{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,7,2]],"date-time":"2026-07-02T06:59:05Z","timestamp":1782975545973,"version":"3.54.5"},"reference-count":76,"publisher":"IEEE","license":[{"start":{"date-parts":[[2026,5,18]],"date-time":"2026-05-18T00:00:00Z","timestamp":1779062400000},"content-version":"stm-asf","delay-in-days":0,"URL":"https:\/\/doi.org\/10.15223\/policy-029"},{"start":{"date-parts":[[2026,5,18]],"date-time":"2026-05-18T00:00:00Z","timestamp":1779062400000},"content-version":"stm-asf","delay-in-days":0,"URL":"https:\/\/doi.org\/10.15223\/policy-037"}],"funder":[{"DOI":"10.13039\/501100002347","name":"BMBF","doi-asserted-by":"publisher","award":["16 KIS 1522 K,16 KIS1258"],"award-info":[{"award-number":["16 KIS 1522 K,16 KIS1258"]}],"id":[{"id":"10.13039\/501100002347","id-type":"DOI","asserted-by":"publisher"}]}],"content-domain":{"domain":[],"crossmark-restriction":false},"short-container-title":[],"published-print":{"date-parts":[[2026,5,18]]},"DOI":"10.1109\/sp63933.2026.00134","type":"proceedings-article","created":{"date-parts":[[2026,7,1]],"date-time":"2026-07-01T19:34:20Z","timestamp":1782934460000},"page":"3720-3739","source":"Crossref","is-referenced-by-count":0,"title":["Jazzer: Coverage-Guided Fuzzing for Semantic Vulnerabilities in the Java Ecosystem"],"prefix":"10.1109","author":[{"given":"Sergej","family":"Dechand","sequence":"first","affiliation":[{"name":"*Max Planck Institute for Security and Privacy"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Tobias","family":"Wienand","sequence":"additional","affiliation":[{"name":"Ruhr University Bochum"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Fabian","family":"Meumertzheim","sequence":"additional","affiliation":[{"name":"Code Intelligence"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Peter","family":"Samarin","sequence":"additional","affiliation":[{"name":"Code Intelligence"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Simon","family":"Resch","sequence":"additional","affiliation":[{"name":"Code Intelligence"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Khaled","family":"Yakdan","sequence":"additional","affiliation":[{"name":"Code Intelligence"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Thorsten","family":"Holz","sequence":"additional","affiliation":[{"name":"*Max Planck Institute for Security and Privacy"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Flavio","family":"Toffalini","sequence":"additional","affiliation":[{"name":"Ruhr University Bochum"}],"role":[{"vocabulary":"crossref","role":"author"}]}],"member":"263","reference":[{"key":"ref1","volume":"23","author":"Arya","year":"2025","journal-title":"OSS- Fuzz"},{"key":"ref2","doi-asserted-by":"publisher","DOI":"10.1109\/SP40000.2020.00117"},{"key":"ref3","doi-asserted-by":"publisher","DOI":"10.14722\/ndss.2019.23371"},{"key":"ref4","doi-asserted-by":"publisher","DOI":"10.1109\/EuroSP.2017.14"},{"key":"ref5","doi-asserted-by":"publisher","DOI":"10.1109\/SP.2008.22"},{"key":"ref6","article-title":"Zeugma: A High-Performance Java Fuzzer with Comparison-Guided Parametric Input Generation","volume-title":"International Conference on Software Engineering (ICSE)","author":"Bell"},{"key":"ref7","doi-asserted-by":"publisher","DOI":"10.1109\/SP46215.2023.10179377"},{"key":"ref8","doi-asserted-by":"publisher","DOI":"10.1109\/ICSE48619.2023.00044"},{"key":"ref9","doi-asserted-by":"publisher","DOI":"10.1109\/sp54263.2024.00150"},{"key":"ref10","doi-asserted-by":"publisher","DOI":"10.1145\/3576915.3616610"},{"key":"ref11","volume-title":"Code Intelligence, Jazzer: Coverage-Guided, In-Process Fuzzing for the JVM","year":"2021"},{"key":"ref12","volume-title":"Code Intelligence, Jazzer.js: Coverage-Guided, In-Process Fuzzing for JavaScript","year":"2022"},{"key":"ref13","volume-title":"CVE-2021-44228","year":"2025"},{"key":"ref14","volume-title":"CVE-2022-22965","year":"2025"},{"key":"ref15","doi-asserted-by":"publisher","DOI":"10.14722\/ndss.2014.23262"},{"key":"ref16","volume-title":"Defense Advanced Research Projects Agency (DARPA), AI Cyber Challenge (AIxCC), 2024","year":"2025"},{"key":"ref17","doi-asserted-by":"publisher","DOI":"10.2307\/j.ctvpj7fxz.9"},{"key":"ref18","volume-title":"Thinking in JAVA","author":"Eckel","year":"2003"},{"key":"ref19","doi-asserted-by":"publisher","DOI":"10.1109\/SP40001.2021.00022"},{"key":"ref20","doi-asserted-by":"publisher","DOI":"10.1109\/TDSC.2024.3396667"},{"key":"ref21","doi-asserted-by":"publisher","DOI":"10.1371\/journal.pone.0225196"},{"key":"ref22","article-title":"The Use of Likely Invariants as Feedback for Fuzzers","volume-title":"USENIX Security Symposium","author":"Fioraldi"},{"key":"ref23","article-title":"The Use of Likely Invariants as Feedback for Fuzzers","volume-title":"USENIX Security Symposium","author":"Fioraldi"},{"key":"ref24","article-title":"AFL++: Combining Incremental Steps of Fuzzing Research","volume-title":"USENIX Workshop on Offensive Technologies (WOOT)","author":"Fioraldi","year":"2020"},{"key":"ref25","article-title":"AFL++: Combining Incremental Steps of Fuzzing Research","volume-title":"USENIX Workshop on Offensive Technologies (WOOT)","author":"Fioraldi","year":"2020"},{"key":"ref26","doi-asserted-by":"publisher","DOI":"10.1145\/3548606.3560602"},{"key":"ref27","volume":"28","author":"Frohoff","year":"2015","journal-title":"frohoff\/ysoserial"},{"key":"ref28","volume-title":"Go Team, Go Fuzzing","year":"2025"},{"key":"ref29","volume-title":"Google, Fuzz Test: Write Fuzz Tests Within Unit Test Frameworks, 2023","year":"2025"},{"key":"ref30","volume-title":"Google, Centipede","year":"2025"},{"key":"ref31","volume-title":"Google Security Team","year":"2020"},{"key":"ref32","doi-asserted-by":"publisher","DOI":"10.14722\/ndss.2023.24290"},{"key":"ref33","article-title":"Atropos: Effective Fuzzing of Web Applications for Server-Side Vulnerabilities","volume-title":"USENIX Security Symposium","author":"G\u00fcler"},{"key":"ref34","doi-asserted-by":"publisher","DOI":"10.2307\/4615733"},{"key":"ref35","article-title":"HSQLDB: HyperSQL Database Engine","journal-title":"HSQLDB Developers"},{"key":"ref36","volume-title":"JaCoCo Java Code Coverage Library","year":"2025"},{"key":"ref37","volume-title":"Java Docs - Instrumentation Package java.lang.instrument","year":"2025"},{"key":"ref38","volume-title":"Jazzer+LibAFL: Insights into Java Fuzzing","year":"2025"},{"key":"ref39","doi-asserted-by":"publisher","DOI":"10.1109\/SP.2006.29"},{"key":"ref40","volume-title":"JSqlParser: Java Sql Parser","year":"2025"},{"key":"ref41","doi-asserted-by":"publisher","DOI":"10.1145\/3133956.3138820"},{"key":"ref42","author":"Kim","year":"2025","journal-title":"ATLANTIS: AI-driven Threat Localization, Analysis, and Triage Intelligence System"},{"key":"ref43","doi-asserted-by":"publisher","DOI":"10.1145\/3243734.3243804"},{"key":"ref44","volume-title":"libFuzzer - a library for coverage-guided fuzz testing. - LLVM 21.0.0git documentation","year":"2025"},{"key":"ref45","article-title":"PromeFuzz: A Knowledge-Driven Approach to Fuzzing Harness Generation with Large Language Models","volume-title":"ACM Conference on Computer and Communications Security (CCS)","author":"Liu"},{"key":"ref46","article-title":"Finding Security Vulnerabilities in Java Applications with Static Analysis","volume-title":"USENIX Security Symposium","author":"Benjamin