{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2024,7,17]],"date-time":"2024-07-17T06:01:30Z","timestamp":1721196090131},"reference-count":53,"publisher":"Institute of Electrical and Electronics Engineers (IEEE)","issue":"3","license":[{"start":{"date-parts":[[2016,9,1]],"date-time":"2016-09-01T00:00:00Z","timestamp":1472688000000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/ieeexplore.ieee.org\/Xplorehelp\/downloads\/license-information\/IEEE.html"}],"content-domain":{"domain":[],"crossmark-restriction":false},"short-container-title":["IEEE Trans. Rel."],"published-print":{"date-parts":[[2016,9]]},"DOI":"10.1109\/tr.2015.2512220","type":"journal-article","created":{"date-parts":[[2016,1,19]],"date-time":"2016-01-19T20:50:50Z","timestamp":1453236650000},"page":"1180-1194","source":"Crossref","is-referenced-by-count":6,"title":["Dynamically Discovering Likely Memory Layout to Perform Accurate Fuzzing"],"prefix":"10.1109","volume":"65","author":[{"given":"Kai","family":"Chen","sequence":"first","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Yingjun","family":"Zhang","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Peng","family":"Liu","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]}],"member":"263","reference":[{"key":"ref39","doi-asserted-by":"publisher","DOI":"10.1109\/TSE.2014.2302311"},{"key":"ref38","article-title":"Non-control-data attacks are realistic threats","author":"chen","year":"2005","journal-title":"Proc 14th Conf USENIX Security Symp Vol 14"},{"key":"ref33","doi-asserted-by":"publisher","DOI":"10.1109\/SP.2006.7"},{"key":"ref32","doi-asserted-by":"publisher","DOI":"10.1145\/1966445.1966463"},{"key":"ref31","article-title":"Mace: Model-inference-assisted concolic exploration for protocol and vulnerability discovery","author":"cho","year":"2011","journal-title":"Proc 20th USENIX Security Symp (USENIX'11)"},{"key":"ref30","first-page":"209","article-title":"Klee: Unassisted and automatic generation of high-coverage tests for complex systems programs","author":"cadar","year":"2008","journal-title":"Proc 8th USENIX Conf Operating Systems Design and Implementation"},{"key":"ref37","first-page":"49","article-title":"Dowsing for overflows: A guided fuzzer to find buffer boundary violations","author":"haller","year":"2013","journal-title":"Usenix Security"},{"key":"ref36","doi-asserted-by":"publisher","DOI":"10.1109\/IWSESS.2009.5068455"},{"key":"ref35","doi-asserted-by":"publisher","DOI":"10.1145\/1755913.1755946"},{"key":"ref34","article-title":"Aeg: Automatic exploit generation","author":"avgerinos","year":"2011","journal-title":"Proc Network and Distributed System Security Symp"},{"key":"ref28","article-title":"A first step towards automated detection of buffer overrun vulnerabilities","volume":"17","author":"wagner","year":"2000","journal-title":"Proc Network and Distributed System Security Symp"},{"key":"ref27","doi-asserted-by":"publisher","DOI":"10.1109\/SP.2010.37"},{"key":"ref29","doi-asserted-by":"publisher","DOI":"10.1109\/52.976940"},{"key":"ref2","author":"wei","year":"2014","journal-title":"Billions of Android Devices Vulnerable to Privilege Escalation Except Android 5 0 Lollipop"},{"key":"ref1","author":"consult","year":"2015","journal-title":"Kcodes netusb How a Small Taiwanese Software Company can Impact the Security of Millions of Devices Worldwide"},{"key":"ref20","doi-asserted-by":"publisher","DOI":"10.1145\/1572272.1572299"},{"key":"ref22","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-540-73368-3_52"},{"key":"ref21","article-title":"Statically-directed dynamic automated test generation","author":"babic","year":"2011","journal-title":"Proc ACM Int Conf Softw Testing and Analysis (ISSTA 2011)"},{"key":"ref24","year":"2015","journal-title":"Callback (Computer Programming)"},{"key":"ref23","year":"2015","journal-title":"Simple Theorem Prover"},{"key":"ref26","doi-asserted-by":"publisher","DOI":"10.1145\/1065010.1065034"},{"key":"ref25","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-642-17650-0_26"},{"key":"ref50","doi-asserted-by":"publisher","DOI":"10.1016\/j.scico.2007.01.015"},{"key":"ref51","article-title":"Toward