{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,10,8]],"date-time":"2026-10-08T11:46:56Z","timestamp":1791460016692,"version":"4.3.4"},"publisher-location":"New York, NY, USA","reference-count":58,"publisher":"ACM","license":[{"start":{"date-parts":[[2020,10,30]],"date-time":"2020-10-30T00:00:00Z","timestamp":1604016000000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/www.acm.org\/publications\/policies\/copyright_policy#Background"}],"content-domain":{"domain":["dl.acm.org"],"crossmark-restriction":true},"short-container-title":[],"published-print":{"date-parts":[[2020,10,30]]},"DOI":"10.1145\/3372297.3423340","type":"proceedings-article","created":{"date-parts":[[2021,3,4]],"date-time":"2021-03-04T16:20:42Z","timestamp":1614874842000},"page":"971-986","update-policy":"https:\/\/doi.org\/10.1145\/crossmark-policy","source":"Crossref","is-referenced-by-count":25,"title":["FREEDOM: Engineering a State-of-the-Art DOM Fuzzer"],"prefix":"10.1145","author":[{"given":"Wen","family":"Xu","sequence":"first","affiliation":[{"name":"Georgia Institute of Technology, Atlanta, GA, USA"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Soyeon","family":"Park","sequence":"additional","affiliation":[{"name":"Georgia Institute of Technology, Atlanta, GA, USA"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Taesoo","family":"Kim","sequence":"additional","affiliation":[{"name":"Georgia Institute of Technology, Atlanta, GA, USA"}],"role":[{"vocabulary":"crossref","role":"author"}]}],"member":"320","published-online":{"date-parts":[[2020,11,2]]},"reference":[{"key":"e_1_3_2_2_1_1","volume-title":"https:\/\/www.aldeid.com\/wiki\/Bf3 (visited on","author":"Aldeid","year":"2020"},{"key":"e_1_3_2_2_2_1","volume-title":"HFS Plus","author":"Apple Inc.","year":"2020"},{"key":"e_1_3_2_2_3_1","volume-title":"Property List Programming Topics for Core Foundation. https:\/\/developer.apple.com\/library\/archive\/documentation\/CoreFoundation\/Conceptual\/CFPropertyLists\/CFPropertyLists.html (visited on","author":"Apple Inc.","year":"2020"},{"key":"e_1_3_2_2_4_1","doi-asserted-by":"publisher","DOI":"10.14722\/ndss.2019.23412"},{"key":"e_1_3_2_2_5_1","volume-title":"Apple Safari - PWN2OWN Desktop Exploit. https:\/\/labs.f-secure.com\/assets\/BlogFiles\/apple-safari-pwn2own-vuln-write-up-2018--10--29-final.pdf (visited on","author":"Beterke F.","year":"2020"},{"key":"e_1_3_2_2_6_1","volume-title":"Citeseer","author":"Bienz T.","year":"1993"},{"key":"e_1_3_2_2_7_1","volume-title":"Black Hat USA Briefings (Black Hat USA)","author":"Bo Q.","year":"2014"},{"key":"e_1_3_2_2_8_1","doi-asserted-by":"publisher","DOI":"10.1145\/3133956.3134020"},{"key":"e_1_3_2_2_9_1","volume-title":"Proceedings of the IEEE Transactions on Software Engineering","author":"B\u00f6hme M.","year":"2017"},{"key":"e_1_3_2_2_10_1","volume-title":"https:\/\/caniuse.com\/#feat=webgl2 (visited on","author":"Deveria A.","year":"2020"},{"key":"e_1_3_2_2_11_1","volume-title":"DOM fuzzer. https:\/\/github.com\/googleprojectzero\/domato (visited on","author":"Fratric I.","year":"2020"},{"key":"e_1_3_2_2_12_1","volume-title":"The Great DOM Fuzz-off of","author":"Fratric I.","year":"2017"},{"key":"e_1_3_2_2_13_1","volume-title":"https:\/\/github.com\/googleprojectzero\/p0tools (visited on","author":"Fratric I.","year":"2020"},{"key":"e_1_3_2_2_14_1","volume-title":"Chrome Vulnerability Reward Program Rules. https:\/\/www.google.com\/about\/appsecurity\/chrome-rewards\/index.html (visited on","author":"Google","year":"2020"},{"key":"e_1_3_2_2_15_1","volume-title":"https:\/\/google.github.io\/clusterfuzz (visited on","author":"Google","year":"2020"},{"key":"e_1_3_2_2_16_1","volume-title":"Issue 666246. https:\/\/bugs.chromium.org\/p\/chromium\/issues\/detail?id=666246 (visited on","author":"Google","year":"2020"},{"key":"e_1_3_2_2_17_1","volume-title":"Issue 671328. https:\/\/bugs.chromium.org\/p\/chromium\/issues\/detail?id=671328 (visited on","author":"Google","year":"2020"},{"key":"e_1_3_2_2_18_1","volume-title":"syzkaller is an unsupervised, coverage-guided kernel