{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,7,31]],"date-time":"2026-07-31T15:42:49Z","timestamp":1785512569103,"version":"3.56.0"},"publisher-location":"New York, NY, USA","reference-count":47,"publisher":"ACM","license":[{"start":{"date-parts":[[2024,12,2]],"date-time":"2024-12-02T00:00:00Z","timestamp":1733097600000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/www.acm.org\/publications\/policies\/copyright_policy#Background"}],"content-domain":{"domain":["dl.acm.org"],"crossmark-restriction":true},"short-container-title":[],"published-print":{"date-parts":[[2024,12,2]]},"DOI":"10.1145\/3658644.3670278","type":"proceedings-article","created":{"date-parts":[[2024,12,9]],"date-time":"2024-12-09T12:19:20Z","timestamp":1733746760000},"page":"511-524","update-policy":"https:\/\/doi.org\/10.1145\/crossmark-policy","source":"Crossref","is-referenced-by-count":5,"title":["FuzzCache: Optimizing Web Application Fuzzing Through Software-Based Data Cache"],"prefix":"10.1145","author":[{"ORCID":"https:\/\/orcid.org\/0000-0002-3077-5697","authenticated-orcid":false,"given":"Penghui","family":"Li","sequence":"first","affiliation":[{"name":"Zhongguancun Laboratory, Beijing, China"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0001-8863-8751","authenticated-orcid":false,"given":"Mingxue","family":"Zhang","sequence":"additional","affiliation":[{"name":"The State Key Laboratory of Blockchain and Data Security, Zhejiang University, Hangzhou, China"}],"role":[{"vocabulary":"crossref","role":"author"}]}],"member":"320","published-online":{"date-parts":[[2024,12,9]]},"reference":[{"key":"e_1_3_2_1_1_1","unstructured":"2020. How often do Cyber Attacks occur? https:\/\/aag-it.com\/how-often-do-cyber-attacks-occur\/."},{"key":"e_1_3_2_1_2_1","unstructured":"2024. Apache HTTP server project. https:\/\/httpd.apache.org\/."},{"key":"e_1_3_2_1_3_1","unstructured":"2024. Burp Suite. https:\/\/portswigger.net\/burp."},{"key":"e_1_3_2_1_4_1","unstructured":"2024. bWAPP a buggy web application. ttp:\/\/www.itsecgames.com\/."},{"key":"e_1_3_2_1_5_1","unstructured":"2024. Damn Vulnerable Web Application (DVWA). https:\/\/github.com\/digininja\/DVWA."},{"key":"e_1_3_2_1_6_1","unstructured":"2024. honggfuzz. https:\/\/honggfuzz.dev."},{"key":"e_1_3_2_1_7_1","unstructured":"2024. PHP. https:\/\/www.php.net\/manual\/en\/book.opcache.php."},{"key":"e_1_3_2_1_8_1","unstructured":"2024. PHP. https:\/\/www.php.net\/manual\/en\/features.persistent-connections.php."},{"key":"e_1_3_2_1_9_1","unstructured":"2024. The PHP Interpreter. https:\/\/github.com\/php\/php-src."},{"key":"e_1_3_2_1_10_1","unstructured":"2024. PHPBB. https:\/\/www.phpbb.com\/."},{"key":"e_1_3_2_1_11_1","unstructured":"2024. WordPress. https:\/\/wordpress.com\/."},{"key":"e_1_3_2_1_12_1","unstructured":"2024. Xdebug. https:\/\/xdebug.org\/."},{"key":"e_1_3_2_1_13_1","doi-asserted-by":"publisher","DOI":"10.14722\/ndss.2023.24632"},{"key":"e_1_3_2_1_14_1","doi-asserted-by":"publisher","DOI":"10.1145\/3321705.3329828"},{"key":"e_1_3_2_1_15_1","doi-asserted-by":"publisher","DOI":"10.14722\/ndss.2014.23262"},{"key":"e_1_3_2_1_16_1","unstructured":"Carlo Daniele. 