automated detection of logic vulnerabilities in web applications","author":"felmetsger","year":"2010","journal-title":"Usenix Security"},{"key":"ref53","doi-asserted-by":"publisher","DOI":"10.1109\/SP.2008.30"},{"key":"ref52","doi-asserted-by":"publisher","DOI":"10.1145\/1368088.1368157"},{"key":"ref10","author":"molnar","year":"2007","journal-title":"Catchconv Symbolic Execution and Run-time the Type Inference for Integer Conversion Errors"},{"key":"ref11","doi-asserted-by":"publisher","DOI":"10.1007\/s11432-011-4291-y"},{"key":"ref40","doi-asserted-by":"publisher","DOI":"10.1109\/SP.2012.31"},{"key":"ref12","doi-asserted-by":"publisher","DOI":"10.1109\/SECPRI.1998.674827"},{"key":"ref13","author":"sutton","year":"2007","journal-title":"Fuzzing Brute Force Vulnerabilty Discovery"},{"key":"ref14","doi-asserted-by":"publisher","DOI":"10.1145\/1375581.1375607"},{"key":"ref15","article-title":"Automated whitebox fuzz testing","author":"godefroid","year":"2008","journal-title":"Proc Network and Distributed System Security Symp"},{"key":"ref16","year":"2015","journal-title":"The Top Five Cyber Security Vulnerabilities"},{"key":"ref17","doi-asserted-by":"publisher","DOI":"10.1109\/ICSE.2009.5070546"},{"key":"ref18","doi-asserted-by":"publisher","DOI":"10.1145\/236114.236115"},{"key":"ref19","article-title":"Dynamic taint analysis for automatic detection, analysis, signature generation of exploits on commodity software","author":"newsome","year":"2005","journal-title":"12th Annual Network and Distributed Systems Security Symposium"},{"key":"ref4","year":"2014","journal-title":"Cve-2014-0552"},{"key":"ref3","doi-asserted-by":"publisher","DOI":"10.1145\/1030083.1030124"},{"key":"ref6","author":"bulletin","year":"2014","journal-title":"Security Updates Available for Adobe Flash Player"},{"key":"ref5","author":"smith","year":"2015","journal-title":"45 Interesting Pandora Statistics (March 2015)"},{"key":"ref8","doi-asserted-by":"publisher","DOI":"10.1145\/948148.948149"},{"key":"ref7","doi-asserted-by":"publisher","DOI":"10.1007\/11513988_13"},{"key":"ref49","doi-asserted-by":"publisher","DOI":"10.1109\/32.908957"},{"key":"ref9","doi-asserted-by":"publisher","DOI":"10.1145\/1180405.1180445"},{"key":"ref46","first-page":"255","article-title":"Digging for data structures","author":"cozzie","year":"2008","journal-title":"Proc 8th USENIX Conf Operating Systems Design and Implementation"},{"key":"ref45","doi-asserted-by":"publisher","DOI":"10.1145\/1749608.1749612"},{"key":"ref48","article-title":"Howard: A dynamic excavator for reverse engineering data structures","author":"slowinska","year":"2011","journal-title":"Proc NDSS"},{"key":"ref47","article-title":"Automatic reverse engineering of data structures from binary execution","author":"lin","year":"2010","journal-title":"Proc of the 17th Annual Network and Distributed System Security Symp"},{"key":"ref42","doi-asserted-by":"publisher","DOI":"10.1145\/2001420.2001424"},{"key":"ref41","doi-asserted-by":"publisher","DOI":"10.1145\/2090147.2094081"},{"key":"ref44","first-page":"5","article-title":"Analyzing memory accesses in $\\times$86 executables","author":"balakrishnan","year":"2004","journal-title":"Comp Construct"},{"key":"ref43","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-540-69738-1_1"}],"container-title":["IEEE Transactions on Reliability"],"original-title":[],"link":[{"URL":"http:\/\/xplorestaging.ieee.org\/ielx7\/24\/7556436\/07386711.pdf?arnumber=7386711","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2021,10,11]],"date-time":"2021-10-11T02:34:41Z","timestamp":1633919681000},"score":1,"resource":{"primary":{"URL":"http:\/\/ieeexplore.ieee.org\/document\/7386711\/"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2016,9]]},"references-count":53,"journal-issue":{"issue":"3"},"URL":"https:\/\/doi.org\/10.1109\/tr.2015.2512220","relation":{},"ISSN":["0018-9529","1558-1721"],"issn-type":[{"value":"0018-9529","type":"print"},{"value":"1558-1721","type":"electronic"}],"subject":[],"published":{"date-parts":[[2016,9]]}}}