{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,10,18]],"date-time":"2026-10-18T13:50:40Z","timestamp":1792331440651,"version":"4.4.0"},"reference-count":63,"publisher":"IEEE","license":[{"start":{"date-parts":[[2022,5,1]],"date-time":"2022-05-01T00:00:00Z","timestamp":1651363200000},"content-version":"stm-asf","delay-in-days":0,"URL":"https:\/\/doi.org\/10.15223\/policy-009"},{"start":{"date-parts":[[2022,5,1]],"date-time":"2022-05-01T00:00:00Z","timestamp":1651363200000},"content-version":"stm-asf","delay-in-days":0,"URL":"https:\/\/doi.org\/10.15223\/policy-001"}],"funder":[{"DOI":"10.13039\/100004318","name":"Microsoft","doi-asserted-by":"publisher","id":[{"id":"10.13039\/100004318","id-type":"DOI","asserted-by":"publisher"}]}],"content-domain":{"domain":[],"crossmark-restriction":false},"short-container-title":[],"published-print":{"date-parts":[[2022,5]]},"DOI":"10.1109\/sp46214.2022.9833751","type":"proceedings-article","created":{"date-parts":[[2022,7,27]],"date-time":"2022-07-27T15:28:05Z","timestamp":1658935685000},"page":"36-50","source":"Crossref","is-referenced-by-count":122,"title":["BEACON: Directed Grey-Box Fuzzing with Provable Path Pruning"],"prefix":"10.1109","author":[{"given":"Heqing","family":"Huang","sequence":"first","affiliation":[{"name":"The Hong Kong University of Science and Technology,China"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Yiyuan","family":"Guo","sequence":"additional","affiliation":[{"name":"The Hong Kong University of Science and Technology,China"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Qingkai","family":"Shi","sequence":"additional","affiliation":[{"name":"The Hong Kong University of Science and Technology,China"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Peisen","family":"Yao","sequence":"additional","affiliation":[{"name":"The Hong Kong University of Science and Technology,China"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Rongxin","family":"Wu","sequence":"additional","affiliation":[{"name":"Xiamen University,China"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Charles","family":"Zhang","sequence":"additional","affiliation":[{"name":"The Hong Kong University of Science and Technology,China"}],"role":[{"vocabulary":"crossref","role":"author"}]}],"member":"263","reference":[{"key":"ref1","doi-asserted-by":"publisher","DOI":"10.1145\/3133956.3134020"},{"key":"ref2","doi-asserted-by":"publisher","DOI":"10.1145\/3243734.3243849"},{"key":"ref3","article-title":"Fuzzguard: Filtering out unreachable inputs in directed grey-box fuzzing through deep learning","volume-title":"29th USENIX Security Symposium (USENIX Security 20)"},{"key":"ref4","article-title":"Automated whitebox fuzz testing","author":"Godefroid","year":"2008"},{"key":"ref5","doi-asserted-by":"publisher","DOI":"10.1145\/1065010.1065036"},{"key":"ref6","volume-title":"Oss-fuzz report","year":"2018"},{"key":"ref7","doi-asserted-by":"publisher","DOI":"10.1145\/2786805.2803206"},{"key":"ref8","doi-asserted-by":"publisher","DOI":"10.1109\/TSE.2018.2877664"},{"key":"ref9","doi-asserted-by":"publisher","DOI":"10.1145\/2619091"},{"key":"ref10","first-page":"49","article-title":"Dowsing for overflows: A guided fuzzer to find buffer boundary violations","volume-title":"Proceedings of the 22Nd USENIX Conference on Security, ser. SEC\u201913","author":"Haller"},{"key":"ref11","doi-asserted-by":"publisher","DOI":"10.1145\/2491411.2491438"},{"key":"ref12","volume-title":"Afl: american fuzzy lop","year":"2013"},{"key":"ref13","article-title":"MOPT: Optimized mutation scheduling for fuzzers","volume-title":"28th USENIX Security Symposium (USENIX Security 19)"},{"key":"ref14","doi-asserted-by":"publisher","DOI":"10.1145\/3133956.3134085"},{"key":"ref15","first-page":"2289","article-title":"Parmesan: Sanitizer-guided grey-box fuzzing","volume-title":"29th USENIX Security Symposium (USENIX Security 20)","author":"\u00d6sterlund"},{"key":"ref16","article-title":"Addresssanitizer: A fast address sanity checker","volume-title":"USENIX ATC 2012","author":"Serebryany"},{"key":"ref17","article-title":"SAVIOR: towards bug-driven hybrid testing","volume":"abs\/1906.07327","author":"Chen","year":"2019","journal-title":"CoRR"},{"key":"ref18","doi-asserted-by":"publisher","DOI":"10.1145\/2535838.2535888"},{"key":"ref19","doi-asserted-by":"publisher","DOI":"10.1145\/1029894.1029907"},{"key":"ref20","doi-asserted-by":"publisher","DOI":"10.1145\/2491956.2462186"},{"key":"ref21","doi-asserted-by":"publisher","DOI":"10.1145\/1542476.1542517"},{"key":"ref22","doi-asserted-by":"publisher","DOI":"10.1145\/360933.360975"},{"key":"ref23","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-662-46081-8_11"},{"key":"ref24","doi-asserted-by":"publisher","DOI":"10.1145\/3106237.3106249"},{"key":"ref25","doi-asserted-by":"publisher","DOI":"10.1145\/3093333.3009885"},{"key":"ref26","doi-asserted-by":"publisher","DOI":"10.1145\/565816.503279"},{"key":"ref27","volume-title":"Symbolic