{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,7,9]],"date-time":"2026-07-09T05:20:05Z","timestamp":1783574405988,"version":"3.55.0"},"reference-count":55,"publisher":"IEEE","license":[{"start":{"date-parts":[[2026,6,22]],"date-time":"2026-06-22T00:00:00Z","timestamp":1782086400000},"content-version":"stm-asf","delay-in-days":0,"URL":"https:\/\/doi.org\/10.15223\/policy-029"},{"start":{"date-parts":[[2026,6,22]],"date-time":"2026-06-22T00:00:00Z","timestamp":1782086400000},"content-version":"stm-asf","delay-in-days":0,"URL":"https:\/\/doi.org\/10.15223\/policy-037"}],"content-domain":{"domain":[],"crossmark-restriction":false},"short-container-title":[],"published-print":{"date-parts":[[2026,6,22]]},"DOI":"10.1109\/dsn69566.2026.00019","type":"proceedings-article","created":{"date-parts":[[2026,7,8]],"date-time":"2026-07-08T19:41:43Z","timestamp":1783539703000},"page":"24-37","source":"Crossref","is-referenced-by-count":0,"title":["Q3Fuzz: Multi-Layered Stateful Fuzzing for the QUIC-HTTP\/3 Protocol Stack"],"prefix":"10.1109","author":[{"given":"Isa","family":"Jafarov","sequence":"first","affiliation":[{"name":"City University of New York,New York,USA"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Choongin","family":"Lee","sequence":"additional","affiliation":[{"name":"Korea University,Seoul,Republic of Korea"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Heejo","family":"Lee","sequence":"additional","affiliation":[{"name":"Korea University,Seoul,Republic of Korea"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Sven","family":"Dietrich","sequence":"additional","affiliation":[{"name":"City University of New York,New York,USA"}],"role":[{"vocabulary":"crossref","role":"author"}]}],"member":"263","reference":[{"key":"ref1","doi-asserted-by":"crossref","DOI":"10.17487\/RFC9000","article-title":"QUIC: A UDP-Based Multiplexed and Secure Transport","volume-title":"RFC 9000","author":"Iyengar","year":"2021"},{"key":"ref2","doi-asserted-by":"publisher","DOI":"10.1109\/ICC.2016.7510788"},{"key":"ref3","article-title":"Analyzing the Influence of Resource Prioritization on HTTP\/3 HOL Blocking and Performance","volume-title":"Network Traffic Measurement and Analysis Conference","author":"Sander"},{"key":"ref4","first-page":"3","article-title":"PRETT2: Discovering HTTP\/2 DoS Vulnerabilities via Protocol Reverse Engineering","volume-title":"Computer Security \u2013 ESORICS 2024: 29th European Symposium on Research in Computer Security","author":"Lee"},{"key":"ref5","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-030-61750-9_5"},{"key":"ref6","article-title":"Usage statistics of HTTP\/3 for websites","year":"2025"},{"key":"ref7","article-title":"Examining HTTP\/3 usage one year on","volume-title":"Cloudflare Blog","author":"Belson","year":"2023"},{"key":"ref8","doi-asserted-by":"publisher","DOI":"10.1109\/COMSNETS59351.2024.10427406"},{"key":"ref9","volume-title":"Internet Denial of Service: Attack and Defense Mechanisms","author":"Mirkovic","year":"2004"},{"key":"ref10","doi-asserted-by":"publisher","DOI":"10.1016\/j.cose.2022.103051"},{"key":"ref11","doi-asserted-by":"crossref","DOI":"10.17487\/RFC9218","article-title":"Extensible Prioritization Scheme for HTTP","volume-title":"RFC 9218","author":"Oku","year":"2022"},{"key":"ref12","doi-asserted-by":"crossref","DOI":"10.17487\/RFC9114","article-title":"HTTP\/3","volume-title":"RFC 9114","author":"Bishop","year":"2022"},{"key":"ref13","doi-asserted-by":"crossref","DOI":"10.17487\/RFC9412","article-title":"The ORIGIN Extension in HTTP\/3","volume-title":"RFC 9412","author":"Bishop","year":"2023"},{"key":"ref14","doi-asserted-by":"publisher","DOI":"10.1145\/3427228.3427662"},{"key":"ref15","doi-asserted-by":"publisher","DOI":"10.1145\/3708821.3736222"},{"key":"ref16","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-032-07894-0_1"},{"key":"ref17","doi-asserted-by":"publisher","DOI":"10.1007\/s10664-022-10233-3"},{"key":"ref18","doi-asserted-by":"publisher","DOI":"10.1145\/244795.244801"},{"key":"ref19","doi-asserted-by":"publisher","DOI":"10.1109\/SPW.2015.32"},{"key":"ref20","doi-asserted-by":"publisher","DOI":"10.1145\/3330336"},{"key":"ref21","doi-asserted-by":"publisher","DOI":"10.1145\/3696788"},{"key":"ref22","doi-asserted-by":"crossref","DOI":"10.17487\/RFC9204","article-title":"QPACK: Field Compression for HTTP\/3","volume-title":"RFC 9204","author":"Krasic","year":"2022"},{"key":"ref23","doi-asserted-by":"publisher","DOI":"10.1109\/ICST46399.2020.00062"},{"key":"ref24","doi-asserted-by":"publisher","DOI":"10.1109\/tse.2025.3535925"},{"key":"ref25","article-title":"fix uaf in StaticFileHandler","volume-title":"GitHub commit, Facebook","author":"Damlaj","year":"2025"},{"key":"ref26","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-319-99828-2_11"},{"key":"ref27","article-title":"QUIC","year":"2021"},{"key":"ref28","doi-asserted-by":"crossref","DOI":"10.17487\/RFC9221","article-title":"An Unreliable Datagram Extension to QUIC","volume-title":"RFC 9221","author":"Pauly","year":"2022"},{"key":"ref29","article-title":"Hypertext Transfer Protocol version 3 (HTTP\/3)","year":"2021"},{"key":"ref30","doi-asserted-by":"publisher","DOI":"10.1109\/ACCESS.2022.3191430"},{"key":"ref31","article-title":"Aioquic"},{"key":"ref32","article-title":"QUIC implementations"},{"key":"ref33","article-title":"Saving repositories with stars"},{"key":"ref34","article-title":"S2n-quic"},{"key":"ref35","article-title":"Firefox"},{"key":"ref36","doi-asserted-by":"publisher","DOI":"10.1007\/s10207-022-00630-6"},{"key":"ref37","article-title":"VINCE: Vulnerability Information and Coordination Environment"},{"key":"ref38","article-title":"Common Weakness Enumeration","volume-title":"MITRE Corporation, Tech. Rep"},{"key":"ref39","doi-asserted-by":"crossref","DOI":"10.17487\/rfc7301","article-title":"Transport Layer Security (TLS) Application-Layer Protocol Negotiation Extension","volume-title":"RFC 7301","author":"Friedl","year":"2014"},{"key":"ref40","first-page":"4481","article-title":"Bleem: Packet Sequence Oriented Fuzzing for Protocol Implementations","volume-title":"32nd USENIX Security Symposium (USENIX Security 23)","author":"Luo"},{"key":"ref41","article-title":"boofuzz: Network Protocol Fuzzing for Humans","author":"Pereyda"},{"key":"ref42","article-title":"Peach"},{"key":"ref43","doi-asserted-by":"publisher","DOI":"10.1145\/3460120.3484543"},{"key":"ref44","volume-title":"gcov \u2014 a Test Coverage Program"},{"key":"ref45","doi-asserted-by":"publisher","DOI":"10.1145\/3243734.3243804"},{"key":"ref46","doi-asserted-by":"publisher","DOI":"10.1109\/SecDev.2019.00031"},{"key":"ref47","article-title":"CVE2025-54939","year":"2025"},{"key":"ref48","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-319-11164-3_26"},{"key":"ref49","doi-asserted-by":"publisher","DOI":"10.1109\/32.87284"},{"key":"ref50","article-title":"quic-fuzz","author":"Burrow"},{"key":"ref51","article-title":"fuzi q","author":"Huitema"},{"key":"ref52","doi-asserted-by":"publisher","DOI":"10.1145\/3341302.3342087"},{"key":"ref53","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-031-79007-2_22"},{"key":"ref54","doi-asserted-by":"publisher","DOI":"10.1145\/2908080.2908118"},{"key":"ref55","doi-asserted-by":"publisher","DOI":"10.1145\/3284850.3284853"}],"event":{"name":"2026 56th Annual IEEE International Conference on Dependable Systems and Networks (DSN)","location":"Charlotte, NC, USA","start":{"date-parts":[[2026,6,22]]},"end":{"date-parts":[[2026,6,25]]}},"container-title":["2026 56th Annual IEEE International Conference on Dependable Systems and Networks (DSN)"],"original-title":[],"link":[{"URL":"http:\/\/xplorestaging.ieee.org\/ielx8\/11593123\/11593173\/11593352.pdf?arnumber=11593352","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2026,7,9]],"date-time":"2026-07-09T05:12:41Z","timestamp":1783573961000},"score":1,"resource":{"primary":{"URL":"https:\/\/ieeexplore.ieee.org\/document\/11593352\/"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2026,6,22]]},"references-count":55,"URL":"https:\/\/doi.org\/10.1109\/dsn69566.2026.00019","relation":{},"subject":[],"published":{"date-parts":[[2026,6,22]]}}}