Security","DOI":"10.1145\/2382196.2382222"},{"key":"9725_CR10","doi-asserted-by":"crossref","DOI":"10.1093\/oso\/9780195099713.001.0001","volume-title":"Evolutionary Algorithms in Theory and Practice: Evolution Strategies, Evolutionary Programming, Genetic Algorithms","author":"T Back","year":"1996","unstructured":"Back T (1996) Evolutionary Algorithms in Theory and Practice: Evolution Strategies, Evolutionary Programming, Genetic Algorithms. Oxford University Press, Oxford"},{"key":"9725_CR11","unstructured":"B\u00e4ck T, Hoffmeister F (1991) Extended selection mechanisms in genetic algorithms. Morgan Kaufmann, pp 92\u201399"},{"key":"9725_CR12","doi-asserted-by":"crossref","unstructured":"Bhansali S, Chen WK, De Jong S, Edwards A, Murray R, Drini\u0107 M, Miho\u010dka D, Chau J (2006) Framework for instruction-level tracing and analysis of program executions. In: Proc 2nd Intl Conference on Virtual Execution Environments, ACM","DOI":"10.1145\/1134760.1220164"},{"key":"9725_CR13","doi-asserted-by":"crossref","unstructured":"B\u00f6hme M, Pham VT, Roychoudhury A (2016) Coverage-based greybox fuzzing as markov chain. In: Proceedings of the 2016 ACM SIGSAC Conference on Computer and Communications Security, ACM, pp 1032\u20131043","DOI":"10.1145\/2976749.2978428"},{"key":"9725_CR14","doi-asserted-by":"crossref","unstructured":"B\u00f6hme M, Pham VT, Nguyen MD, Roychoudhury A (2017) Directed greybox fuzzing. In: Proceedings of the 2017 ACM SIGSAC Conference on Computer and Communications Security (CCS\u201917), fix this citation","DOI":"10.1145\/3133956.3134020"},{"key":"9725_CR15","doi-asserted-by":"crossref","unstructured":"Bounimova E, Godefroid P, Molnar D (2013) Billions and billions of constraints: Whitebox fuzz testing in production. In: Proceedings of the 2013 International Conference on Software Engineering, IEEE Press, pp 122\u2013131","DOI":"10.1109\/ICSE.2013.6606558"},{"key":"9725_CR16","unstructured":"Cadar C, Dunbar D, Engler DR, et al. (2008) KLEE: Unassisted And automatic generation of High-Coverage tests for complex systems programs. In: OSDI, vol 8. pp 209\u2013224"},{"key":"9725_CR17","doi-asserted-by":"crossref","unstructured":"Cao C, Gao N, Liu P, Xiang J (2015) Towards Analyzing the Input Validation Vulnerabilities associated with Android System Services. In: Proc 31st Annual Computer Security Applications Conf, ACM","DOI":"10.1145\/2818000.2818033"},{"key":"9725_CR18","doi-asserted-by":"crossref","unstructured":"Cotroneo D, Di Leo D, Fucci F, Natella R (2013a) Sabrine: State-based robustness testing of operating systems. In: Proc IEEE\/ACM 28th Intl Conf Automated Software Engineering (ASE)","DOI":"10.1109\/ASE.2013.6693073"},{"key":"9725_CR19","doi-asserted-by":"crossref","unstructured":"Cotroneo D, Grottke M, Natella R, Pietrantuono R, Trivedi KS (2013b) Fault Triggers in Open-Source Software: An Experience Report. In: Proc 24th Intl Symp Software Reliability Engineering (ISSRE)","DOI":"10.1109\/ISSRE.2013.6698917"},{"key":"9725_CR20","unstructured":"Fabre JC, Salles F, Moreno MR, Arlat J (1999) Assessment of COTS microkernels by fault injection. In: Proc. Dependable Computing for Critical Applications 7"},{"key":"9725_CR21","doi-asserted-by":"crossref","unstructured":"Feng H, Shin KG (2016) Understanding