2023. What's New in PHP 8. https:\/\/kinsta.com\/blog\/php-8\/."},{"key":"e_1_3_2_1_17_1","doi-asserted-by":"publisher","DOI":"10.1109\/SP40000.2020.00009"},{"key":"e_1_3_2_1_18_1","volume-title":"Proceedings of the 21st USENIX Security Symposium (Security)","author":"Doup\u00e9 Adam","year":"2012","unstructured":"Adam Doup\u00e9, Ludovico Cavedon, Christopher Kruegel, and Giovanni Vigna. 2012. Enemy of the state: A state-aware black-box web vulnerability scanner. In Proceedings of the 21st USENIX Security Symposium (Security). Bellevue, WA, USA."},{"key":"e_1_3_2_1_19_1","doi-asserted-by":"publisher","DOI":"10.1109\/SP40001.2021.00022"},{"key":"e_1_3_2_1_20_1","volume-title":"Proceedings of the 33rd USENIX Security Symposium (Security)","author":"G\u00fcler Emre","year":"2024","unstructured":"Emre G\u00fcler, Sergej Schumilo, Moritz Schloegel, Nils Bars, Philipp G\u00f6rz, Xinyi Xu, Cemal Kaygusuz, and Thorsten Holz. 2024. Atropos: Effective Fuzzing of Web Applications for Server-Side Vulnerabilities. In Proceedings of the 33rd USENIX Security Symposium (Security). Philadelphia, PA, USA."},{"key":"e_1_3_2_1_21_1","doi-asserted-by":"publisher","DOI":"10.1109\/SP46214.2022.9833751"},{"key":"e_1_3_2_1_22_1","doi-asserted-by":"publisher","DOI":"10.1145\/3442381.3449826"},{"key":"e_1_3_2_1_23_1","doi-asserted-by":"publisher","DOI":"10.1145\/3442381.3450002"},{"key":"e_1_3_2_1_24_1","volume-title":"Proceedings of the 33rd USENIX Security Symposium (Security)","author":"Li Penghui","year":"2024","unstructured":"Penghui Li, Wei Meng, and Chao Zhang. 2024. SDFuzz: Target States Driven Directed Fuzzing. In Proceedings of the 33rd USENIX Security Symposium (Security). Philadelphia, PA, USA."},{"key":"e_1_3_2_1_25_1","doi-asserted-by":"publisher","DOI":"10.1109\/SP54263.2024.00197"},{"key":"e_1_3_2_1_26_1","unstructured":"LongxinH. 2024. xhprof for PHP7 and PHP8. https:\/\/github.com\/longxinH\/xhprof\/."},{"key":"e_1_3_2_1_27_1","doi-asserted-by":"publisher","DOI":"10.1145\/3548606.3559391"},{"key":"e_1_3_2_1_28_1","doi-asserted-by":"publisher","DOI":"10.1109\/SP46215.2023.10179296"},{"key":"e_1_3_2_1_29_1","unstructured":"MemCached. 2024. MemCached. https:\/\/memcached.org\/."},{"key":"e_1_3_2_1_30_1","doi-asserted-by":"publisher","DOI":"10.1109\/SP.2019.00069"},{"key":"e_1_3_2_1_31_1","unstructured":"Nikic. 2024. A PHP parser written in PHP. https:\/\/github.com\/nikic\/PHP-Parser."},{"key":"e_1_3_2_1_32_1","unstructured":"Matthew Weier O'Phinney. 2023. Exploring the New PHP JIT Compiler. https:\/\/www.zend.com\/blog\/exploring-new-php-jit-compiler."},{"key":"e_1_3_2_1_33_1","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-319-26362-5_14"},{"key":"e_1_3_2_1_34_1","unstructured":"PHP. 2024. Hierarchical Profiler. https:\/\/www.php.net\/manual\/en\/book.xhprof.php."},{"key":"e_1_3_2_1_35_1","unstructured":"PHP. 2024. OpCache Configuration. https:\/\/www.php.net\/manual\/en\/opcache.configuration.php."},{"key":"e_1_3_2_1_36_1","unstructured":"redis. 2023. Redis. https:\/\/redis.io\/."