{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,7,9]],"date-time":"2026-07-09T15:16:34Z","timestamp":1783610194229,"version":"3.55.0"},"publisher-location":"New York, NY, USA","reference-count":69,"publisher":"ACM","license":[{"start":{"date-parts":[[2023,7,12]],"date-time":"2023-07-12T00:00:00Z","timestamp":1689120000000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/www.acm.org\/publications\/policies\/copyright_policy#Background"}],"content-domain":{"domain":["dl.acm.org"],"crossmark-restriction":true},"short-container-title":[],"published-print":{"date-parts":[[2023,7,12]]},"DOI":"10.1145\/3597926.3598039","type":"proceedings-article","created":{"date-parts":[[2023,7,13]],"date-time":"2023-07-13T20:12:53Z","timestamp":1689279173000},"page":"76-88","update-policy":"https:\/\/doi.org\/10.1145\/crossmark-policy","source":"Crossref","is-referenced-by-count":12,"title":["Icicle: A Re-designed Emulator for Grey-Box Firmware Fuzzing"],"prefix":"10.1145","author":[{"given":"Michael","family":"Chesser","sequence":"first","affiliation":[{"name":"University of Adelaide, Australia"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Surya","family":"Nepal","sequence":"additional","affiliation":[{"name":"CSIRO\u2019s Data61, Australia"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Damith C.","family":"Ranasinghe","sequence":"additional","affiliation":[{"name":"University of Adelaide, Australia"}],"role":[{"vocabulary":"crossref","role":"author"}]}],"member":"320","published-online":{"date-parts":[[2023,7,13]]},"reference":[{"key":"e_1_3_2_1_1_1","unstructured":"Bytecode Alliance. 2021. Cranelift Code Generator. https:\/\/github.com\/bytecodealliance\/wasmtime\/tree\/main\/cranelift \t\t\t\t  Bytecode Alliance. 2021. Cranelift Code Generator. https:\/\/github.com\/bytecodealliance\/wasmtime\/tree\/main\/cranelift"},{"key":"e_1_3_2_1_2_1","doi-asserted-by":"publisher","DOI":"10.1145\/2815400.2815420"},{"key":"e_1_3_2_1_3_1","doi-asserted-by":"publisher","DOI":"10.1145\/3533767.3534376"},{"key":"e_1_3_2_1_4_1","doi-asserted-by":"publisher","DOI":"10.14722\/ndss.2019.23412"},{"key":"e_1_3_2_1_5_1","doi-asserted-by":"publisher","DOI":"10.14722\/ndss.2019.23371"},{"key":"e_1_3_2_1_6_1","unstructured":"Andrea Biondo. 2018. Improving AFL\u2019s QEMU mode performance. https:\/\/abiondo.me\/2018\/09\/21\/improving-afl-qemu-mode \t\t\t\t  Andrea Biondo. 2018. Improving AFL\u2019s QEMU mode performance. https:\/\/abiondo.me\/2018\/09\/21\/improving-afl-qemu-mode"},{"key":"e_1_3_2_1_7_1","volume-title":"28th USENIX Security Symposium (USENIX Security \u201919)","author":"Blazytko Tim","year":"2019","unstructured":"Tim Blazytko , Matt Bishop , Cornelius Aschermann , Justin Cappos , Moritz Schl\u00f6gel , Nadia Korshun , Ali Abbasi , Marco Schweighauser , Sebastian Schinzel , and Sergej Schumilo . 2019 . GRIMOIRE: Synthesizing Structure while Fuzzing . In 28th USENIX Security Symposium (USENIX Security \u201919) . 1985\u20132002. https:\/\/doi.org\/10.5555\/3361338.3361475 10.5555\/3361338.3361475 Tim Blazytko, Matt Bishop, Cornelius Aschermann, Justin Cappos, Moritz Schl\u00f6gel, Nadia Korshun, Ali Abbasi, Marco Schweighauser, Sebastian Schinzel, and Sergej Schumilo. 2019. GRIMOIRE: Synthesizing Structure while Fuzzing. In 28th USENIX Security Symposium (USENIX Security \u201919). 