and defending the Binder attack surface in Android. In: Proc 32nd Annual Conf on Computer Security Applications, ACM","DOI":"10.1145\/2991079.2991120"},{"issue":"1","key":"9725_CR22","doi-asserted-by":"publisher","first-page":"87","DOI":"10.2307\/2340521","volume":"85","author":"RA Fisher","year":"1922","unstructured":"Fisher RA (1922) On the interpretation of \u03c7 2 from contingency tables, and the calculation of p. J R Stat Soc 85(1):87\u201394","journal-title":"J R Stat Soc"},{"key":"9725_CR23","unstructured":"Fraser G (2017) EvoSuite \u2014 Automatic Test Suite Generation for Java. http:\/\/http:\/\/www.evosuite.org\/"},{"key":"9725_CR24","doi-asserted-by":"crossref","unstructured":"Fraser G, Arcuri A (2011a) Evosuite: automatic test suite generation for object-oriented software. In: Proceedings of the 19th ACM SIGSOFT Symposium and the 13th European Conference on Foundations of Software Engineering, ACM, pp 416\u2013419","DOI":"10.1145\/2025113.2025179"},{"key":"9725_CR25","doi-asserted-by":"crossref","unstructured":"Fraser G, Arcuri A (2011b) It is not the length that matters, it is how you control it. In: 2011 IEEE Fourth International Conference on Software Testing, Verification and Validation (ICST), IEEE, pp 150\u2013159","DOI":"10.1109\/ICST.2011.54"},{"issue":"3","key":"9725_CR26","doi-asserted-by":"publisher","first-page":"611","DOI":"10.1007\/s10664-013-9288-2","volume":"20","author":"G Fraser","year":"2015","unstructured":"Fraser G, Arcuri A (2015) 1600 faults in 100 projects: Automatically finding faults while achieving high coverage with evosuite. Empir Softw Eng 20(3):611\u2013639","journal-title":"Empir Softw Eng"},{"key":"9725_CR27","unstructured":"Godefroid P, Levin MY, Molnar DA et al (2008) Automated whitebox fuzz testing. In: NDSS, vol 8"},{"key":"9725_CR28","unstructured":"Goldberg DE, Deb K (1991) A comparative analysis of selection schemes used in genetic algorithms. In: Foundations of Genetic Algorithms, vol 1. Elsevier, pp 69\u201393"},{"key":"9725_CR29","unstructured":"Google Inc (2017) OSS-Fuzz - Continuous Fuzzing for Open Source Software. https:\/\/github.com\/google\/oss-fuzz"},{"issue":"1","key":"9725_CR30","doi-asserted-by":"publisher","first-page":"122","DOI":"10.1109\/TSMC.1986.289288","volume":"16","author":"JJ Grefenstette","year":"1986","unstructured":"Grefenstette JJ (1986) Optimization of control parameters for genetic algorithms. IEEE Trans Syst Man Cybern 16(1):122\u2013128","journal-title":"IEEE Trans Syst Man Cybern"},{"key":"9725_CR31","doi-asserted-by":"crossref","unstructured":"Harman M, McMinn P, De Souza JT, Yoo S (2012) Search based software engineering: Techniques, taxonomy, tutorial. In: Empirical Software Engineering and Verification, Springer, pp 1\u201359","DOI":"10.1007\/978-3-642-25231-0_1"},{"key":"9725_CR32","doi-asserted-by":"crossref","unstructured":"Hu Y, Neamtiu I (2016) Fuzzy and cross-app replay for smartphone apps. In: Proc 11th Intl Wksp, Automation of Software Test, ACM","DOI":"10.1145\/2896921.2896925"},{"key":"9725_CR33","doi-asserted-by":"crossref","unstructured":"Iannillo AK, Natella R, Cotroneo D, Nita-Rotaru C (2017) Chizpurfle: A gray-box android fuzzer for vendor service customizations. In: Proc 28th Intl Symp on Software Reliability Engineering (ISSRE), fix this citation","DOI":"10.1109\/ISSRE.2017.16"},{"key":"9725_CR34","unstructured":"Kanoun K, Crouzet Y, Kalakech A, Rugina AE, Rumeau P (2005) Benchmarking the dependability of Windows and Linux using PostMark workloads. In: Proc 16th IEEE Intl Symp on Software Reliability Engineering"},{"key":"9725_CR35","doi-asserted-by":"crossref","unstructured":"Klees G, Ruef A, Cooper B, Wei S, Hicks M (2018) Evaluating fuzz testing. In: Proc ACM SIGSAC Conf on Computer and Communications Security, pp 2123\u20132138","DOI":"10.1145\/3243734.3243804"},{"key":"9725_CR36","doi-asserted-by":"crossref","unstructured":"Kochhar PS, Thung F, Lo D (2015) Code coverage and test suite effectiveness: Empirical study with real bugs in large systems. In: 2015 IEEE 22nd International Conference on Software Analysis, Evolution and Reengineering (SANER), IEEE, pp 560\u2013564","DOI":"10.1109\/SANER.2015.7081877"},{"issue":"9","key":"9725_CR37","doi-asserted-by":"publisher","first-page":"837","DOI":"10.1109\/32.877845","volume":"26","author":"P. Koopman","year":"2000","unstructured":"Koopman P, DeVale J (2000) The exception handling effectiveness of POSIX operating systems. IEEE Trans Softw Eng 26(9):837\u2013848","journal-title":"IEEE Transactions on Software Engineering"},{"issue":"260","key":"9725_CR38","doi-asserted-by":"publisher","first-page":"583","DOI":"10.1080\/01621459.1952.10483441","volume":"47","author":"WH Kruskal","year":"1952","unstructured":"Kruskal WH, Wallis WA (1952) Use of ranks in one-criterion variance analysis. J Am Stat Assoc 47(260):583\u2013621","journal-title":"J Am Stat Assoc"},{"key":"9725_CR39","unstructured":"Levin J (2015) Android internals:: A confectioner\u2019s cookbook"},{"issue":"6","key":"9725_CR40","doi-asserted-by":"publisher","first-page":"190","DOI":"10.1145\/1064978.1065034","volume":"40","author":"Chi-Keung Luk","year":"2005","unstructured":"Luk CK, Cohn R, Muth R, Patil H, Klauser A, Lowney G, Wallace S, Reddi VJ, Hazelwood K (2005) Pin: Building customized program analysis tools with dynamic instrumentation. In: Acm Sigplan Notices, ACM, vol 40. pp 190\u2013200","journal-title":"ACM SIGPLAN Notices"},{"key":"9725_CR41","doi-asserted-by":"crossref","unstructured":"Mahmood R, Esfahani N, Kacem T, Mirzaei N, Malek S, Stavrou A (2012) A whitebox approach for automated security testing of android applications on the cloud. In: Proc 7th Intl Wksp Automation of Software Test (AST), IEEE","DOI":"10.1109\/IWAST.2012.6228986"},{"key":"9725_CR42","doi-asserted-by":"crossref","unstructured":"Maji AK, Arshad FA, Bagchi S, Rellermeyer JS (2012) An empirical study of the robustness of Inter-Component communication in android. In: Proc IEEE\/IFIP Intl Conf on Dependable Systems and Networks (DSN)","DOI":"10.1109\/DSN.2012.6263963"},{"key":"9725_CR43","unstructured":"Mann HB, Whitney DR (1947) On a test of whether one of two random variables is stochastically larger than the other. The annals of mathematical statistics pp 50\u201360"},{"key":"9725_CR44","unstructured":"Michal Zalewski (2016) American Fuzzy Lop (AFL). http:\/\/lcamtuf.coredump.cx\/afl\/"},{"issue":"12","key":"9725_CR45","doi-asserted-by":"publisher","first-page":"32","DOI":"10.1145\/96267.96279","volume":"33","author":"BP Miller","year":"1990","unstructured":"Miller