Livshits"},{"key":"ref47","doi-asserted-by":"publisher","DOI":"10.1109\/TSE.2019.2946563"},{"key":"ref48","doi-asserted-by":"publisher","DOI":"10.1145\/3634737.3661137"},{"key":"ref49","article-title":"Dynamic Taint Analysis for Automatic Detection, Analysis, and Signature Generation of Exploits on Commodity Software","volume-title":"Symposium on Network and Distributed System Security (NDSS)","author":"Newsome"},{"key":"ref50","year":"2025","journal-title":"OpenJDK Community, Project Panama: Interconnecting JVM and native code, OpenJDK"},{"key":"ref51","volume-title":"Oracle Corporation, Interface Instrumentation","year":"2025"},{"key":"ref52","volume-title":"OWASP Foundation, OWASP Zed Attack Proxy (ZAP), 2012","year":"2025"},{"key":"ref53","doi-asserted-by":"publisher","DOI":"10.1145\/3293882.3339002"},{"key":"ref54","doi-asserted-by":"publisher","DOI":"10.1145\/3293882.3330576"},{"key":"ref55","article-title":"Symbolic execution with SymCC: Don\u2019t interpret, compile!","volume-title":"USENIX Security Symposium","author":"Poeplau"},{"key":"ref56","volume-title":"PortSwigger Ltd. Burp Suite Professional","year":"2025"},{"key":"ref57","volume-title":"LLVM Project, Clang Documentation: UndefinedBehaviorSanitizer","year":"2016"},{"key":"ref58","volume-title":"Randoop Developers, Randoop Manual","year":"2025"},{"key":"ref59","volume-title":"SanitizerCoverage - Clang 22.0.0git documentation","year":"2025"},{"key":"ref60","doi-asserted-by":"publisher","DOI":"10.1109\/SP54263.2024.00137"},{"key":"ref61","doi-asserted-by":"publisher","DOI":"10.1109\/SP.2010.26"},{"key":"ref62","article-title":"AddressSanitizer: A Fast Address Sanity Checker","volume-title":"USENIX Annual Technical Conference (ATC)","author":"Serebryany"},{"key":"ref63","doi-asserted-by":"publisher","DOI":"10.1109\/SP.2016.17"},{"key":"ref64","doi-asserted-by":"publisher","DOI":"10.1109\/SP.2019.00010"},{"key":"ref65","doi-asserted-by":"publisher","DOI":"10.1145\/3611643.3616313"},{"key":"ref66","doi-asserted-by":"publisher","DOI":"10.14722\/ndss.2016.23368"},{"key":"ref67","author":"Surribas","year":"2006","journal-title":"Wapiti Web Application Vulnerability Scanner"},{"key":"ref68","volume-title":"SanitizerCoverage","year":"2025"},{"key":"ref69","volume-title":"The Clang Team, Source-Based Code Coverage, 2025","year":"2025"},{"key":"ref70","doi-asserted-by":"publisher","DOI":"10.1109\/SP46215.2023.10179317"},{"key":"ref71","doi-asserted-by":"publisher","DOI":"10.1145\/1542476.1542486"},{"key":"ref72","doi-asserted-by":"publisher","DOI":"10.1109\/SP61157.2025.00066"},{"key":"ref73","article-title":"QSYM: A Practical Concolic Execution Engine Tailored for Hybrid Fuzzing","volume-title":"USENIX Security Symposium","author":"Yun"},{"key":"ref74","author":"Zalewski","year":"2025","journal-title":"American Fuzzy Lop"},{"key":"ref75","doi-asserted-by":"publisher","DOI":"10.1145\/3650212.3680355"},{"key":"ref76","doi-asserted-by":"publisher","DOI":"10.1145\/3512345"}],"event":{"name":"2026 IEEE Symposium on Security and Privacy (SP)","location":"San Francisco, CA, USA","start":{"date-parts":[[2026,5,18]]},"end":{"date-parts":[[2026,5,21]]}},"container-title":["2026 IEEE Symposium on Security and Privacy (SP)"],"original-title":[],"link":[{"URL":"http:\/\/xplorestaging.ieee.org\/ielx8\/11573355\/11573356\/11573447.pdf?arnumber=11573447","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2026,7,2]],"date-time":"2026-07-02T05:27:27Z","timestamp":1782970047000},"score":1,"resource":{"primary":{"URL":"https:\/\/ieeexplore.ieee.org\/document\/11573447\/"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2026,5,18]]},"references-count":76,"URL":"https:\/\/doi.org\/10.1109\/sp63933.2026.00134","relation":{},"subject":[],"published":{"date-parts":[[2026,5,18]]}}}