{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,1,29]],"date-time":"2026-01-29T22:39:28Z","timestamp":1769726368854,"version":"3.49.0"},"publisher-location":"New York, NY, USA","reference-count":54,"publisher":"ACM","license":[{"start":{"date-parts":[[2024,12,2]],"date-time":"2024-12-02T00:00:00Z","timestamp":1733097600000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/www.acm.org\/publications\/policies\/copyright_policy#Background"}],"funder":[{"DOI":"10.13039\/501100006374","name":"National Natural Science Foundation of China","doi-asserted-by":"publisher","award":["62172360, U21A20464"],"award-info":[{"award-number":["62172360, U21A20464"]}],"id":[{"id":"10.13039\/501100006374","id-type":"DOI","asserted-by":"publisher"}]},{"name":"National Key R&D Program of China","award":["2022YFE0113200"],"award-info":[{"award-number":["2022YFE0113200"]}]}],"content-domain":{"domain":["dl.acm.org"],"crossmark-restriction":true},"short-container-title":[],"published-print":{"date-parts":[[2024,12,2]]},"DOI":"10.1145\/3658644.3690237","type":"proceedings-article","created":{"date-parts":[[2024,12,9]],"date-time":"2024-12-09T12:19:20Z","timestamp":1733746760000},"page":"3928-3942","update-policy":"https:\/\/doi.org\/10.1145\/crossmark-policy","source":"Crossref","is-referenced-by-count":7,"title":["Toss a Fault to\n            <scp>BpfChecker:<\/scp>\n            Revealing Implementation Flaws for eBPF runtimes with Differential Fuzzing"],"prefix":"10.1145","author":[{"ORCID":"https:\/\/orcid.org\/0009-0009-1295-9802","authenticated-orcid":false,"given":"Chaoyuan","family":"Peng","sequence":"first","affiliation":[{"name":"Zhejiang University, Hangzhou, China"}]},{"ORCID":"https:\/\/orcid.org\/0000-0003-2196-6894","authenticated-orcid":false,"given":"Muhui","family":"Jiang","sequence":"additional","affiliation":[{"name":"The Hong Kong Polytechnic University, Hong Kong, China"}]},{"ORCID":"https:\/\/orcid.org\/0000-0003-1675-5283","authenticated-orcid":false,"given":"Lei","family":"Wu","sequence":"additional","affiliation":[{"name":"Zhejiang University, Hangzhou, China"}]},{"ORCID":"https:\/\/orcid.org\/0000-0001-7610-4736","authenticated-orcid":false,"given":"Yajin","family":"Zhou","sequence":"additional","affiliation":[{"name":"Zhejiang University, Hangzhou, China"}]}],"member":"320","published-online":{"date-parts":[[2024,12,9]]},"reference":[{"key":"e_1_3_2_1_1_1","doi-asserted-by":"publisher","DOI":"10.1109\/NFV-SDN53031.2021.9665095"},{"key":"e_1_3_2_1_2_1","doi-asserted-by":"publisher","DOI":"10.1109\/ICCBB.2018.8756390"},{"key":"e_1_3_2_1_3_1","doi-asserted-by":"publisher","DOI":"10.1109\/SP.2018.00046"},{"key":"e_1_3_2_1_4_1","unstructured":"Alexei Starovoitov Daniel Borkmann. 2024. eBPF. https:\/\/ebpf.io"},{"key":"e_1_3_2_1_5_1","volume-title":"Making eBPF work on Windows. https:\/\/cloudblogs.microsoft.com\/opensource\/2021\/05\/10\/making-ebpf-work-on-windows Retrieved","author":"Dave Thaler Poorna Gaddehosur","year":"2024","unstructured":"Poorna Gaddehosur Dave Thaler. 2021. Making eBPF work on Windows. https:\/\/cloudblogs.microsoft.com\/opensource\/2021\/05\/10\/making-ebpf-work-on-windows Retrieved March 1, 2024 from"},{"key":"e_1_3_2_1_6_1","volume-title":"Differential Testing of Cross Deep Learning Framework APIs: Revealing Inconsistencies and Vulnerabilities. In 32nd USENIX Security Symposium (USENIX Security 23)","author":"Deng Zizhuang","year":"2023","unstructured":"Zizhuang Deng, Guozhu Meng, Kai Chen, Tong Liu, Lu Xiang, and Chunyang Chen. 2023. Differential Testing of Cross Deep Learning Framework APIs: Revealing Inconsistencies and Vulnerabilities. In 32nd USENIX Security Symposium (USENIX Security 23). 