1985\u20132002. https:\/\/doi.org\/10.5555\/3361338.3361475"},{"key":"e_1_3_2_1_8_1","doi-asserted-by":"publisher","DOI":"10.1145\/3510003.3510230"},{"key":"e_1_3_2_1_9_1","doi-asserted-by":"publisher","DOI":"10.1145\/2151024.2151043"},{"key":"e_1_3_2_1_10_1","doi-asserted-by":"publisher","DOI":"10.5555\/2032305.2032342"},{"key":"e_1_3_2_1_11_1","doi-asserted-by":"publisher","DOI":"10.14722\/ndss.2016.23415"},{"key":"e_1_3_2_1_12_1","doi-asserted-by":"publisher","DOI":"10.1109\/SP.2018.00046"},{"key":"e_1_3_2_1_13_1","doi-asserted-by":"publisher","DOI":"10.1145\/3548606.3559338"},{"key":"e_1_3_2_1_14_1","doi-asserted-by":"publisher","DOI":"10.1145\/1950365.1950396"},{"key":"e_1_3_2_1_15_1","first-page":"17","volume-title":"HALucinator: Firmware Re-hosting Through Abstraction Layer Emulation. In 29th USENIX Security Symposium (USENIX Security \u201920)","author":"Clements Abraham A","year":"2020","unstructured":"Abraham A Clements , Eric Gustafson , Tobias Scharnowski , Paul Grosen , David Fritz , Christopher Kruegel , Giovanni Vigna , Saurabh Bagchi , and Mathias Payer . 2020 . HALucinator: Firmware Re-hosting Through Abstraction Layer Emulation. In 29th USENIX Security Symposium (USENIX Security \u201920) . 1201\u20131218. isbn:978-1-939133- 17 - 15 Abraham A Clements, Eric Gustafson, Tobias Scharnowski, Paul Grosen, David Fritz, Christopher Kruegel, Giovanni Vigna, Saurabh Bagchi, and Mathias Payer. 2020. HALucinator: Firmware Re-hosting Through Abstraction Layer Emulation. In 29th USENIX Security Symposium (USENIX Security \u201920). 1201\u20131218. isbn:978-1-939133-17-5"},{"key":"e_1_3_2_1_16_1","unstructured":"The Qiling Contributors. 2022. Qiling Advanced Binary Emulation Framework. https:\/\/github.com\/qilingframework\/qiling\/ \t\t\t\t  The Qiling Contributors. 2022. Qiling Advanced Binary Emulation Framework. https:\/\/github.com\/qilingframework\/qiling\/"},{"key":"e_1_3_2_1_17_1","first-page":"04","volume-title":"Inception: System-Wide Security Testing of Real-World Embedded Systems Software. In 27th USENIX Security Symposium (USENIX Security \u201918)","author":"Corteggiani Nassim","year":"2018","unstructured":"Nassim Corteggiani , Giovanni Camurati , and Aur\u00e9lien Francillon . 2018 . Inception: System-Wide Security Testing of Real-World Embedded Systems Software. In 27th USENIX Security Symposium (USENIX Security \u201918) . 309\u2013326. isbn:978-1-939133- 04 - 05 Nassim Corteggiani, Giovanni Camurati, and Aur\u00e9lien Francillon. 2018. Inception: System-Wide Security Testing of Real-World Embedded Systems Software. In 27th USENIX Security Symposium (USENIX Security \u201918). 309\u2013326. isbn:978-1-939133-04-5"},{"key":"e_1_3_2_1_18_1","volume-title":"FiE on Firmware: Finding Vulnerabilities in Embedded Systems Using Symbolic Execution. In 22nd USENIX Security Symposium (USENIX Security \u201913)","author":"Davidson Drew","year":"2013","unstructured":"Drew Davidson , Benjamin Moench , Thomas Ristenpart , and Somesh Jha . 2013 . FiE on Firmware: Finding Vulnerabilities in Embedded Systems Using Symbolic Execution. In 22nd USENIX Security Symposium (USENIX Security \u201913) . 