{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,2,21]],"date-time":"2026-02-21T18:36:21Z","timestamp":1771698981721,"version":"3.50.1"},"reference-count":55,"publisher":"IEEE","license":[{"start":{"date-parts":[[2022,5,1]],"date-time":"2022-05-01T00:00:00Z","timestamp":1651363200000},"content-version":"stm-asf","delay-in-days":0,"URL":"https:\/\/doi.org\/10.15223\/policy-009"},{"start":{"date-parts":[[2022,5,1]],"date-time":"2022-05-01T00:00:00Z","timestamp":1651363200000},"content-version":"stm-asf","delay-in-days":0,"URL":"https:\/\/doi.org\/10.15223\/policy-001"}],"funder":[{"DOI":"10.13039\/501100001809","name":"National Natural Science Foundation of China","doi-asserted-by":"publisher","id":[{"id":"10.13039\/501100001809","id-type":"DOI","asserted-by":"publisher"}]},{"DOI":"10.13039\/100007219","name":"Natural Science Foundation of Shanghai","doi-asserted-by":"publisher","id":[{"id":"10.13039\/100007219","id-type":"DOI","asserted-by":"publisher"}]},{"DOI":"10.13039\/501100013105","name":"Shanghai Rising-Star Program","doi-asserted-by":"publisher","id":[{"id":"10.13039\/501100013105","id-type":"DOI","asserted-by":"publisher"}]}],"content-domain":{"domain":[],"crossmark-restriction":false},"short-container-title":[],"published-print":{"date-parts":[[2022,5]]},"DOI":"10.1109\/sp46214.2022.9833563","type":"proceedings-article","created":{"date-parts":[[2022,7,27]],"date-time":"2022-07-27T19:28:05Z","timestamp":1658950085000},"page":"2230-2247","source":"Crossref","is-referenced-by-count":7,"title":["Exploit the Last Straw That Breaks Android Systems"],"prefix":"10.1109","author":[{"given":"Lei","family":"Zhang","sequence":"first","affiliation":[{"name":"Fudan University"}]},{"given":"Keke","family":"Lian","sequence":"additional","affiliation":[{"name":"Fudan University"}]},{"given":"Haoyu","family":"Xiao","sequence":"additional","affiliation":[{"name":"Fudan University"}]},{"given":"Zhibo","family":"Zhang","sequence":"additional","affiliation":[{"name":"Fudan University"}]},{"given":"Peng","family":"Liu","sequence":"additional","affiliation":[{"name":"The Pennsylvania State University"}]},{"given":"Yuan","family":"Zhang","sequence":"additional","affiliation":[{"name":"Fudan University"}]},{"given":"Min","family":"Yang","sequence":"additional","affiliation":[{"name":"Fudan University"}]},{"given":"Haixin","family":"Duan","sequence":"additional","affiliation":[{"name":"Tsinghua University"}]}],"member":"263","reference":[{"key":"ref13","year":"0","journal-title":"SOOT"},{"key":"ref12","year":"0","journal-title":"vdex extractor"},{"key":"ref15","year":"0","journal-title":"Cwe-248 Uncaught exception"},{"key":"ref14","year":"0","journal-title":"Xposed Framework"},{"key":"ref53","doi-asserted-by":"publisher","DOI":"10.1145\/3213846.3213874"},{"key":"ref52","doi-asserted-by":"publisher","DOI":"10.1145\/3133956.3134073"},{"key":"ref11","year":"0","journal-title":"Smali"},{"key":"ref55","doi-asserted-by":"publisher","DOI":"10.14722\/ndss.2020.24415"},{"key":"ref10","year":"0","journal-title":"American Fuzzy Lop (AFL) Fuzzer"},{"key":"ref54","doi-asserted-by":"publisher","DOI":"10.1145\/3236024.3236039"},{"key":"ref17","doi-asserted-by":"publisher","DOI":"10.1145\/2810103.2813606"},{"key":"ref16","article-title":"Call me back! attacks on system server and system apps in android through synchronous callback","author":"wang","year":"0","journal-title":"Proceedings of the 2016 ACM SIGSAC Conference on Computer and Communications Security"},{"key":"ref19","doi-asserted-by":"publisher","DOI":"10.1145\/3243734.3243843"},{"key":"ref18","doi-asserted-by":"publisher","DOI":"10.1145\/2976749.2978320"},{"key":"ref51","article-title":"{FANS}: Fuzzing android native system services via automated interface analysis","author":"liu","year":"0","journal-title":"29th USENIX Security Symposium ( USENIX Security 20)"},{"key":"ref50","doi-asserted-by":"publisher","DOI":"10.14722\/ndss.2017.23404"},{"key":"ref46","article-title":"Parmesan: Sanitizerguided greybox fuzzing","author":"\u00f6sterlund","year":"0","journal-title":"29th USENIX Security Symposium ( USENIX Security 20)"},{"key":"ref45","doi-asserted-by":"publisher","DOI":"10.1145\/3319535.3363275"},{"key":"ref48","doi-asserted-by":"publisher","DOI":"10.14722\/ndss.2019.23371"},{"key":"ref47","doi-asserted-by":"publisher","DOI":"10.1109\/SP40000.2020.00002"},{"key":"ref42","article-title":"Binary-level