7393--7410."},{"key":"e_1_3_2_1_7_1","unstructured":"Andrey Konovalov. Dmitry Vyukov. 2024. Syzkaller: an unsupervised coverage-guided kernel fuzzer. https:\/\/github.com\/google\/syzkaller"},{"key":"e_1_3_2_1_8_1","doi-asserted-by":"publisher","DOI":"10.1145\/3314221.3314590"},{"key":"e_1_3_2_1_9_1","unstructured":"Google. 2024. Buzzer - An eBPF Fuzzer toolchain. https:\/\/github.com\/google\/buzzer"},{"key":"e_1_3_2_1_10_1","doi-asserted-by":"publisher","DOI":"10.1145\/2661136.2661157"},{"key":"e_1_3_2_1_11_1","volume-title":"BRF: eBPF Runtime Fuzzer. arXiv preprint arXiv:2305.08782","author":"Hung Hsin-Wei","year":"2023","unstructured":"Hsin-Wei Hung and Ardalan Amiri Sani. 2023. BRF: eBPF Runtime Fuzzer. arXiv preprint arXiv:2305.08782 (2023)."},{"key":"e_1_3_2_1_12_1","doi-asserted-by":"publisher","DOI":"10.1145\/3503222.3507736"},{"key":"e_1_3_2_1_13_1","unstructured":"Linux kernel. 2024. eBPF verifier ? The Linux Kernel documentation."},{"key":"e_1_3_2_1_14_1","doi-asserted-by":"publisher","DOI":"10.1109\/ACCESS.2021.3108801"},{"key":"e_1_3_2_1_15_1","doi-asserted-by":"publisher","DOI":"10.1109\/ICC45041.2023.10278676"},{"key":"e_1_3_2_1_16_1","first-page":"100","article-title":"Differential testing for software","volume":"10","author":"McKeeman William M","year":"1998","unstructured":"William M McKeeman. 1998. Differential testing for software. Digital Technical Journal, Vol. 10, 1 (1998), 100--107.","journal-title":"Digital Technical Journal"},{"key":"e_1_3_2_1_17_1","unstructured":"Microsoft. 2024. eBPF implementation that runs on top of Windows. https:\/\/github.com\/microsoft\/ebpf-for-windows"},{"key":"e_1_3_2_1_18_1","unstructured":"Microsoft. 2024. Microsoft Security Response Center. https:\/\/msrc.microsoft.com"},{"key":"e_1_3_2_1_19_1","unstructured":"Microsoft. 2024. microsoft\/retina: eBPF distributed networking observability tool for Kubernetes."},{"key":"e_1_3_2_1_20_1","unstructured":"Microsoft. 2024 d. Windows eBPF project fuzzer. https:\/\/github.com\/microsoft\/ebpf-for-windows\/tree\/b9d6cb6b7edcc5314413d866a63d36ebc41ab14d\/tests\/libfuzzer"},{"key":"e_1_3_2_1_21_1","volume-title":"https:\/\/cve.mitre.org\/cgi-bin\/cvename.cgi?name=CVE-2020--8835 Retrieved","author":"MITRE.","year":"2024","unstructured":"MITRE. 2020. CVE-2020--8835. https:\/\/cve.mitre.org\/cgi-bin\/cvename.cgi?name=CVE-2020--8835 Retrieved March 1, 2024 from"},{"key":"e_1_3_2_1_22_1","volume-title":"https:\/\/cve.mitre.org\/cgi-bin\/cvename.cgi?name=CVE-2022--23066 Retrieved","author":"MITRE.","year":"2024","unstructured":"MITRE. 2022. CVE-2022--23066. https:\/\/cve.mitre.org\/cgi-bin\/cvename.cgi?name=CVE-2022--23066 Retrieved March 1, 2024 from"},{"key":"e_1_3_2_1_23_1","volume-title":"https:\/\/cve.mitre.org\/cgi-bin\/cvename.cgi?name=CVE-2023--2163 Retrieved","author":"MITRE.","year":"2024","unstructured":"MITRE. 2023. CVE - CVE-2023--2163. https:\/\/cve.mitre.org\/cgi-bin\/cvename.cgi?name=CVE-2023--2163 Retrieved March 1, 2024 from"},{"key":"e_1_3_2_1_24_1","volume-title":"https:\/\/cve.mitre.org\/cgi-bin\/cvename.cgi?name=2021--46102 Retrieved","author":"MITRE.","year":"2024","unstructured":"MITRE. 