463\u2013478. https:\/\/doi.org\/10.5555\/2534766.2534806 10.5555\/2534766.2534806 Drew Davidson, Benjamin Moench, Thomas Ristenpart, and Somesh Jha. 2013. FiE on Firmware: Finding Vulnerabilities in Embedded Systems Using Symbolic Execution. In 22nd USENIX Security Symposium (USENIX Security \u201913). 463\u2013478. https:\/\/doi.org\/10.5555\/2534766.2534806"},{"key":"e_1_3_2_1_19_1","doi-asserted-by":"publisher","DOI":"10.1109\/SP40000.2020.00009"},{"key":"e_1_3_2_1_20_1","unstructured":"Flavian Dola. 2021. Fuzzing exotic arch with AFL using ghidra emulator. https:\/\/airbus-cyber-security.com\/fuzzing-exotic-arch-with-afl-using-ghidra-emulator\/ \t\t\t\t  Flavian Dola. 2021. Fuzzing exotic arch with AFL using ghidra emulator. https:\/\/airbus-cyber-security.com\/fuzzing-exotic-arch-with-afl-using-ghidra-emulator\/"},{"key":"e_1_3_2_1_21_1","doi-asserted-by":"publisher","DOI":"10.1109\/SP.2016.15"},{"key":"e_1_3_2_1_22_1","volume-title":"Vectorized Emulation: MMU Design. https:\/\/gamozolabs.github.io\/fuzzing\/2018\/11\/19\/vectorized_emulation_mmu.html","author":"Falk Brandon","year":"2018","unstructured":"Brandon Falk . 2018 . Vectorized Emulation: MMU Design. https:\/\/gamozolabs.github.io\/fuzzing\/2018\/11\/19\/vectorized_emulation_mmu.html Brandon Falk. 2018. Vectorized Emulation: MMU Design. https:\/\/gamozolabs.github.io\/fuzzing\/2018\/11\/19\/vectorized_emulation_mmu.html"},{"key":"e_1_3_2_1_23_1","volume-title":"Proceedings of 18th ACM ASIA Conference on Computer and Communications Security (AsiaCCS \u201923)","author":"Farrelly Guy","unstructured":"Guy Farrelly , Michael Chesser , and Damith C. Ranasinghe . 2023. Ember-IO: Effective Firmware Fuzzing with Model-Free Memory Mapped IO . In Proceedings of 18th ACM ASIA Conference on Computer and Communications Security (AsiaCCS \u201923) . Guy Farrelly, Michael Chesser, and Damith C. Ranasinghe. 2023. Ember-IO: Effective Firmware Fuzzing with Model-Free Memory Mapped IO. In Proceedings of 18th ACM ASIA Conference on Computer and Communications Security (AsiaCCS \u201923)."},{"key":"e_1_3_2_1_24_1","first-page":"17","volume-title":"29th USENIX Security Symposium (USENIX Security \u201920)","author":"Feng Bo","year":"2020","unstructured":"Bo Feng , Alejandro Mera , and Long Lu . 2020 . P^2IM: Scalable and Hardware-independent Firmware Testing via Automatic Peripheral Interface Modeling . In 29th USENIX Security Symposium (USENIX Security \u201920) . 1237\u20131254. isbn:978-1-939133- 17 - 15 Bo Feng, Alejandro Mera, and Long Lu. 2020. P^2IM: Scalable and Hardware-independent Firmware Testing via Automatic Peripheral Interface Modeling. In 29th USENIX Security Symposium (USENIX Security \u201920). 1237\u20131254. isbn:978-1-939133-17-5"},{"key":"e_1_3_2_1_25_1","doi-asserted-by":"publisher","DOI":"10.1145\/3395363.3397372"},{"key":"e_1_3_2_1_26_1","doi-asserted-by":"publisher","DOI":"10.1109\/SecDev45635.2020.00019"},{"key":"e_1_3_2_1_27_1","volume-title":"14th USENIX Workshop on Offensive Technologies (WOOT \u201920)","author":"Fioraldi Andrea","year":"2020","unstructured":"Andrea Fioraldi , Dominik Maier , Heiko Ei\u00df feldt, and Marc Heuse . 2020 . AFL++: Combining Incremental Steps of Fuzzing Research . In 14th USENIX Workshop on Offensive Technologies (WOOT \u201920) . https:\/\/doi.org\/10.5555\/3488877.3488887 10.5555\/3488877.3488887 Andrea Fioraldi, Dominik Maier, Heiko Ei\u00df feldt, and Marc Heuse. 