{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,2,19]],"date-time":"2026-02-19T05:12:46Z","timestamp":1771477966272,"version":"3.50.1"},"reference-count":30,"publisher":"Oxford University Press (OUP)","issue":"2","license":[{"start":{"date-parts":[[2025,10,21]],"date-time":"2025-10-21T00:00:00Z","timestamp":1761004800000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/academic.oup.com\/pages\/standard-publication-reuse-rights"}],"funder":[{"DOI":"10.13039\/501100012166","name":"National Key Research and Development Program of China","doi-asserted-by":"publisher","award":["2021YFB3101804"],"award-info":[{"award-number":["2021YFB3101804"]}],"id":[{"id":"10.13039\/501100012166","id-type":"DOI","asserted-by":"publisher"}]},{"name":"Laboratory for Advanced Computing and Intelligence Engineering","award":["2023-LYJJ-01-032"],"award-info":[{"award-number":["2023-LYJJ-01-032"]}]}],"content-domain":{"domain":[],"crossmark-restriction":false},"short-container-title":[],"published-print":{"date-parts":[[2026,2,15]]},"abstract":"<jats:title>Abstract<\/jats:title>\n                  <jats:p>Coverage-based graybox fuzzing is one of the most effective methods for identifying vulnerabilities in the field of software security testing. To maximize performance, fuzzers need to assess the quality of seeds and make two decisions appropriately: (1) which seed (Parent test case) has more potential for fuzzing, i.e. the prioritization problem? (2) How many new inputs (Child test cases) are generated by mutating a seed, i.e. energy schedule problem? However, existing studies do not rationally utilize metrics of seeds to make the above two decisions. To cope with the above problems, we implement our fuzzer AMOS2. We propose the concepts of state-dependent and state-independent metrics of seeds for the first time. We prioritize the seeds based on state-dependent metrics and balance these metrics according to the idea of multi-objective optimization. To make the energy schedule more rational, we utilize the Analytic Hierarchy Process (AHP) and Technique for Order Preference by Similarity to Ideal Solution (TOPSIS) to evaluate the state-independent metrics of seeds and guide the energy schedule. We evaluate AMOS2\u2019s effectiveness on 10 real-world programs and the ground-truth fuzzing benchmark called MAGMA. The results show that AMOS2 achieves the highest path coverage in 9 of 10 real-world programs and finds a 0-day Floating Point Exception vulnerability (CVE-2024-57598) in mp4dump. In addition, AMOS2 found more bugs in MAGMA than other baseline fuzzers.<\/jats:p>","DOI":"10.1093\/comjnl\/bxaf123","type":"journal-article","created":{"date-parts":[[2025,10,3]],"date-time":"2025-10-03T11:52:52Z","timestamp":1759492372000},"page":"419-434","source":"Crossref","is-referenced-by-count":0,"title":["AMOS2: adaptive multi-objective seed schedule in gray-box fuzzing"],"prefix":"10.1093","volume":"69","author":[{"ORCID":"https:\/\/orcid.org\/0000-0002-5847-2508","authenticated-orcid":false,"given":"Weihua","family":"Jiao","sequence":"first","affiliation":[{"name":"Information Engineering University , Science Avenue, Zhengzhou, 450001 ,","place":["China"]}],"role":[{"role":"author","vocabulary":"crossref"}]},{"ORCID":"https:\/\/orcid.org\/0009-0000-6434-4409","authenticated-orcid":false,"given":"Xilong","family":"Li","sequence":"additional","affiliation":[{"name":"Information Engineering University , Science Avenue, Zhengzhou, 450001 ,","place":["China"]}],"role":[{"role":"author","vocabulary":"crossref"}]},{"ORCID":"https:\/\/orcid.org\/0009-0008-0721-7348","authenticated-orcid":false,"given":"Weiping","family":"Yao","sequence":"additional","affiliation":[{"name":"Information Engineering University , Science Avenue, Zhengzhou, 450001 ,","place":["China"]}],"role":[{"role":"author","vocabulary":"crossref"}]},{"ORCID":"https:\/\/orcid.org\/0000-0001-8901-1002","authenticated-orcid":false,"given":"Zhifeng","family":"Chen","sequence":"additional","affiliation":[{"name":"Information Engineering University , Science Avenue, Zhengzhou, 450001 ,","place":["China"]}],"role":[{"role":"author","vocabulary":"crossref"}]},{"ORCID":"https:\/\/orcid.org\/0000-0003-4647-3383","authenticated-orcid":false,"given":"Guimin","family":"Zhang","sequence":"additional","affiliation":[{"name":"Information Engineering University , Science Avenue, Zhengzhou, 450001 ,","place":["China"]},{"name":"Laboratory for Advanced Computing and Intelligence Engineering , Science Avenue, Zhengzhou, 450001 ,","place":["China"]}],"role":[{"role":"author","vocabulary":"crossref"}]}],"member":"286","published-online":{"date-parts":[[2025,10,21]]},"reference":[{"key":"2026021823461760700_ref1","first-page":"2329","article-title":"Directed