{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,1,23]],"date-time":"2026-01-23T04:54:21Z","timestamp":1769144061350,"version":"3.49.0"},"publisher-location":"New York, NY, USA","reference-count":35,"publisher":"ACM","license":[{"start":{"date-parts":[[2024,7,1]],"date-time":"2024-07-01T00:00:00Z","timestamp":1719792000000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/creativecommons.org\/licenses\/by\/4.0\/"}],"funder":[{"DOI":"10.13039\/501100001659","name":"Deutsche Forschungsgemeinschaft","doi-asserted-by":"publisher","award":["390781972"],"award-info":[{"award-number":["390781972"]}],"id":[{"id":"10.13039\/501100001659","id-type":"DOI","asserted-by":"publisher"}]},{"DOI":"10.13039\/501100000781","name":"European Research Council","doi-asserted-by":"publisher","award":["101043410"],"award-info":[{"award-number":["101043410"]}],"id":[{"id":"10.13039\/501100000781","id-type":"DOI","asserted-by":"publisher"}]},{"name":"German Federal Ministry of Education"}],"content-domain":{"domain":["dl.acm.org"],"crossmark-restriction":true},"short-container-title":[],"published-print":{"date-parts":[[2024,7]]},"DOI":"10.1145\/3634737.3657003","type":"proceedings-article","created":{"date-parts":[[2024,6,28]],"date-time":"2024-06-28T11:51:38Z","timestamp":1719575498000},"page":"1117-1127","update-policy":"https:\/\/doi.org\/10.1145\/crossmark-policy","source":"Crossref","is-referenced-by-count":1,"title":["Cross-Language Differential Testing of JSON Parsers"],"prefix":"10.1145","author":[{"ORCID":"https:\/\/orcid.org\/0009-0007-7799-0566","authenticated-orcid":false,"given":"Jonas","family":"M\u00f6ller","sequence":"first","affiliation":[{"name":"Technische Universit\u00e4t Berlin, Berlin, Germany"},{"name":"Berlin Institute for the Foundations of Learning and Data, Berlin, Germany"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"ORCID":"https:\/\/orcid.org\/0009-0001-2631-9031","authenticated-orcid":false,"given":"Felix","family":"Wei\u00dfberg","sequence":"additional","affiliation":[{"name":"Technische Universit\u00e4t Berlin, Berlin, Germany"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"ORCID":"https:\/\/orcid.org\/0009-0003-9185-780X","authenticated-orcid":false,"given":"Lukas","family":"Pirch","sequence":"additional","affiliation":[{"name":"Technische Universit\u00e4t Berlin, Berlin, Germany"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-4706-260X","authenticated-orcid":false,"given":"Thorsten","family":"Eisenhofer","sequence":"additional","affiliation":[{"name":"Technische Universit\u00e4t Berlin, Berlin, Germany"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-5054-8758","authenticated-orcid":false,"given":"Konrad","family":"Rieck","sequence":"additional","affiliation":[{"name":"Technische Universit\u00e4t Berlin, Berlin, Germany"},{"name":"Berlin Institute for the Foundations of Learning and Data, Berlin, Germany"},{"name":"Technische Universit\u00e4t Wien, Wien, Austria"}],"role":[{"role":"author","vocabulary":"crossref"}]}],"member":"320","published-online":{"date-parts":[[2024,7]]},"reference":[{"key":"e_1_3_2_1_1_1","unstructured":"Atheris: A coverage-guided native python fuzzer. https:\/\/github.com\/google\/atheris. Accessed: 2023-12-08."},{"key":"e_1_3_2_1_2_1","unstructured":"Frida: Dynamic instrumentation toolkit for developers reverse-engineers and security researchers. https:\/\/github.com\/frida\/frida. Accessed: 2023-12-08."},{"key":"e_1_3_2_1_3_1","unstructured":"Jazzer: Fuzz Testing for the JVM. https:\/\/github.com\/CodeIntelligenceTesting\/jazzer. Accessed: 2023-12-08."},{"key":"e_1_3_2_1_4_1","unstructured":"funfuzz. https:\/\/github.com\/MozillaSecurity\/funfuzz. Accessed: 2023-12-08."},{"key":"e_1_3_2_1_5_1","unstructured":"libfuzzer - a library for coverage-guided fuzz testing. https:\/\/llvm.org\/docs\/LibFuzzer.html. Accessed: 2023-12-08."