2020. AFL++: Combining Incremental Steps of Fuzzing Research. In 14th USENIX Workshop on Offensive Technologies (WOOT \u201920). https:\/\/doi.org\/10.5555\/3488877.3488887"},{"key":"e_1_3_2_1_28_1","volume-title":"Datalog Disassembly. In 29th USENIX Security Symposium (USENIX Security \u201920)","author":"Flores-Montoya Antonio","year":"2020","unstructured":"Antonio Flores-Montoya and Eric Schulte . 2020 . Datalog Disassembly. In 29th USENIX Security Symposium (USENIX Security \u201920) . 1075\u20131092. https:\/\/doi.org\/10.5555\/3489212.3489273 10.5555\/3489212.3489273 Antonio Flores-Montoya and Eric Schulte. 2020. Datalog Disassembly. In 29th USENIX Security Symposium (USENIX Security \u201920). 1075\u20131092. https:\/\/doi.org\/10.5555\/3489212.3489273"},{"key":"e_1_3_2_1_29_1","unstructured":"Free Software Foundation. 2022. GNU core utilities. https:\/\/www.gnu.org\/software\/coreutils\/ \t\t\t\t  Free Software Foundation. 2022. GNU core utilities. https:\/\/www.gnu.org\/software\/coreutils\/"},{"key":"e_1_3_2_1_30_1","volume-title":"GREYONE: Data Flow Sensitive Fuzzing. In 29th USENIX Security Symposium (USENIX Security 20)","author":"Gan Shuitao","year":"2020","unstructured":"Shuitao Gan , Chao Zhang , Peng Chen , Bodong Zhao , Xiaojun Qin , Dong Wu , and Zuoning Chen . 2020 . GREYONE: Data Flow Sensitive Fuzzing. In 29th USENIX Security Symposium (USENIX Security 20) . 2577\u20132594. Shuitao Gan, Chao Zhang, Peng Chen, Bodong Zhao, Xiaojun Qin, Dong Wu, and Zuoning Chen. 2020. GREYONE: Data Flow Sensitive Fuzzing. In 29th USENIX Security Symposium (USENIX Security 20). 2577\u20132594."},{"key":"e_1_3_2_1_31_1","doi-asserted-by":"publisher","DOI":"10.1109\/ACCESS.2020.2973043"},{"key":"e_1_3_2_1_32_1","first-page":"07","volume-title":"22nd International Symposium on Research in Attacks, Intrusions and Defenses (RAID \u201919)","author":"Gustafson Eric","year":"2019","unstructured":"Eric Gustafson , Marius Muench , Chad Spensky , Nilo Redini , Aravind Machiry , Yanick Fratantonio , Davide Balzarotti , Aur\u00e9lien Francillon , Yung Ryn Choe , Christophe Kruegel , and Giovanni Vigna . 2019 . Toward the Analysis of Embedded Firmware through Automated Re-hosting . In 22nd International Symposium on Research in Attacks, Intrusions and Defenses (RAID \u201919) . 135\u2013150. isbn:978-1-939133- 07 - 06 Eric Gustafson, Marius Muench, Chad Spensky, Nilo Redini, Aravind Machiry, Yanick Fratantonio, Davide Balzarotti, Aur\u00e9lien Francillon, Yung Ryn Choe, Christophe Kruegel, and Giovanni Vigna. 2019. Toward the Analysis of Embedded Firmware through Automated Re-hosting. In 22nd International Symposium on Research in Attacks, Intrusions and Defenses (RAID \u201919). 135\u2013150. isbn:978-1-939133-07-6"},{"key":"e_1_3_2_1_33_1","doi-asserted-by":"publisher","DOI":"10.1145\/3428334"},{"key":"e_1_3_2_1_34_1","doi-asserted-by":"publisher","DOI":"10.23919\/DATE.2019.8714912"},{"key":"e_1_3_2_1_35_1","unstructured":"Intel. 2016. Circumventing fuzzing roadblocks with compiler transformations. https:\/\/lafintel.wordpress.com\/2016\/08\/15\/circumventing-fuzzing-roadblocks-with-compiler-transformations\/ \t\t\t\t  Intel. 