{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2025,8,23]],"date-time":"2025-08-23T05:20:34Z","timestamp":1755926434344,"version":"3.28.0"},"reference-count":64,"publisher":"IEEE","license":[{"start":{"date-parts":[[2020,2,1]],"date-time":"2020-02-01T00:00:00Z","timestamp":1580515200000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/ieeexplore.ieee.org\/Xplorehelp\/downloads\/license-information\/IEEE.html"},{"start":{"date-parts":[[2020,2,1]],"date-time":"2020-02-01T00:00:00Z","timestamp":1580515200000},"content-version":"stm-asf","delay-in-days":0,"URL":"https:\/\/doi.org\/10.15223\/policy-029"},{"start":{"date-parts":[[2020,2,1]],"date-time":"2020-02-01T00:00:00Z","timestamp":1580515200000},"content-version":"stm-asf","delay-in-days":0,"URL":"https:\/\/doi.org\/10.15223\/policy-037"}],"content-domain":{"domain":[],"crossmark-restriction":false},"short-container-title":[],"published-print":{"date-parts":[[2020,2]]},"DOI":"10.1109\/saner48275.2020.9054797","type":"proceedings-article","created":{"date-parts":[[2020,4,3]],"date-time":"2020-04-03T07:47:32Z","timestamp":1585900052000},"page":"172-183","source":"Crossref","is-referenced-by-count":6,"title":["Automated Bug Detection and Replay for COTS Linux Kernel Modules with Concolic Execution"],"prefix":"10.1109","author":[{"given":"Bo","family":"Chen","sequence":"first","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Zhenkun","family":"Yang","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Li","family":"Lei","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Kai","family":"Cong","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Fei","family":"Xie","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]}],"member":"263","reference":[{"journal-title":"Algorithms in C","year":"1990","author":"sedgewick","key":"ref39"},{"key":"ref38","first-page":"291","article-title":"Charm: Facilitating dynamic analysis of device drivers of mobile systems","author":"talebi","year":"2018","journal-title":"27th USENIX Security Symposium USENIX Security 2018"},{"key":"ref33","article-title":"Kdump, a kexec-based kernel crash dumping mechanism","author":"goyal","year":"0","journal-title":"Proc of the Linux Symposium"},{"key":"ref32","doi-asserted-by":"publisher","DOI":"10.1109\/CGO.2004.1281665"},{"key":"ref31","doi-asserted-by":"publisher","DOI":"10.1145\/1346256.1346273"},{"key":"ref30","doi-asserted-by":"publisher","DOI":"10.1109\/SP.2010.26"},{"journal-title":"Debug symbol packages","year":"2018","author":"arnold","key":"ref37"},{"key":"ref36","doi-asserted-by":"publisher","DOI":"10.1145\/2150976.2150987"},{"journal-title":"Initial commit of linux kernel's git repository","year":"2005","author":"torvalds","key":"ref35"},{"key":"ref34","doi-asserted-by":"publisher","DOI":"10.1016\/j.jss.2016.02.007"},{"key":"ref60","doi-asserted-by":"publisher","DOI":"10.1109\/ICSE.2012.6227176"},{"key":"ref62","article-title":"Hardware\/Software Co-monitoring","author":"lei","year":"2019","journal-title":"CoRR"},{"key":"ref61","article-title":"Fixminer: Mining relevant fix patterns for automated program repair","volume":"abs 1810 1791","author":"koyuncu","year":"2018","journal-title":"CoRR"},{"journal-title":"Versatile binary-level concolic testing","year":"2019","author":"chen","key":"ref63"},{"key":"ref28","first-page":"209","article-title":"Klee: Unassisted and automatic generation of high-coverage tests for complex systems programs","author":"cadar","year":"0","journal-title":"Proceedings of the 8th USENIX Conference on Operating Systems Design and Implementation