BP, Fredriksen L, So B (1990) An empirical study of the reliability of UNIX utilities. Commun ACM 33(12):32\u201344","journal-title":"Commun ACM"},{"key":"9725_CR46","unstructured":"Mitchell M, Forrest S, Holland JH (1992) The royal road for genetic algorithms: Fitness landscapes and ga performance. In: Proceedings of the first European Conference on Artificial Life, pp 245\u2013254"},{"key":"9725_CR47","volume-title":"Fuzzing the Phone in your Phone","author":"C Mulliner","year":"2009","unstructured":"Mulliner C, Miller C (2009) Fuzzing the Phone in your Phone. Black Hat, USA"},{"issue":"1","key":"9725_CR48","doi-asserted-by":"publisher","first-page":"1","DOI":"10.1109\/4235.843491","volume":"4","author":"B Naudts","year":"2000","unstructured":"Naudts B, Kallel L (2000) A comparison of predictive measures of problem difficulty in evolutionary algorithms. IEEE Trans Evol Comput 4(1):1\u201315","journal-title":"IEEE Trans Evol Comput"},{"issue":"6","key":"9725_CR49","doi-asserted-by":"publisher","first-page":"89","DOI":"10.1145\/1273442.1250746","volume":"42","author":"Nicholas Nethercote","year":"2007","unstructured":"Nethercote N, Seward J (2007) Valgrind: A framework for heavyweight dynamic binary instrumentation. In: ACM Sigplan notices, ACM, vol 42","journal-title":"ACM SIGPLAN Notices"},{"key":"9725_CR50","unstructured":"Ravn\u00e5s OAV (2017) F R IDA. https:\/\/www.frida.re"},{"key":"9725_CR51","doi-asserted-by":"crossref","unstructured":"Petsios T, Zhao J, Keromytis AD, Jana S (2017) Slowfuzz: Automated domain-independent detection of algorithmic complexity vulnerabilities. arXiv: 170808437 Fix this citation","DOI":"10.1145\/3133956.3134073"},{"key":"9725_CR52","doi-asserted-by":"crossref","unstructured":"Rawat S, Jain V, Kumar A, Cojocar L, Giuffrida C, Bos H (2017) Vuzzer: Application-aware evolutionary fuzzing. In: Proceedings of the Network and Distributed System Security Symposium (NDSS)","DOI":"10.14722\/ndss.2017.23404"},{"key":"9725_CR53","unstructured":"Samsung (2017a) WE VoIP Application for Business. http:\/\/www.samsung.com\/us\/business\/business-communication-systems\/unified-communication-solutions\/IPX-LSMP\/STD"},{"key":"9725_CR54","unstructured":"Samsung (2017b) What are the advantages of S Pen. http:\/\/www.samsung.com\/global\/galaxy\/what-is\/s-pen\/"},{"key":"9725_CR55","doi-asserted-by":"crossref","unstructured":"Sasnauskas R, Regehr J (2014) Intent fuzzer: Crafting intents of death. in: Proc. Joint intl. Wksp on dynamic analysis (WODA) and Software and System Performance Testing, Debugging, and Analytics (PERTEA)","DOI":"10.1145\/2632168.2632169"},{"key":"9725_CR56","unstructured":"Stack Overflow (2016) What is SystemServer for Android?. https:\/\/stackoverflow.com\/questions\/34651015\/what-is-systemserver-for-android"},{"key":"9725_CR57","unstructured":"Statista (2018) Global market share held by the leading smartphone operating systems in sales to end users from 1st quarter 2009 to 2nd quarter 2017. https:\/\/www.statista.com\/statistics\/266136\/global-market-share-held-by-smartphone-operating-systems\/"},{"issue":"2","key":"9725_CR58","first-page":"101","volume":"25","author":"A Vargha","year":"2000","unstructured":"Vargha A, Delaney HD (2000) A critique and improvement of