2016. Circumventing fuzzing roadblocks with compiler transformations. https:\/\/lafintel.wordpress.com\/2016\/08\/15\/circumventing-fuzzing-roadblocks-with-compiler-transformations\/"},{"key":"e_1_3_2_1_36_1","volume-title":"10th International Conference on Emerging Security Information, Systems and Technologies (SECUWARE \u201916).","author":"Kammerstetter Markus","unstructured":"Markus Kammerstetter , Daniel Burian , and Wolfgang Kastner . 2016. Embedded Security Testing with Peripheral Device Caching and Runtime Program State Approximation . In 10th International Conference on Emerging Security Information, Systems and Technologies (SECUWARE \u201916). Markus Kammerstetter, Daniel Burian, and Wolfgang Kastner. 2016. Embedded Security Testing with Peripheral Device Caching and Runtime Program State Approximation. In 10th International Conference on Emerging Security Information, Systems and Technologies (SECUWARE \u201916)."},{"key":"e_1_3_2_1_37_1","doi-asserted-by":"publisher","DOI":"10.1145\/3243734.3243804"},{"key":"e_1_3_2_1_38_1","unstructured":"Draper Laboratory. 2016. QEMU MSP430 Target. https:\/\/github.com\/draperlaboratory\/qemu-msp \t\t\t\t  Draper Laboratory. 2016. QEMU MSP430 Target. https:\/\/github.com\/draperlaboratory\/qemu-msp"},{"key":"e_1_3_2_1_39_1","doi-asserted-by":"publisher","DOI":"10.1145\/1064978.1065034"},{"key":"e_1_3_2_1_40_1","doi-asserted-by":"publisher","DOI":"10.1145\/3533767.3534226"},{"key":"e_1_3_2_1_41_1","volume-title":"Unicorefuzz: On the Viability of Emulation for Kernelspace Fuzzing. In 13th USENIX Workshop on Offensive Technologies (WOOT \u201919)","author":"Maier Dominik","year":"2019","unstructured":"Dominik Maier , Benedikt Radtke , and Bastian Harren . 2019 . Unicorefuzz: On the Viability of Emulation for Kernelspace Fuzzing. In 13th USENIX Workshop on Offensive Technologies (WOOT \u201919) . https:\/\/doi.org\/10.5555\/3359043.3359051 10.5555\/3359043.3359051 Dominik Maier, Benedikt Radtke, and Bastian Harren. 2019. Unicorefuzz: On the Viability of Emulation for Kernelspace Fuzzing. In 13th USENIX Workshop on Offensive Technologies (WOOT \u201919). https:\/\/doi.org\/10.5555\/3359043.3359051"},{"key":"e_1_3_2_1_42_1","doi-asserted-by":"publisher","DOI":"10.1145\/3395351.3399360"},{"key":"e_1_3_2_1_43_1","doi-asserted-by":"publisher","DOI":"10.1145\/2150976.2151012"},{"key":"e_1_3_2_1_44_1","doi-asserted-by":"publisher","DOI":"10.1145\/1831708.1831730"},{"key":"e_1_3_2_1_45_1","doi-asserted-by":"publisher","DOI":"10.1145\/1572272.1572303"},{"key":"e_1_3_2_1_46_1","doi-asserted-by":"publisher","DOI":"10.1145\/3468264.3473932"},{"key":"e_1_3_2_1_47_1","doi-asserted-by":"publisher","DOI":"10.14722\/bar.2018.23017"},{"key":"e_1_3_2_1_48_1","volume-title":"Breaking Through Binaries: Compiler-quality Instrumentation for Better Binary-only Fuzzing. In 30th USENIX Security Symposium (USENIX Security \u201921)","author":"Nagy Stefan","year":"2021","unstructured":"Stefan Nagy , Anh Nguyen-Tuong , Jason D Hiser , Jack W Davidson , and Matthew Hicks . 2021 . Breaking Through Binaries: Compiler-quality Instrumentation for Better Binary-only Fuzzing. In 30th USENIX Security Symposium (USENIX Security \u201921) . 1683\u20131700. Stefan Nagy, Anh Nguyen-Tuong, Jason D Hiser, Jack W Davidson, and Matthew Hicks. 2021. Breaking Through Binaries: Compiler-quality Instrumentation for Better Binary-only Fuzzing. In 30th USENIX Security Symposium (USENIX Security \u201921). 1683\u20131700."