},{"key":"e_1_3_2_1_6_1","volume-title":"Entry on MITRE","year":"2017","unstructured":"CVE-2017-12635. Entry on MITRE, 2017."},{"key":"e_1_3_2_1_7_1","doi-asserted-by":"publisher","unstructured":"IEEE standard for floating-point arithmetic. IEEE Std 754-2019 (Revision of IEEE 754-2008) pages 1--84 2019. 10.1109\/IEEESTD.2019.8766229","DOI":"10.1109\/IEEESTD.2019.8766229"},{"key":"e_1_3_2_1_8_1","volume-title":"Entry on MITRE","year":"2023","unstructured":"CVE-2023-48891. Entry on MITRE, 2023."},{"key":"e_1_3_2_1_9_1","doi-asserted-by":"publisher","DOI":"10.1109\/TSE.1985.231893"},{"key":"e_1_3_2_1_10_1","doi-asserted-by":"crossref","first-page":"351","DOI":"10.1145\/3548606.3560624","volume-title":"Proceedings of the 2022 ACM SIGSAC Conference on Computer and Communications Security","author":"Bernhard L.","year":"2022","unstructured":"L. Bernhard, T. Scharnowski, M. Schloegel, T. Blazytko, and T. Holz. Jit-picking: Differential fuzzing of javascript engines. In Proceedings of the 2022 ACM SIGSAC Conference on Computer and Communications Security, pages 351--364, 2022."},{"key":"e_1_3_2_1_11_1","first-page":"7493","author":"Bray T.","year":"2015","unstructured":"T. Bray. The I-JSON Message Format. RFC 7493, 2015.","journal-title":"The I-JSON Message Format. RFC"},{"key":"e_1_3_2_1_12_1","doi-asserted-by":"crossref","DOI":"10.17487\/RFC8259","volume-title":"The JavaScript Object Notation (JSON) Data Interchange Format. RFC","author":"Bray T.","year":"2017","unstructured":"T. Bray. The JavaScript Object Notation (JSON) Data Interchange Format. RFC 8259, Dec. 2017. URL https:\/\/www.rfc-editor.org\/info\/rfc8259."},{"key":"e_1_3_2_1_13_1","doi-asserted-by":"publisher","DOI":"10.1109\/SP.2014.15"},{"key":"e_1_3_2_1_14_1","doi-asserted-by":"publisher","DOI":"10.1145\/3597926.3598110"},{"key":"e_1_3_2_1_15_1","doi-asserted-by":"publisher","DOI":"10.1145\/2786805.2786835"},{"key":"e_1_3_2_1_16_1","doi-asserted-by":"publisher","DOI":"10.1145\/2908080.2908095"},{"key":"e_1_3_2_1_17_1","doi-asserted-by":"crossref","first-page":"1257","DOI":"10.1109\/ICSE.2019.00127","volume-title":"2019 IEEE\/ACM 41st International Conference on Software Engineering (ICSE)","author":"Chen Y.","year":"2019","unstructured":"Y. Chen, T. Su, and Z. Su. Deep differential testing of jvm implementations. In 2019 IEEE\/ACM 41st International Conference on Software Engineering (ICSE), pages 1257--1268. IEEE, 2019."},{"key":"e_1_3_2_1_18_1","doi-asserted-by":"publisher","DOI":"10.17487\/RFC6749"},{"key":"e_1_3_2_1_19_1","doi-asserted-by":"crossref","first-page":"412","DOI":"10.1109\/ISSRE52982.2021.00050","volume-title":"2021 IEEE 32nd International Symposium on Software Reliability Engineering (ISSRE)","author":"Harrand N.","year":"2021","unstructured":"N. Harrand, T. Durieux, D. Broman, and B. Baudry. The behavioral diversity of java json libraries. In 2021 IEEE 32nd International Symposium on Software Reliability Engineering (ISSRE), pages 412--422. IEEE, 2021."},{"key":"e_1_3_2_1_20_1","doi-asserted-by":"publisher","DOI":"10.1145\/3460120.3485384"},{"key":"e_1_3_2_1_21_1","first-page":"7519","article-title":"JSON Web Token (JWT)","author":"Jones M. B.","year":"2015","unstructured":"M. B. Jones, J. Bradley, and N. Sakimura. JSON Web Token (JWT). RFC 7519, 2015.","journal-title":"RFC"},{"key":"e_1_3_2_1_22_1","volume-title":"32nd USENIX Security Symposium (USENIX Security 23)","author":"Li W.","year":"2023","unstructured":"W. Li, J. Ruan, G. Yi, L. Cheng, X. Luo, and H. Cai. Polyfuzz: Holistic greybox fuzzing of multi-language systems. In 32nd USENIX Security Symposium (USENIX Security 23), 2023."