directed fuzzing for use-after-free vulnerabilities","author":"nguyen","year":"2020","journal-title":"arXiv preprint arXiv 2002 10381"},{"key":"ref41","doi-asserted-by":"publisher","DOI":"10.17487\/rfc4987"},{"key":"ref44","doi-asserted-by":"publisher","DOI":"10.1109\/ICPC.2019.00044"},{"key":"ref43","doi-asserted-by":"publisher","DOI":"10.1145\/3377811.3380386"},{"key":"ref49","doi-asserted-by":"publisher","DOI":"10.1109\/SP.2018.00056"},{"key":"ref8","author":"vyukov","year":"2015","journal-title":"Syzkaller"},{"key":"ref7","article-title":"Peach fuzzing platform","volume":"34","author":"eddington","year":"2011","journal-title":"Peach Fuzzer"},{"key":"ref9","article-title":"Sok: The progress, challenges, and perspectives of directed greybox fuzzing","author":"wang","year":"2020","journal-title":"arXiv preprint arXiv 2005 11084"},{"key":"ref4","article-title":"Tofu: Target-orienter fuzzer","author":"wang","year":"2020","journal-title":"arXiv preprint arXiv 2004 14408"},{"key":"ref3","year":"0","journal-title":"ANR"},{"key":"ref6","doi-asserted-by":"publisher","DOI":"10.1145\/3133956.3134085"},{"key":"ref5","doi-asserted-by":"publisher","DOI":"10.1109\/SP.2017.23"},{"key":"ref40","year":"0","journal-title":"Fork bomb"},{"key":"ref35","article-title":"Addresssanitizer: A fast address sanity checker","author":"serebryany","year":"2012","journal-title":"USENIX Annual Technical Conference (ATC)"},{"key":"ref34","doi-asserted-by":"publisher","DOI":"10.1145\/3377811.3380396"},{"key":"ref37","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-642-30436-1_2"},{"key":"ref36","author":"samsonov","year":"2013","journal-title":"New features in addresssanitizer"},{"key":"ref31","doi-asserted-by":"publisher","DOI":"10.1109\/ICSE.2019.00025"},{"key":"ref30","doi-asserted-by":"crossref","DOI":"10.1145\/2666356.2594301","article-title":"End-toend verification of stack-space bounds for c programs","author":"carbonneaux","year":"2014","journal-title":"ACM SIGPLAN Notices"},{"key":"ref33","doi-asserted-by":"publisher","DOI":"10.1145\/1190216.1190224"},{"key":"ref32","doi-asserted-by":"publisher","DOI":"10.1145\/3192366.3192376"},{"key":"ref2","year":"0","journal-title":"Transactiontoolargeexception"},{"key":"ref1","year":"0","journal-title":"Strawfuzzer open source"},{"key":"ref39","doi-asserted-by":"publisher","DOI":"10.1109\/ICSE-SEIP.2017.12"},{"key":"ref38","doi-asserted-by":"publisher","DOI":"10.1109\/DSN.2017.40"},{"key":"ref24","year":"0","journal-title":"Northrop to demo darpa navigation system on android"},{"key":"ref23","year":"0","journal-title":"Android and rtos together The dynamic duo for today’s medical devices"},{"key":"ref26","doi-asserted-by":"publisher","DOI":"10.1145\/2714576.2714589"},{"key":"ref25","year":"0","journal-title":"Nexus one launched into space on cubesat becomes first phonesat in orbit"},{"key":"ref20","doi-asserted-by":"publisher","DOI":"10.1145\/3133956.3134020"},{"key":"ref22","article-title":"Peeking into your app without actually seeing it:{UI} state inference and novel android attacks","author":"chen","year":"0","journal-title":"23rd USENIX Security Symposium ( USENIX Security 14)"},{"key":"ref21","doi-asserted-by":"publisher","DOI":"10.1145\/3243734.3243849"},{"key":"ref28","year":"0","journal-title":"CWE-400 Uncontrolled Resource Consumption"},{"key":"ref27","doi-asserted-by":"publisher","DOI":"10.1145\/2660267.2660375"},{"key":"ref29","doi-asserted-by":"publisher","DOI":"10.1145\/3290326"}],"event":{"name":"2022 IEEE Symposium on Security and Privacy (SP)","location":"San Francisco, CA, USA","start":{"date-parts":[[2022,5,22]]},"end":{"date-parts":[[2022,5,26]]}},"container-title":["2022 IEEE Symposium on Security and Privacy (SP)"],"original-title":[],"link":[{"URL":"http:\/\/xplorestaging.ieee.org\/ielx7\/9833550\/9833558\/09833563.pdf?arnumber=9833563","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2023,11,8]],"date-time":"2023-11-08T23:24:18Z","timestamp":1699485858000},"score":1,"resource":{"primary":{"URL":"https:\/\/ieeexplore.ieee.org\/document\/9833563\/"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2022,5]]},"references-count":55,"URL":"https:\/\/doi.org\/10.1109\/sp46214.2022.9833563","relation":{},"subject":[],"published":{"date-parts":[[2022,5]]}}}