},{"key":"e_1_3_2_1_49_1","doi-asserted-by":"publisher","DOI":"10.1145\/1250734.1250746"},{"key":"e_1_3_2_1_50_1","unstructured":"Anh Quynh Ngyuen. 2020. Unicorn 2 - looking for sponsors. https:\/\/github.com\/unicorn-engine\/unicorn\/issues\/1217 \t\t\t\t  Anh Quynh Ngyuen. 2020. Unicorn 2 - looking for sponsors. https:\/\/github.com\/unicorn-engine\/unicorn\/issues\/1217"},{"key":"e_1_3_2_1_51_1","volume-title":"Unicorn: Next Generation CPU Emulator Framework","author":"Ngyuen Anh Quynh","year":"2015","unstructured":"Anh Quynh Ngyuen and Hoang Vu Dang . 2015 . Unicorn: Next Generation CPU Emulator Framework . http:\/\/www.unicorn-engine.org\/BHUSA2015-unicorn.pdf Anh Quynh Ngyuen and Hoang Vu Dang. 2015. Unicorn: Next Generation CPU Emulator Framework. http:\/\/www.unicorn-engine.org\/BHUSA2015-unicorn.pdf"},{"key":"e_1_3_2_1_52_1","volume-title":"ParmeSan: Sanitizer-guided Greybox Fuzzing. In 29th USENIX Security Symposium (USENIX Security \u201920)","author":"\u00d6sterlund Sebastian","year":"2020","unstructured":"Sebastian \u00d6sterlund , Kaveh Razavi , Herbert Bos , and Cristiano Giuffrida . 2020 . ParmeSan: Sanitizer-guided Greybox Fuzzing. In 29th USENIX Security Symposium (USENIX Security \u201920) . 2289\u20132306. https:\/\/doi.org\/10.5555\/3489212.3489341 10.5555\/3489212.3489341 Sebastian \u00d6sterlund, Kaveh Razavi, Herbert Bos, and Cristiano Giuffrida. 2020. ParmeSan: Sanitizer-guided Greybox Fuzzing. In 29th USENIX Security Symposium (USENIX Security \u201920). 2289\u20132306. https:\/\/doi.org\/10.5555\/3489212.3489341"},{"key":"e_1_3_2_1_53_1","volume-title":"Network and Distributed System Security Symposium (NDSS \u201922)","author":"Poeplau Sebastian","year":"2021","unstructured":"Sebastian Poeplau and Aur\u00e9lien Francillon . 2021 . SymQEMU: Compilation-based symbolic execution for binaries . In Network and Distributed System Security Symposium (NDSS \u201922) . Sebastian Poeplau and Aur\u00e9lien Francillon. 2021. SymQEMU: Compilation-based symbolic execution for binaries. In Network and Distributed System Security Symposium (NDSS \u201922)."},{"key":"e_1_3_2_1_54_1","volume-title":"Fuzzware: Using Precise MMIO Modeling for Effective Firmware Fuzzing. In 31st USENIX Security Symposium (USENIX Security \u201922)","author":"Scharnowski Tobias","year":"2022","unstructured":"Tobias Scharnowski , Nils Bars , Moritz Schloegel , Eric Gustafson , Marius Muench , Giovanni Vigna , Christopher Kruegel , Thorsten Holz , and Ali Abbasi . 2022 . Fuzzware: Using Precise MMIO Modeling for Effective Firmware Fuzzing. In 31st USENIX Security Symposium (USENIX Security \u201922) . USENIX Association, 1239\u20131256. Tobias Scharnowski, Nils Bars, Moritz Schloegel, Eric Gustafson, Marius Muench, Giovanni Vigna, Christopher Kruegel, Thorsten Holz, and Ali Abbasi. 2022. Fuzzware: Using Precise MMIO Modeling for Effective Firmware Fuzzing. In 31st USENIX Security Symposium (USENIX Security \u201922). USENIX Association, 1239\u20131256."},{"key":"e_1_3_2_1_55_1","volume-title":"30th USENIX Security Symposium (USENIX Security \u201921)","author":"Schumilo Sergej","year":"2021","unstructured":"Sergej Schumilo , Cornelius Aschermann , Ali Abbasi , Simon W\u00f6rner , and Thorsten Holz . 2021 . Nyx: Greybox Hypervisor Fuzzing using Fast Snapshots and Affine Types . In 30th USENIX Security Symposium (USENIX Security \u201921) . 