the cl common language effect size statistics of mcgraw and wong. J Educ Behav Stat 25(2):101\u2013132","journal-title":"J Educ Behav Stat"},{"key":"9725_CR59","doi-asserted-by":"crossref","unstructured":"Veggalam S, Rawat S, Haller I, Bos H (2016) Ifuzzer: An evolutionary interpreter fuzzer using genetic programming. In: European Symposium on Research in Computer Security, Springer, pp 581\u2013601","DOI":"10.1007\/978-3-319-45744-4_29"},{"issue":"14","key":"9725_CR60","doi-asserted-by":"publisher","first-page":"817","DOI":"10.1016\/S0950-5849(01)00188-4","volume":"43","author":"D Whitley","year":"2001","unstructured":"Whitley D (2001) An overview of evolutionary algorithms: practical issues and common pitfalls. Inf Softw Technol 43(14):817\u2013831","journal-title":"Inf Softw Technol"},{"issue":"2","key":"9725_CR61","doi-asserted-by":"publisher","first-page":"38","DOI":"10.1145\/2963145","volume":"49","author":"M Xu","year":"2016","unstructured":"Xu M, Song C, Ji Y, Shih MW, Lu K, Zheng C, Duan R, Jang Y, Lee B, Qian C et al (2016) Toward engineering a secure android ecosystem: a survey of existing techniques. ACM Comput Surv (CSUR) 49(2):38","journal-title":"ACM Comput Surv (CSUR)"},{"key":"9725_CR62","unstructured":"Yaghmour K (2013) Embedded android: Porting, extending and customizing. O\u2019Reilly Media, Inc"},{"key":"9725_CR63","doi-asserted-by":"crossref","unstructured":"Yang K, Zhuge J, Wang Y, Zhou L, Duan H (2014) IntentFuzzer: detecting capability leaks of android applications. In: Proc 9th ACM Symp on Information, Computer and Communications Security","DOI":"10.1145\/2590296.2590316"},{"key":"9725_CR64","doi-asserted-by":"crossref","unstructured":"Ye H, Cheng S, Zhang L, Jiang F (2013) Droidfuzzer: Fuzzing the android apps with intent-filter tag. In: Proc Intl Conference on Advances in Mobile Computing & Multimedia","DOI":"10.1145\/2536853.2536881"}],"container-title":["Empirical Software Engineering"],"original-title":[],"language":"en","link":[{"URL":"http:\/\/link.springer.com\/content\/pdf\/10.1007\/s10664-019-09725-6.pdf","content-type":"application\/pdf","content-version":"vor","intended-application":"text-mining"},{"URL":"http:\/\/link.springer.com\/article\/10.1007\/s10664-019-09725-6\/fulltext.html","content-type":"text\/html","content-version":"vor","intended-application":"text-mining"},{"URL":"http:\/\/link.springer.com\/content\/pdf\/10.1007\/s10664-019-09725-6.pdf","content-type":"application\/pdf","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2020,12,16]],"date-time":"2020-12-16T16:03:32Z","timestamp":1608134612000},"score":1,"resource":{"primary":{"URL":"http:\/\/link.springer.com\/10.1007\/s10664-019-09725-6"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2019,5,31]]},"references-count":64,"journal-issue":{"issue":"6","published-print":{"date-parts":[[2019,12]]}},"alternative-id":["9725"],"URL":"https:\/\/doi.org\/10.1007\/s10664-019-09725-6","relation":{},"ISSN":["1382-3256","1573-7616"],"issn-type":[{"type":"print","value":"1382-3256"},{"type":"electronic","value":"1573-7616"}],"subject":[],"published":{"date-parts":[[2019,5,31]]},"assertion":[{"value":"31 May 2019","order":1,"name":"first_online","label":"First Online","group":{"name":"ArticleHistory","label":"Article History"}}]}}