greybox fuzzing","volume-title":"ACM SIGSAC conference on computer and communications security, Dallas, Texas, 30 October\u20133 November","author":"B\u00f6hme","year":"2017"},{"key":"2026021823461760700_ref2","doi-asserted-by":"publisher","first-page":"32","DOI":"10.1145\/96267.96279","article-title":"An empirical study of the reliability of unix utilities","volume":"33","author":"Miller","year":"1990","journal-title":"Commun ACM"},{"key":"2026021823461760700_ref3","first-page":"1032","article-title":"Coverage-based greybox fuzzing as markov chain","volume-title":"IEEE transactions on software engineering, Vienna, Austria, 24\u201328 October","author":"B\u00f6hme","year":"2016"},{"key":"2026021823461760700_ref4","doi-asserted-by":"publisher","first-page":"118","DOI":"10.1016\/j.cose.2018.02.002","article-title":"A systematic review of fuzzing techniques","volume":"75","author":"Chen","year":"2018","journal-title":"Comput Secur"},{"key":"2026021823461760700_ref5","article-title":"American fuzzy lop","author":"Zalewski","year":"2013"},{"key":"2026021823461760700_ref6","first-page":"246","article-title":"Improving fuzzing using software complexity metrics","volume-title":"International conference on information security and cryptology, Seoul, South Korea, 25\u201327 November","author":"Shudrak","year":"2016"},{"key":"2026021823461760700_ref7","first-page":"765","article-title":"Memlock: memory usage guided fuzzing","volume-title":"42nd International Conference on Software Engineering (ICSE), Seoul, South Korea, 5\u201311 October","author":"Wen","year":"2020"},{"key":"2026021823461760700_ref8","doi-asserted-by":"publisher","first-page":"1","DOI":"10.1145\/3360600","article-title":"Fuzzfactory: domain-specific fuzzing with waypoints","volume":"3","author":"Padhye","year":"2019","journal-title":"ACM Program Lang"},{"key":"2026021823461760700_ref9","first-page":"3559","article-title":"Constraint-guided directed greybox fuzzing","volume-title":"30th USENIX security symposium (USENIX security 21), virtually, 11\u201313 August","author":"Lee","year":"2021"},{"key":"2026021823461760700_ref10","doi-asserted-by":"crossref","first-page":"679","DOI":"10.1109\/SP.2018.00040","article-title":"CollAFL: path sensitive fuzzing","volume-title":"2018 IEEE symposium on security and privacy (SP), San Francisco, CA, USA, 20\u201324 May","author":"Gan","year":"2018"},{"key":"2026021823461760700_ref11","first-page":"2307","article-title":"EcoFuzz: adaptive energy-saving greybox fuzzing as a variant of the adversarial multi-armed bandit","volume-title":"29th USENIX security symposium (USENIX security 20), virtually, 12\u201314 August","author":"Yue","year":"2020"},{"key":"2026021823461760700_ref12","first-page":"153","article-title":"Search-based software testing: past, present and future","volume-title":"2011 IEEE fourth international conference on software testing, verification and validation workshops, Berlin, Germany, 21\u201325 March","author":"McMinn","year":"2011"},{"key":"2026021823461760700_ref13","first-page":"511","article-title":"Scheduling black-box mutational fuzzing","volume-title":"ACM SIGSAC conference on computer & communications security, Berlin Germany, 4\u20138 November","author":"Woo","year":"2013"},{"key":"2026021823461760700_ref14","first-page":"533","article-title":"Cerebro: context-aware adaptive fuzzing for effective vulnerability detection","volume-title":"27th ACM joint meeting on European software engineering conference and symposium on the foundations of software engineering, Tallinn Estonia, 26\u201330 August","author":"Li","year":"2019"},{"key":"2026021823461760700_ref15","doi-asserted-by":"crossref","article-title":"MobFuzz: adaptive multi-objective optimization in gray-box fuzzing","author":"Zhang","DOI":"10.14722\/ndss.2022.24314"},{"key":"2026021823461760700_ref16","doi-asserted-by":"crossref","first-page":"801","DOI":"10.1016\/j.mcm.2006.03.023","article-title":"An extension of TOPSIS for group decision making","volume":"45","author":"Shih","journal-title":"Math Comput Modell"},{"key":"2026021823461760700_ref17","doi-asserted-by":"publisher","first-page":"1099","DOI":"10.1007\/s10479-020-03718-1","article-title":"Multiple criteria ranking method based on functional proximity index: un-weighted TOPSIS","volume":"311","author":"Liern","year":"2020","journal-title":"Ann Oper Res"},{"key":"2026021823461760700_ref18","doi-asserted-by":"publisher","first-page":"111279","DOI":"10.1016\/j.asoc.2024.111279","article-title":"Towards explainable TOPSIS: visual insights into the effects of weights and aggregations on rankings","volume":"153","author":"Susmaga","year":"2023","journal-title":"Appl Soft