},{"key":"e_1_3_2_1_23_1","doi-asserted-by":"publisher","DOI":"10.1145\/3576915.3623166"},{"issue":"1","key":"e_1_3_2_1_24_1","first-page":"100","article-title":"Differential testing for software","volume":"10","author":"McKeeman W. M.","year":"1998","unstructured":"W. M. McKeeman. Differential testing for software. Digital Technical Journal, 10 (1):100--107, 1998.","journal-title":"Digital Technical Journal"},{"key":"e_1_3_2_1_25_1","unstructured":"J. Miller. An exploration of json interoperability vulnerabilities. https:\/\/bishopfox.com\/blog\/json-interoperability-vulnerabilities. Accessed: 2023-10-05."},{"key":"e_1_3_2_1_26_1","first-page":"48","volume-title":"Workshop on Synthesis And System Integration of Mixed Information Technologies (SASIMI 2012","author":"Nagai E.","year":"2012","unstructured":"E. Nagai, H. Awazu, N. Ishiura, and N. Takeda. Random testing of c compilers targeting arithmetic optimization. In Workshop on Synthesis And System Integration of Mixed Information Technologies (SASIMI 2012), pages 48--53, 2012."},{"key":"e_1_3_2_1_27_1","doi-asserted-by":"publisher","DOI":"10.2197\/ipsjtsldm.7.91"},{"key":"e_1_3_2_1_28_1","doi-asserted-by":"publisher","DOI":"10.1109\/ICSE43902.2021.00015"},{"key":"e_1_3_2_1_29_1","doi-asserted-by":"publisher","DOI":"10.1109\/SP.2017.27"},{"key":"e_1_3_2_1_30_1","first-page":"22","volume-title":"Proceedings of the 2004 workshop on Computer architecture education: held in conjunction with the 31st International Symposium on Computer Architecture","author":"Reddi V. J.","unstructured":"V. J. Reddi, A. Settle, D. A. Connors, and R. S. Cohn. Pin: a binary instrumentation tool for computer architecture research and education. In Proceedings of the 2004 workshop on Computer architecture education: held in conjunction with the 31st International Symposium on Computer Architecture, pages 22--es, 2004."},{"key":"e_1_3_2_1_31_1","doi-asserted-by":"crossref","DOI":"10.17487\/RFC8785","volume-title":"JSON Canonicalization Scheme (JCS). RFC","author":"Rundgren A.","year":"2020","unstructured":"A. Rundgren, B. Jordan, and S. Erdtman. JSON Canonicalization Scheme (JCS). RFC 8785, June 2020."},{"key":"e_1_3_2_1_32_1","unstructured":"N. Seriot. Parsing json is a minefield. https:\/\/seriot.ch\/projects\/parsing_json.html. Accessed: 2023-10-05."},{"key":"e_1_3_2_1_33_1","doi-asserted-by":"publisher","DOI":"10.1145\/3597926.3604919"},{"key":"e_1_3_2_1_34_1","volume-title":"2023 The ACM Joint European Software Engineering Conference and Symposium on the Foundations of Software Engineering (ESEC\/FSE)","author":"Wu M.","year":"2023","unstructured":"M. Wu, Y. Ouyang, M. Lu, J. Chen, Y. Zhao, H. Cui, Y. Guo, and Y. Zhang. Sjfuzz: Seed & mutator scheduling for jvm fuzzing. In 2023 The ACM Joint European Software Engineering Conference and Symposium on the Foundations of Software Engineering (ESEC\/FSE), 2023."},{"key":"e_1_3_2_1_35_1","doi-asserted-by":"publisher","DOI":"10.1145\/1993498.1993532"}],"event":{"name":"ASIA CCS '24: 19th ACM Asia Conference on Computer and Communications Security","location":"Singapore Singapore","acronym":"ASIA CCS '24","sponsor":["SIGSAC ACM Special Interest Group on Security, Audit, and Control"]},"container-title":["Proceedings of the 19th ACM Asia Conference on Computer and Communications Security"],"original-title":[],"link":[{"URL":"https:\/\/dl.acm.org\/doi\/10.1145\/3634737.3657003","content-type":"unspecified","content-version":"vor","intended-application":"text-mining"}],"deposited":{"date-parts":[[2025,6,18]],"date-time":"2025-06-18T23:44:07Z","timestamp":1750290247000},"score":1,"resource":{"primary":{"URL":"https:\/\/dl.acm.org\/doi\/10.1145\/3634737.3657003"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2024,7]]},"references-count":35,"alternative-id":["10.1145\/3634737.3657003","10.1145\/3634737"],"URL":"https:\/\/doi.org\/10.1145\/3634737.3657003","relation":{},"subject":[],"published":{"date-parts":[[2024,7]]},"assertion":[{"value":"2024-07-01","order":2,"name":"published","label":"Published","group":{"name":"publication_history","label":"Publication History"}}]}}