fuzzer. https:\/\/github.com\/google\/syzkaller (visited on","author":"Google","year":"2020"},{"key":"e_1_3_2_2_19_1","volume-title":"TU Braunschweig","author":"Gro\u00df S.","year":"2018"},{"key":"e_1_3_2_2_20_1","doi-asserted-by":"publisher","DOI":"10.14722\/ndss.2019.23263"},{"key":"e_1_3_2_2_21_1","volume-title":"Proceedings of the 21st USENIX Security Symposium (Security)","author":"Holler C.","year":"2012"},{"key":"e_1_3_2_2_22_1","volume-title":"Proceedings of the 29th USENIX Security Symposium (Security)","author":"Lee S.","year":"2020"},{"key":"e_1_3_2_2_23_1","doi-asserted-by":"publisher","DOI":"10.1109\/CCST.2015.7389677"},{"key":"e_1_3_2_2_24_1","unstructured":"Liu J. and Xu C. Pwning Microsoft Edge Browser: From Memory Safety Vulnerability to Remote Code Execution. POC.  Liu J. and Xu C. Pwning Microsoft Edge Browser: From Memory Safety Vulnerability to Remote Code Execution. POC."},{"key":"e_1_3_2_2_25_1","volume-title":"libFuzzer - a library for coverage-guided fuzz testing. https:\/\/llvm.org\/docs\/LibFuzzer.html (visited on","author":"Project","year":"2020"},{"key":"e_1_3_2_2_26_1","unstructured":"Microsoft Security Research and Defense . VulnScan - Automated Triage and Root Cause Analysis of Memory Corruption Issues. https:\/\/msrc-blog.microsoft.com\/2017\/10\/03\/vulnscan-automated-triage-and-root-cause-analysis-of-memory-corruption-issues\/ (visited on September 12 2020).  Microsoft Security Research and Defense . VulnScan - Automated Triage and Root Cause Analysis of Memory Corruption Issues. https:\/\/msrc-blog.microsoft.com\/2017\/10\/03\/vulnscan-automated-triage-and-root-cause-analysis-of-memory-corruption-issues\/ (visited on September 12 2020)."},{"key":"e_1_3_2_2_27_1","volume-title":"https:\/\/developer.mozilla.org\/en-US\/docs\/Web\/API\/Canvas_API (visited on","author":"Mozilla API","year":"2020"},{"key":"e_1_3_2_2_28_1","volume-title":"DOM fuzzers. https:\/\/github.com\/MozillaSecurity\/domfuzz (visited on","author":"Mozilla","year":"2020"},{"key":"e_1_3_2_2_29_1","volume-title":"https:\/\/developer.mozilla.org\/en-US\/docs\/Web\/API\/IndexedDB_API (visited on","author":"Mozilla DB API","year":"2020"},{"key":"e_1_3_2_2_30_1","volume-title":"Localizations and character encodings. https:\/\/developer.mozilla.org\/en-US\/docs\/Web\/Guide\/Localizations_and_character_encodings (visited on","author":"Mozilla","year":"2020"},{"key":"e_1_3_2_2_31_1","volume-title":"https:\/\/developer.mozilla.org\/en-US\/docs\/Glossary\/Vendor_Prefix (visited on","author":"Mozilla","year":"2020"},{"key":"e_1_3_2_2_32_1","volume-title":"Web Audio API. https:\/\/developer.mozilla.org\/en-US\/docs\/Web\/API\/Web_Audio_API (visited on","author":"Mozilla","year":"2020"},{"key":"e_1_3_2_2_33_1","volume-title":"https:\/\/github.com\/MozillaSecurity\/avalanche (visited on","author":"Mozilla Security","year":"2020"},{"key":"e_1_3_2_2_34_1","volume-title":"dharma. https:\/\/github.com\/MozillaSecurity\/dharma (visited on","author":"Mozilla Security","year":"2020"},{"key":"e_1_3_2_2_35_1","volume-title":"https:\/\/github.com\/MozillaSecurity\/ffpuppet (visited on","author":"Mozilla Security","year":"2020"},{"key":"e_1_3_2_2_36_1","volume-title":"Grizzly Browser Fuzzing Framework. https:\/\/blog.mozilla.org\/security\/2019\/07\/10\/grizzly (visited on","author":"Mozilla Security","year":"2020"},{"key":"e_1_3_2_2_37_1","volume-title":"Introducing the ASan Nightly Project. https:\/\/blog.mozilla.org\/security\/2018\/07\/19\/introducing-the-asan-nightly-project\/ (visited on","author":"Mozilla Security","year":"2020"},{"key":"e_1_3_2_2_38_1","volume-title":"JavaScript engine fuzzers. https:\/\/github.com\/MozillaSecurity\/funfuzz (visited on","author":"Mozilla Security","year":"2020"},{"key":"e_1_3_2_2_39_1","volume-title":"Writing an Adapter. https:\/\/github.com\/MozillaSecurity\/grizzly\/wiki\/Writing-an-Adapter (visited on","author":"Mozilla Security","year":"2020"},{"key":"e_1_3_2_2_40_1","unstructured":"Paoli J. Valet-Harper I. Farquhar A. and Sebestyen I. Ecma-376 office open xml file formats. http:\/\/www.ecmainternational.org\/publications\/standards\/Ecma-376.htm (visited on September 12 2020).  