abstraction: Algorithms and applications","author":"Thakur","year":"2014"},{"key":"ref28","doi-asserted-by":"publisher","DOI":"10.1145\/781131.781153"},{"key":"ref29","first-page":"3","article-title":"A first step towards automated detection of buffer overrun vulnerabilities","volume-title":"IN NETWORK AND DISTRIBUTED SYSTEM SECURITY SYMPOSIUM","author":"Wagner"},{"key":"ref30","doi-asserted-by":"publisher","DOI":"10.1145\/781131.781149"},{"key":"ref31","doi-asserted-by":"publisher","DOI":"10.1007\/11823230_2"},{"key":"ref32","article-title":"Static determination of dynamic properties of programs","volume-title":"Proceedings of the 2nd International Symposium on Programming","author":"Cousot"},{"key":"ref33","doi-asserted-by":"publisher","DOI":"10.1007\/s10990-006-8609-1"},{"key":"ref34","doi-asserted-by":"publisher","DOI":"10.1145\/512760.512770"},{"key":"ref35","doi-asserted-by":"publisher","DOI":"10.1561\/2500000034"},{"key":"ref36","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-540-74061-2_23"},{"key":"ref37","doi-asserted-by":"publisher","DOI":"10.1109\/CGO.2009.9"},{"key":"ref38","doi-asserted-by":"publisher","DOI":"10.1145\/512950.512973"},{"key":"ref39","doi-asserted-by":"publisher","DOI":"10.1109\/CGO.2013.6494996"},{"key":"ref40","volume-title":"Interval analysis","volume":"4","author":"Moore","year":"1966"},{"key":"ref41","article-title":"Computing discrete frechet distance","author":"Eiter","year":"1994"},{"key":"ref42","doi-asserted-by":"publisher","DOI":"10.1145\/115372.115320"},{"issue":"8","key":"ref43","first-page":"9","article-title":"Compilers, principles, techniques","volume":"7","author":"Aho","year":"1986","journal-title":"Addison wesley"},{"key":"ref44","doi-asserted-by":"publisher","DOI":"10.1109\/CGO.2004.1281665"},{"key":"ref45","article-title":"AFL\u208a\u208a: Combining incremental steps of fuzzing research","volume-title":"14th USENIX Workshop on Offensive Technologies (WOOT 20)","author":"Fioraldi"},{"key":"ref46","first-page":"861","article-title":"Optimizing seed selection for fuzzing","volume-title":"23rd USENIX Security Symposium (USENIX Security 14)","author":"Rebert"},{"key":"ref47","doi-asserted-by":"publisher","DOI":"10.1002\/9780470479216.corpsy0524"},{"key":"ref48","doi-asserted-by":"publisher","DOI":"10.1109\/ICSE.2012.6227168"},{"key":"ref49","first-page":"209","article-title":"Klee: Unassisted and automatic generation of high-coverage tests for complex systems programs","volume":"8","author":"Cadar","year":"2008","journal-title":"OSDI"},{"key":"ref50","doi-asserted-by":"publisher","DOI":"10.1109\/ICSE.2015.99"},{"key":"ref51","doi-asserted-by":"publisher","DOI":"10.1145\/2884781.2884843"},{"key":"ref52","doi-asserted-by":"publisher","DOI":"10.1109\/ICSE.2013.6606576"},{"key":"ref53","first-page":"199","article-title":"Redundant state detection for dynamic symbolic execution","volume-title":"2013 USENIX Annual Technical Conference (USENIX ATC 13)","author":"Bugrara"},{"key":"ref54","doi-asserted-by":"publisher","DOI":"10.1109\/ICSE.2007.41"},{"key":"ref55","doi-asserted-by":"publisher","DOI":"10.1145\/3180155.3180251"},{"key":"ref56","doi-asserted-by":"publisher","DOI":"10.1145\/2629536"},{"key":"ref57","doi-asserted-by":"publisher","DOI":"10.1109\/SP.2018.00046"},{"key":"ref58","article-title":"NEUZZ: efficient fuzzing with neural program learning","volume-title":"CoRR","volume":"abs\/1807.05620","author":"She"},{"key":"ref59","doi-asserted-by":"publisher","DOI":"10.1145\/3238147.3238176"},{"key":"ref60","doi-asserted-by":"publisher","DOI":"10.14722\/ndss.2016.23368"},{"key":"ref61","first-page":"745","article-title":"QSYM: A practical concolic execution engine tailored for hybrid fuzzing","volume-title":"27th USENIX Security Symposium (USENIX Security 18)","author":"Yun"},{"key":"ref62","doi-asserted-by":"publisher","DOI":"10.1145\/3319535.3354249"},{"key":"ref63","doi-asserted-by":"publisher","DOI":"10.1109\/SP40000.2020.00063"}],"event":{"name":"2022 IEEE Symposium on Security and Privacy (SP)","location":"San Francisco, CA, USA","start":{"date-parts":[[2022,5,22]]},"end":{"date-parts":[[2022,5,26]]}},"container-title":["2022 IEEE Symposium on Security and Privacy (SP)"],"original-title":[],"link":[{"URL":"http:\/\/xplorestaging.ieee.org\/ielx7\/9833550\/9833558\/09833751.pdf?arnumber=9833751","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2024,1,11]],"date-time":"2024-01-11T19:45:16Z","timestamp":1705002316000},"score":1,"resource":{"primary":{"URL":"https:\/\/ieeexplore.ieee.org\/document\/9833751\/"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2022,5]]},"references-count":63,"URL":"https:\/\/doi.org\/10.1109\/sp46214.2022.9833751","relation":{},"subject":[],"published":{"date-parts":[[2022,5]]}}}