2024. CVE - CVE-2021--46102. https:\/\/cve.mitre.org\/cgi-bin\/cvename.cgi?name=2021--46102 Retrieved March 1, 2024 from"},{"key":"e_1_3_2_1_25_1","volume-title":"https:\/\/cve.mitre.org\/cgi-bin\/cvename.cgi?name=CVE-2024--26588 Retrieved","author":"MITRE.","year":"2024","unstructured":"MITRE. 2024. CVE - CVE-2024--26588. https:\/\/cve.mitre.org\/cgi-bin\/cvename.cgi?name=CVE-2024--26588 Retrieved March 1, 2024 from"},{"key":"e_1_3_2_1_26_1","doi-asserted-by":"publisher","DOI":"10.1145\/3341301.3359641"},{"key":"e_1_3_2_1_27_1","volume-title":"14th USENIX Symposium on Operating Systems Design and Implementation (OSDI 20)","author":"Nelson Luke","year":"2020","unstructured":"Luke Nelson, Jacob Van Geffen, Emina Torlak, and Xi Wang. 2020. Specification and verification in the field: Applying formal methods to BPF just-in-time compilers in the linux kernel. In 14th USENIX Symposium on Operating Systems Design and Implementation (OSDI 20). 41--61."},{"key":"e_1_3_2_1_28_1","volume-title":"Fuzzing the Berkeley Packet Filter","author":"Nilsen Benjamin Curt","unstructured":"Benjamin Curt Nilsen. 2020. Fuzzing the Berkeley Packet Filter. University of California, Davis."},{"key":"e_1_3_2_1_29_1","volume-title":"GLeeFuzz: Fuzzing WebGL Through Error Message Guided Mutation. In 32nd USENIX Security Symposium (USENIX Security 23)","author":"Peng Hui","year":"2023","unstructured":"Hui Peng, Zhihao Yao, Ardalan Amiri Sani, Dave Jing Tian, and Mathias Payer. 2023. GLeeFuzz: Fuzzing WebGL Through Error Message Guided Mutation. In 32nd USENIX Security Symposium (USENIX Security 23). 1883--1899."},{"key":"e_1_3_2_1_30_1","unstructured":"IO Visor Project. 2019. eBPF fuzzing framework based on libfuzzer and clang sanitizer. https:\/\/github.com\/iovisor\/bpf-fuzzer"},{"key":"e_1_3_2_1_31_1","unstructured":"IO Visor Project. 2024. uBPF issue list. https:\/\/github.com\/iovisor\/ubpf\/issues"},{"key":"e_1_3_2_1_32_1","unstructured":"IO Visor Project. 2024. Userspace eBPF VM. https:\/\/github.com\/iovisor\/ubpf"},{"key":"e_1_3_2_1_33_1","unstructured":"qmonnet. 2024. rBPF issues list. https:\/\/github.com\/qmonnet\/rbpf\/issues"},{"key":"e_1_3_2_1_34_1","unstructured":"Qmonnet. 2024. Rust Virtual Machine and Jit Compiler for eBPF programs. https:\/\/github.com\/qmonnet\/rbpf"},{"key":"e_1_3_2_1_35_1","unstructured":"Simon Scannell. 2021. Fuzzing for eBPF JIT bugs in the Linux kernel. https:\/\/scannell.io\/posts\/ebpf-fuzzing"},{"key":"e_1_3_2_1_36_1","unstructured":"Konstantin Serebryany Derek Bruening Alexander Potapenko and Dmitriy Vyukov. 2012. AddressSanitizer: A fast address sanity checker. In 2012 USENIX annual technical conference (USENIX ATC 12). 309--318."},{"key":"e_1_3_2_1_37_1","unstructured":"Solana. 2024. Solana rBPF issues list. https:\/\/github.com\/solana-labs\/rbpf\/issues"},{"key":"e_1_3_2_1_38_1","unstructured":"Solana. 2024. Solana rBPF project fuzzer. https:\/\/github.com\/solana-labs\/rbpf\/blob\/f3758ecee89198433422f751beee7f0f52dbcd55\/src\/fuzz.rs"},{"key":"e_1_3_2_1_39_1","unstructured":"Solana. 2024. Solana Security Advisories. https:\/\/github.com\/solana-labs\/solana\/security\/advisories"},{"key":"e_1_3_2_1_40_1","doi-asserted-by":"publisher","DOI":"10.1145\/504311.504296"},{"key":"e_1_3_2_1_41_1","doi-asserted-by":"crossref","unstructured":"Hao Sun Yiru Xu Jianzhong Liu Yuheng Shen Nan Guan and Yu Jiang. 