Comput"},{"key":"2026021823461760700_ref19","first-page":"81","article-title":"Magma: a ground-truth fuzzing benchmark","volume-title":"International conference on measurement and modeling of computer systems, virtually, 14\u201318 June","author":"Hazimeh","year":"2021"},{"key":"2026021823461760700_ref20","doi-asserted-by":"publisher","first-page":"3444","DOI":"10.1109\/TCYB.2019.2908485","article-title":"Interval multiobjective optimization with memetic algorithms","volume":"50","author":"Sun","year":"2020","journal-title":"IEEE Trans Cybern"},{"key":"2026021823461760700_ref21","doi-asserted-by":"publisher","first-page":"10921","DOI":"10.1007\/s10586-024-04522-3","article-title":"A multiobjective optimization of task workflow scheduling using hybridization of PSO and WOA algorithms in cloud-fog computing","volume":"27","author":"Bansal","year":"2024","journal-title":"IEEE Internet Things J"},{"key":"2026021823461760700_ref22","doi-asserted-by":"publisher","first-page":"283","DOI":"10.1016\/j.asoc.2017.08.012","article-title":"Using variable reduction strategy to accelerate evolutionary optimization","volume":"61","author":"Wu","year":"2017","journal-title":"Appl Soft Comput"},{"key":"2026021823461760700_ref23","doi-asserted-by":"publisher","first-page":"221","DOI":"10.1162\/evco.1994.2.3.221","article-title":"Muiltiobjective optimization using nondominated sorting in genetic algorithms","volume":"2","author":"Srinivas","year":"1994","journal-title":"Evol Comput"},{"key":"2026021823461760700_ref24","doi-asserted-by":"publisher","first-page":"100808","DOI":"10.1016\/j.swevo.2020.100808","article-title":"A particle swarm optimization algorithm for mixed-variable optimization problems","volume":"60","author":"Wang","year":"2021","journal-title":"Swarm Evol Comput"},{"key":"2026021823461760700_ref25","doi-asserted-by":"publisher","first-page":"182","DOI":"10.1109\/4235.996017","article-title":"A fast and elitist multiobjective genetic algorithm: NSGA-II","volume":"6","author":"Deb","year":"2002","journal-title":"IEEE Trans Evol Comput"},{"key":"2026021823461760700_ref26","doi-asserted-by":"publisher","first-page":"83","DOI":"10.1504\/IJSSCI.2008.017590","article-title":"Decision making with the analytic hierarchy process","volume":"1","author":"Saaty","year":"2008","journal-title":"Int J Serv Sci"},{"key":"2026021823461760700_ref27","doi-asserted-by":"publisher","first-page":"110277","DOI":"10.1016\/j.asoc.2023.110277","article-title":"Understanding the selection of intelligent engineering B2B platform in China through the fuzzy DANP and TOPSIS techniques: a multi-study analysis","volume":"141","author":"Zhang","year":"2023","journal-title":"Appl Soft Comput"},{"key":"2026021823461760700_ref28","doi-asserted-by":"publisher","first-page":"110206","DOI":"10.1016\/j.asoc.2023.110206","article-title":"Safety assessment of excavation system via TOPSIS-based MCDM modelling in fuzzy environment","volume":"138","author":"Lin","year":"2023","journal-title":"Appl Soft Comput"},{"key":"2026021823461760700_ref29","doi-asserted-by":"crossref","DOI":"10.14722\/ndss.2023.23159","article-title":"DARWIN: survival of the fittest fuzzing mutators","volume-title":"Network and distributed system security symposium, San Diego, California, United States, 24\u201327 February","author":"Jauernig","year":"2023"},{"key":"2026021823461760700_ref30","doi-asserted-by":"publisher","first-page":"121959","DOI":"10.1016\/j.ins.2025.121959","article-title":"Adaptive mutation based on multi-population evolution strategy for greybox fuzzing","volume":"705","author":"Jiao","year":"2025","journal-title":"Inf Sci"}],"container-title":["The Computer Journal"],"original-title":[],"language":"en","link":[{"URL":"https:\/\/academic.oup.com\/comjnl\/article-pdf\/69\/2\/419\/64831421\/bxaf123.pdf","content-type":"application\/pdf","content-version":"vor","intended-application":"syndication"},{"URL":"https:\/\/academic.oup.com\/comjnl\/article-pdf\/69\/2\/419\/64831421\/bxaf123.pdf","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2026,2,19]],"date-time":"2026-02-19T04:46:26Z","timestamp":1771476386000},"score":1,"resource":{"primary":{"URL":"https:\/\/academic.oup.com\/comjnl\/article\/69\/2\/419\/8294329"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2025,10,21]]},"references-count":30,"journal-issue":{"issue":"2","published-online":{"date-parts":[[2025,10,21]]},"published-print":{"date-parts":[[2026,2,15]]}},"URL":"https:\/\/doi.org\/10.1093\/comjnl\/bxaf123","relation":{},"ISSN":["0010-4620","1460-2067"],"issn-type":[{"value":"0010-4620","type":"print"},{"value":"1460-2067","type":"electronic"}],"subject":[],"published-other":{"date-parts":[[2026,2]]},"published":{"date-parts":[[2025,10,21]]}}}