2597\u20132614. Sergej Schumilo, Cornelius Aschermann, Ali Abbasi, Simon W\u00f6rner, and Thorsten Holz. 2021. Nyx: Greybox Hypervisor Fuzzing using Fast Snapshots and Affine Types. In 30th USENIX Security Symposium (USENIX Security \u201921). 2597\u20132614."},{"key":"e_1_3_2_1_56_1","volume-title":"26th USENIX Security Symposium (USENIX Security \u201917)","author":"Schumilo Sergej","year":"2017","unstructured":"Sergej Schumilo , Cornelius Aschermann , Robert Gawlik , Sebastian Schinzel , and Thorsten Holz . 2017 . kAFL: Hardware-assisted feedback fuzzing for OS kernels . In 26th USENIX Security Symposium (USENIX Security \u201917) . 167\u2013182. https:\/\/doi.org\/10.5555\/3241189.3241204 10.5555\/3241189.3241204 Sergej Schumilo, Cornelius Aschermann, Robert Gawlik, Sebastian Schinzel, and Thorsten Holz. 2017. kAFL: Hardware-assisted feedback fuzzing for OS kernels. In 26th USENIX Security Symposium (USENIX Security \u201917). 167\u2013182. https:\/\/doi.org\/10.5555\/3241189.3241204"},{"key":"e_1_3_2_1_57_1","doi-asserted-by":"publisher","DOI":"10.1145\/3492321.3519591"},{"key":"e_1_3_2_1_58_1","volume-title":"SFUZZ: High Performance Coverage-guided Greybox Fuzzer with Custom JIT Engine. https:\/\/seal9055.com\/blog\/fuzzing\/sfuzz","year":"2022","unstructured":"seal9055. 2022 . SFUZZ: High Performance Coverage-guided Greybox Fuzzer with Custom JIT Engine. https:\/\/seal9055.com\/blog\/fuzzing\/sfuzz seal9055. 2022. SFUZZ: High Performance Coverage-guided Greybox Fuzzer with Custom JIT Engine. https:\/\/seal9055.com\/blog\/fuzzing\/sfuzz"},{"key":"e_1_3_2_1_59_1","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-642-24206-9_14"},{"key":"e_1_3_2_1_60_1","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-540-89862-7_1"},{"key":"e_1_3_2_1_61_1","volume-title":"Project Triforce: Run AFL on Everything!. Black Hat Europe.","author":"Tang Jack","year":"2016","unstructured":"Jack Tang and Moony Li . 2016 . Project Triforce: Run AFL on Everything!. Black Hat Europe. Jack Tang and Moony Li. 2016. Project Triforce: Run AFL on Everything!. Black Hat Europe."},{"key":"e_1_3_2_1_62_1","volume-title":"Ghidra: Software Reverse Engineering Framework. https:\/\/ghidra-sre.org\/","author":"The National Security Agency (NSA).","year":"2019","unstructured":"The National Security Agency (NSA). 2019 . Ghidra: Software Reverse Engineering Framework. https:\/\/ghidra-sre.org\/ The National Security Agency (NSA). 2019. Ghidra: Software Reverse Engineering Framework. https:\/\/ghidra-sre.org\/"},{"key":"e_1_3_2_1_63_1","unstructured":"Goodspeed Travis. 2021. Goodwatch. https:\/\/github.com\/travisgoodspeed\/goodwatch \t\t\t\t  Goodspeed Travis. 2021. Goodwatch. https:\/\/github.com\/travisgoodspeed\/goodwatch"},{"key":"e_1_3_2_1_64_1","volume-title":"22nd International Symposium on Research in Attacks, Intrusions and Defenses (RAID \u201919)","author":"Wang Jinghan","year":"2019","unstructured":"Jinghan Wang , Yue Duan , Wei Song , Heng Yin , and Chengyu Song . 2019 . Be sensitive and collaborative: Analyzing impact of coverage metrics in greybox fuzzing . In 22nd International Symposium on Research in Attacks, Intrusions and Defenses (RAID \u201919) . 