Ser OSDI'08"},{"journal-title":"Stable api nonsense","year":"0","author":"kroah-hartman","key":"ref64"},{"journal-title":"American Fuzzy Lop","year":"0","key":"ref27"},{"key":"ref29","article-title":"Qemu, a fast and portable dynamic translator","author":"bellard","year":"2005","journal-title":"Proceedings of the FREENIX Track 2005 USENIX Annual Technical Conference"},{"journal-title":"Mobile Operating System Market Share Worldwide","year":"2019","key":"ref2"},{"key":"ref1","article-title":"2017 linux kernel development report","author":"corbet","year":"2017","journal-title":"A Linux Foundation Publication"},{"journal-title":"syzkaller - kernel fuzzer","year":"2019","key":"ref20"},{"key":"ref22","article-title":"CRETE: A versatile binary-level concolic testing framework","author":"chen","year":"2018","journal-title":"Proceedings of the Fundamental Approaches to Software Engineering 21st International Conference FASE 2018"},{"key":"ref21","doi-asserted-by":"publisher","DOI":"10.1109\/SP.2019.00017"},{"key":"ref24","doi-asserted-by":"publisher","DOI":"10.1145\/1081706.1081750"},{"key":"ref23","first-page":"11","article-title":"Kernel korner: Kprobes-a kernel debugger","volume":"2005","author":"krishnakumar","year":"2005","journal-title":"Linux J"},{"key":"ref26","doi-asserted-by":"publisher","DOI":"10.1109\/DSN.2017.11"},{"key":"ref25","doi-asserted-by":"publisher","DOI":"10.1109\/NAECON.2015.7443099"},{"key":"ref50","doi-asserted-by":"publisher","DOI":"10.1145\/2568225.2568293"},{"key":"ref51","doi-asserted-by":"publisher","DOI":"10.14722\/ndss.2016.23368"},{"key":"ref59","first-page":"15","article-title":"Fast and precise retrieval of forward and back porting information for linux device drivers","author":"lawall","year":"2017","journal-title":"2017 USENIX Annual Technical Conference USENIX ATC 2017"},{"key":"ref58","doi-asserted-by":"publisher","DOI":"10.1145\/1352592.1352618"},{"journal-title":"The coccinelle project","year":"0","key":"ref57"},{"journal-title":"Enabling program analysis through deterministic replay and optimistic hybrid analysis","year":"2018","author":"devecsery","key":"ref56"},{"key":"ref55","doi-asserted-by":"publisher","DOI":"10.1109\/ICESS.2019.8782476"},{"key":"ref54","doi-asserted-by":"publisher","DOI":"10.1145\/3238147.3238172"},{"key":"ref53","doi-asserted-by":"publisher","DOI":"10.1145\/3180155.3180177"},{"key":"ref52","first-page":"745","article-title":"QSYM: A practical concolic execution engine tailored for hybrid fuzzing","author":"yun","year":"2018","journal-title":"27th USENIX Security Symposium USENIX Security 2018"},{"key":"ref10","first-page":"1007","article-title":"DR. CHECKER: A soundy analysis for linux kernel drivers","author":"machiry","year":"0","journal-title":"USENIX Security Symposium"},{"key":"ref11","article-title":"DSAC: Effective static analysis of sleep-in-atomic-context bugs in kernel modules","author":"bai","year":"2018","journal-title":"2018 USENIX Annual Technical Conference (USENIX ATC 18)"},{"key":"ref40","doi-asserted-by":"publisher","DOI":"10.1109\/ASE.2015.30"},{"key":"ref12","first-page":"12","article-title":"Testing closed-source binary device drivers with ddt","author":"kuznetsov","year":"2010","journal-title":"2010 USENIX Conference on USENIX Annual Technical Conference Ser USENIX-ATC'10"},{"key":"ref13","first-page":"279","article-title":"Symdrive: Testing drivers without devices","author":"renzelmann","year":"2012","journal-title":"Proceedings of the 10th USENIX Conference on Operating Systems Design and Implementation ser OSDI’ 