},{"key":"e_1_3_2_1_37_1","volume-title":"Proceedings of the 30th USENIX Security Symposium (Security). Virtual Event.","author":"Schumilo Sergej","year":"2021","unstructured":"Sergej Schumilo, Cornelius Aschermann, Ali Abbasi, Simon W\u00f6rner, and Thorsten Holz. 2021. Nyx: Greybox hypervisor fuzzing using fast snapshots and affine types. In Proceedings of the 30th USENIX Security Symposium (Security). Virtual Event."},{"key":"e_1_3_2_1_38_1","volume-title":"Proceedings of the 26th USENIX Security Symposium (Security)","author":"Schumilo Sergej","year":"2017","unstructured":"Sergej Schumilo, Cornelius Aschermann, Robert Gawlik, Sebastian Schinzel, and Thorsten Holz. 2017. kAFL: Hardware-Assisted feedback fuzzing for OS kernels. In Proceedings of the 26th USENIX Security Symposium (Security). Vancouver, Canada."},{"key":"e_1_3_2_1_39_1","doi-asserted-by":"publisher","DOI":"10.1109\/SP46215.2023.10179317"},{"key":"e_1_3_2_1_40_1","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-030-88418-5_8"},{"key":"e_1_3_2_1_41_1","unstructured":"W3Techs. 2024. Usage statistics and market share of WordPress. https:\/\/w3techs.com\/technologies\/details\/cm-wordpress."},{"key":"e_1_3_2_1_42_1","unstructured":"W3Techs. 2024. Usage statistics of PHP for websites. https:\/\/w3techs.com\/technologies\/details\/pl-php."},{"key":"e_1_3_2_1_43_1","unstructured":"Wikipedia. 2023. Cache (computing). https:\/\/en.wikipedia.org\/wiki\/Cache_ (computing)."},{"key":"e_1_3_2_1_44_1","doi-asserted-by":"publisher","DOI":"10.1145\/3133956.3134046"},{"key":"e_1_3_2_1_45_1","unstructured":"Zend. 2024. Zend engine. https:\/\/www.zend.com\/."},{"key":"e_1_3_2_1_46_1","doi-asserted-by":"publisher","DOI":"10.1145\/3576915.3616636"},{"key":"e_1_3_2_1_47_1","volume-title":"Proceedings of the 32nd USENIX Security Symposium (Security)","author":"Zhao Yudi","year":"2023","unstructured":"Yudi Zhao, Yuan Zhang, and Min Yang. 2023. Remote Code Execution from SST I in the Sandbox: Automatically Detecting and Exploiting Template Escape Bugs. In Proceedings of the 32nd USENIX Security Symposium (Security). Anaheim, CA, USA."}],"event":{"name":"CCS '24: ACM SIGSAC Conference on Computer and Communications Security","location":"Salt Lake City UT USA","acronym":"CCS '24","sponsor":["SIGSAC ACM Special Interest Group on Security, Audit, and Control"]},"container-title":["Proceedings of the 2024 on ACM SIGSAC Conference on Computer and Communications Security"],"original-title":[],"link":[{"URL":"https:\/\/dl.acm.org\/doi\/10.1145\/3658644.3670278","content-type":"unspecified","content-version":"vor","intended-application":"text-mining"},{"URL":"https:\/\/dl.acm.org\/doi\/pdf\/10.1145\/3658644.3670278","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2025,8,22]],"date-time":"2025-08-22T06:00:06Z","timestamp":1755842406000},"score":1,"resource":{"primary":{"URL":"https:\/\/dl.acm.org\/doi\/10.1145\/3658644.3670278"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2024,12,2]]},"references-count":47,"alternative-id":["10.1145\/3658644.3670278","10.1145\/3658644"],"URL":"https:\/\/doi.org\/10.1145\/3658644.3670278","relation":{},"subject":[],"published":{"date-parts":[[2024,12,2]]},"assertion":[{"value":"2024-12-09","order":3,"name":"published","label":"Published","group":{"name":"publication_history","label":"Publication History"}}]}}