1\u201315. Jinghan Wang, Yue Duan, Wei Song, Heng Yin, and Chengyu Song. 2019. Be sensitive and collaborative: Analyzing impact of coverage metrics in greybox fuzzing. In 22nd International Symposium on Research in Attacks, Intrusions and Defenses (RAID \u201919). 1\u201315."},{"key":"e_1_3_2_1_65_1","doi-asserted-by":"publisher","DOI":"10.1145\/3186411.3186417"},{"key":"e_1_3_2_1_66_1","unstructured":"Michal Zalewski. 2010. American Fuzzy Lop: a security-oriented fuzzer. https:\/\/github.com\/google\/AFL \t\t\t\t  Michal Zalewski. 2010. American Fuzzy Lop: a security-oriented fuzzer. https:\/\/github.com\/google\/AFL"},{"key":"e_1_3_2_1_67_1","volume-title":"28th USENIX Security Symposium (USENIX Security \u201919)","author":"Zheng Yaowen","year":"2019","unstructured":"Yaowen Zheng , Ali Davanian , Heng Yin , Chengyu Song , Hongsong Zhu , and Limin Sun . 2019 . FIRM-AFL: High Throughput Greybox Fuzzing of IoT Firmware via Augmented Process Emulation . In 28th USENIX Security Symposium (USENIX Security \u201919) . 1099\u20131114. https:\/\/doi.org\/10.5555\/3361338.3361415 10.5555\/3361338.3361415 Yaowen Zheng, Ali Davanian, Heng Yin, Chengyu Song, Hongsong Zhu, and Limin Sun. 2019. FIRM-AFL: High Throughput Greybox Fuzzing of IoT Firmware via Augmented Process Emulation. In 28th USENIX Security Symposium (USENIX Security \u201919). 1099\u20131114. https:\/\/doi.org\/10.5555\/3361338.3361415"},{"key":"e_1_3_2_1_68_1","doi-asserted-by":"publisher","DOI":"10.1145\/3533767.3534414"},{"key":"e_1_3_2_1_69_1","first-page":"24","volume-title":"30th USENIX Security Symposium (USENIX Security \u201921)","author":"Zhou Wei","year":"2021","unstructured":"Wei Zhou , Le Guan , Peng Liu , and Yuqing Zhang . 2021 . Automatic Firmware Emulation through Invalidity-guided Knowledge Inference . In 30th USENIX Security Symposium (USENIX Security \u201921) . 2007\u20132024. isbn:978-1-939133- 24 - 23 Wei Zhou, Le Guan, Peng Liu, and Yuqing Zhang. 2021. Automatic Firmware Emulation through Invalidity-guided Knowledge Inference. In 30th USENIX Security Symposium (USENIX Security \u201921). 2007\u20132024. isbn:978-1-939133-24-3"}],"event":{"name":"ISSTA '23: 32nd ACM SIGSOFT International Symposium on Software Testing and Analysis","location":"Seattle WA USA","acronym":"ISSTA '23","sponsor":["SIGSOFT ACM Special Interest Group on Software Engineering","AITO"]},"container-title":["Proceedings of the 32nd ACM SIGSOFT International Symposium on Software Testing and Analysis"],"original-title":[],"link":[{"URL":"https:\/\/dl.acm.org\/doi\/10.1145\/3597926.3598039","content-type":"unspecified","content-version":"vor","intended-application":"text-mining"},{"URL":"https:\/\/dl.acm.org\/doi\/pdf\/10.1145\/3597926.3598039","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2025,6,17]],"date-time":"2025-06-17T17:48:41Z","timestamp":1750182521000},"score":1,"resource":{"primary":{"URL":"https:\/\/dl.acm.org\/doi\/10.1145\/3597926.3598039"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2023,7,12]]},"references-count":69,"alternative-id":["10.1145\/3597926.3598039","10.1145\/3597926"],"URL":"https:\/\/doi.org\/10.1145\/3597926.3598039","relation":{},"subject":[],"published":{"date-parts":[[2023,7,12]]},"assertion":[{"value":"2023-07-13","order":2,"name":"published","label":"Published","group":{"name":"publication_history","label":"Publication History"}}]}}