12"},{"key":"ref14","first-page":"689","article-title":"Cab-fuzz: Practical concolic testing techniques for COTS operating systems","author":"kim","year":"2017","journal-title":"2017 USENIX Annual Technical Conference USENIX ATC 2017"},{"key":"ref15","doi-asserted-by":"publisher","DOI":"10.1145\/2771783.2771811"},{"key":"ref16","first-page":"635","article-title":"Testing error handling code in device drivers using characteristic fault injection","author":"bai","year":"2016","journal-title":"Proceedings of the 2016 USENIX Conference on Usenix Annual Technical Conference ser USENIX ATC'16"},{"key":"ref17","doi-asserted-by":"publisher","DOI":"10.1145\/3133956.3134069"},{"journal-title":"Project Triforce","year":"2017","author":"hertz","key":"ref18"},{"key":"ref19","first-page":"167","article-title":"kafl: Hardware-assisted feedback fuzzing for OS kernels","author":"schumilo","year":"2017","journal-title":"26th USENIX Security Symposium USENIX Security 2017"},{"key":"ref4","first-page":"601","article-title":"Coccinelle: 10 years of automated evolution in the linux kernel","author":"lawall","year":"2018","journal-title":"2018 USENIX Annual Technical Conference USENIX ATC 2018"},{"journal-title":"Linux andsupercomputers","year":"2018","author":"lunduke","key":"ref3"},{"key":"ref6","doi-asserted-by":"publisher","DOI":"10.1145\/2103799.2103805"},{"journal-title":"The Linux Kernel Module Programming Guide","year":"2007","author":"salzman","key":"ref5"},{"key":"ref8","doi-asserted-by":"publisher","DOI":"10.1145\/1646353.1646374"},{"key":"ref7","article-title":"Security impact ratings considered harmful","author":"arnold","year":"2009","journal-title":"Proceeding of 12th Workshop on Hot Topics in Operating Systems HotOS'09"},{"key":"ref49","doi-asserted-by":"publisher","DOI":"10.1109\/SP.2012.31"},{"key":"ref9","doi-asserted-by":"publisher","DOI":"10.1134\/S0361768815010065"},{"key":"ref46","doi-asserted-by":"publisher","DOI":"10.1145\/2408776.2408795"},{"key":"ref45","doi-asserted-by":"publisher","DOI":"10.1145\/3180155.3180166"},{"key":"ref48","doi-asserted-by":"publisher","DOI":"10.1145\/2110356.2110358"},{"key":"ref47","doi-asserted-by":"publisher","DOI":"10.1145\/2093548.2093564"},{"key":"ref42","doi-asserted-by":"publisher","DOI":"10.1145\/3297858.3304065"},{"key":"ref41","doi-asserted-by":"publisher","DOI":"10.1109\/SP.2018.00017"},{"key":"ref44","doi-asserted-by":"publisher","DOI":"10.1145\/3182657"},{"key":"ref43","first-page":"22","article-title":"Linux kernel developer responses to static analysis bug reports","author":"guo","year":"2009","journal-title":"Proceedings of the 2009 Conference on USENIX Annual Technical Conference Ser USENIX'09"}],"event":{"name":"2020 IEEE 27th International Conference on Software Analysis, Evolution and Reengineering (SANER)","start":{"date-parts":[[2020,2,18]]},"location":"London, ON, Canada","end":{"date-parts":[[2020,2,21]]}},"container-title":["2020 IEEE 27th International Conference on Software Analysis, Evolution and Reengineering (SANER)"],"original-title":[],"link":[{"URL":"http:\/\/xplorestaging.ieee.org\/ielx7\/9040394\/9054788\/09054797.pdf?arnumber=9054797","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2022,6,28]],"date-time":"2022-06-28T21:54:58Z","timestamp":1656453298000},"score":1,"resource":{"primary":{"URL":"https:\/\/ieeexplore.ieee.org\/document\/9054797\/"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2020,2]]},"references-count":64,"URL":"https:\/\/doi.org\/10.1109\/saner48275.2020.9054797","relation":{},"subject":[],"published":{"date-parts":[[2020,2]]}}}