Paoli J. Valet-Harper I. Farquhar A. and Sebestyen I. Ecma-376 office open xml file formats. http:\/\/www.ecmainternational.org\/publications\/standards\/Ecma-376.htm (visited on September 12 2020)."},{"key":"e_1_3_2_2_41_1","doi-asserted-by":"publisher","DOI":"10.1109\/SP40000.2020.00067"},{"key":"e_1_3_2_2_42_1","volume-title":"https:\/\/sourceforge.net\/projects\/peachfuzz (visited on","author":"Peach Tech","year":"2020"},{"key":"e_1_3_2_2_43_1","doi-asserted-by":"publisher","DOI":"10.1109\/TSE.2019.2941681"},{"key":"e_1_3_2_2_44_1","volume-title":"Proceedings of the 23rd USENIX Security Symposium (Security)","author":"Rebert A.","year":"2014"},{"key":"e_1_3_2_2_45_1","doi-asserted-by":"publisher","DOI":"10.1145\/2501620.2501623"},{"key":"e_1_3_2_2_46_1","volume-title":"Open source in-memory database, cache and message broker. https:\/\/redis.io\/ (visited on","author":"Sanfilippo S.","year":"2020"},{"key":"e_1_3_2_2_47_1","volume-title":"Wadi Fuzzing Harness. https:\/\/github.com\/sensepost\/wadi (visited on","author":"SensePost","year":"2020"},{"key":"e_1_3_2_2_48_1","volume-title":"Proceedings of the 2012 USENIX Annual Technical Conference (ATC)","author":"Serebryany K.","year":"2012"},{"key":"e_1_3_2_2_49_1","volume-title":"Fixing an SVG Animation Vulnerability. https:\/\/blog.mozilla.org\/security\/2016\/11\/30\/fixing-an-svg-animation-vulnerability\/ (visited on","author":"Veditz D.","year":"2020"},{"key":"e_1_3_2_2_50_1","volume-title":"8.11 Animation frames. https:\/\/html.spec.whatwg.org\/multipage\/imagebitmap-and-animations.html#animation-frames (visited on","year":"2020"},{"key":"e_1_3_2_2_51_1","volume-title":"SVG Animations Level 2:  2.14. The 'set' element. https:\/\/svgwg.org\/specs\/animations\/#SetElement (visited on","year":"2020"},{"key":"e_1_3_2_2_52_1","volume-title":"SVG Animations Level 2: Attributes to identify the target attribute or property for an animation. https:\/\/svgwg.org\/specs\/animations\/#AttributeNameAttribute (visited on","year":"2020"},{"key":"e_1_3_2_2_53_1","doi-asserted-by":"publisher","DOI":"10.1109\/SP.2017.23"},{"key":"e_1_3_2_2_54_1","doi-asserted-by":"publisher","DOI":"10.1109\/ICSE.2019.00081"},{"key":"e_1_3_2_2_55_1","doi-asserted-by":"publisher","DOI":"10.1109\/SP.2019.00035"},{"key":"e_1_3_2_2_56_1","doi-asserted-by":"publisher","DOI":"10.1145\/1993498.1993532"},{"key":"e_1_3_2_2_57_1","unstructured":"Zalewski M. american fuzzy lop (2.52b). http:\/\/lcamtuf.coredump.cx\/afl (visited on September 12 2020).  Zalewski M. american fuzzy lop (2.52b). http:\/\/lcamtuf.coredump.cx\/afl (visited on September 12 2020)."},{"key":"e_1_3_2_2_58_1","volume-title":"cross_fuzz. https:\/\/lcamtuf.coredump.cx\/cross_fuzz\/ (visited on","author":"Zalewski M.","year":"2020"}],"event":{"name":"CCS '20: 2020 ACM SIGSAC Conference on Computer and Communications Security","location":"Virtual Event USA","acronym":"CCS '20","sponsor":["SIGSAC ACM Special Interest Group on Security, Audit, and Control"]},"container-title":["Proceedings of the 2020 ACM SIGSAC Conference on Computer and Communications Security"],"original-title":[],"link":[{"URL":"https:\/\/dl.acm.org\/doi\/10.1145\/3372297.3423340","content-type":"unspecified","content-version":"vor","intended-application":"text-mining"},{"URL":"https:\/\/dl.acm.org\/doi\/pdf\/10.1145\/3372297.3423340","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2025,6,17]],"date-time":"2025-06-17T22:02:20Z","timestamp":1750197740000},"score":1,"resource":{"primary":{"URL":"https:\/\/dl.acm.org\/doi\/10.1145\/3372297.3423340"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2020,10,30]]},"references-count":58,"alternative-id":["10.1145\/3372297.3423340","10.1145\/3372297"],"URL":"https:\/\/doi.org\/10.1145\/3372297.3423340","relation":{},"subject":[],"published":{"date-parts":[[2020,10,30]]},"assertion":[{"value":"2020-11-02","order":2,"name":"published","label":"Published","group":{"name":"publication_history","label":"Publication History"}}]}}