2024. Finding Correctness Bugs in eBPF Verifier with Structured and Sanitized Program. (2024).","DOI":"10.1145\/3627703.3629562"},{"key":"e_1_3_2_1_42_1","unstructured":"The Clang Team. 2024. Undefined Behavior Sanitizer. https:\/\/clang.llvm.org\/docs\/UndefinedBehaviorSanitizer.html"},{"key":"e_1_3_2_1_43_1","unstructured":"V8 Team. 2023. V8's Fastest Optimizing JIT. https:\/\/v8.dev\/blog\/maglev"},{"key":"e_1_3_2_1_44_1","unstructured":"Vbpf. 2024. eBPF verifier based on abstract interpretation. https:\/\/github.com\/vbpf\/ebpf-verifier"},{"key":"e_1_3_2_1_45_1","unstructured":"vbpf. 2024. PREVAIL eBPF verifier issue list. https:\/\/github.com\/vbpf\/ebpf-verifier\/issues"},{"key":"e_1_3_2_1_46_1","doi-asserted-by":"publisher","DOI":"10.1145\/3371038"},{"key":"e_1_3_2_1_47_1","doi-asserted-by":"publisher","DOI":"10.1109\/CGO53902.2022.9741267"},{"key":"e_1_3_2_1_48_1","volume-title":"FuzzJIT:Oracle-Enhanced Fuzzing for JavaScript Engine JIT Compiler. In 32nd USENIX Security Symposium (USENIX Security 23)","author":"Wang Junjie","year":"2023","unstructured":"Junjie Wang, Zhiyi Zhang, Shuang Liu, Xiaoning Du, and Junjie Chen. 2023. FuzzJIT:Oracle-Enhanced Fuzzing for JavaScript Engine JIT Compiler. In 32nd USENIX Security Symposium (USENIX Security 23). 1865--1882."},{"key":"e_1_3_2_1_49_1","volume-title":"Solana: A new architecture for a high performance blockchain v0. 8.13. Whitepaper","author":"Yakovenko Anatoly","year":"2018","unstructured":"Anatoly Yakovenko. 2018. Solana: A new architecture for a high performance blockchain v0. 8.13. Whitepaper (2018)."},{"key":"e_1_3_2_1_50_1","doi-asserted-by":"publisher","DOI":"10.1145\/3609021.3609307"},{"key":"e_1_3_2_1_51_1","doi-asserted-by":"publisher","DOI":"10.1145\/1993498.1993532"},{"key":"e_1_3_2_1_52_1","doi-asserted-by":"publisher","DOI":"10.1145\/3649854"},{"key":"e_1_3_2_1_53_1","volume-title":"16th USENIX Symposium on Operating Systems Design and Implementation (OSDI 22)","author":"Zhong Yuhong","year":"2022","unstructured":"Yuhong Zhong, Haoyu Li, Yu Jian Wu, Ioannis Zarkadas, Jeffrey Tao, Evan Mesterhazy, Michael Makris, Junfeng Yang, Amy Tai, Ryan Stutsman, and Asaf Cidon. 2022. XRP: In-Kernel Storage Functions with eBPF. In 16th USENIX Symposium on Operating Systems Design and Implementation (OSDI 22). USENIX Association, Carlsbad, CA, 375--393. https:\/\/www.usenix.org\/conference\/osdi22\/presentation\/zhong"},{"key":"e_1_3_2_1_54_1","volume-title":"WADIFF: A Differential Testing Framework for WebAssembly Runtimes. In 2023 38th IEEE\/ACM International Conference on Automated Software Engineering (ASE). IEEE, 939--950","author":"Zhou Shiyao","year":"2023","unstructured":"Shiyao Zhou, Muhui Jiang, Weimin Chen, Hao Zhou, Haoyu Wang, and Xiapu Luo. 2023. WADIFF: A Differential Testing Framework for WebAssembly Runtimes. In 2023 38th IEEE\/ACM International Conference on Automated Software Engineering (ASE). IEEE, 939--950."}],"event":{"name":"CCS '24: ACM SIGSAC Conference on Computer and Communications Security","location":"Salt Lake City UT USA","acronym":"CCS '24","sponsor":["SIGSAC ACM Special Interest Group on Security, Audit, and Control"]},"container-title":["Proceedings of the 2024 on ACM SIGSAC Conference on Computer and Communications Security"],"original-title":[],"link":[{"URL":"https:\/\/dl.acm.org\/doi\/10.1145\/3658644.3690237","content-type":"unspecified","content-version":"vor","intended-application":"text-mining"},{"URL":"https:\/\/dl.acm.org\/doi\/pdf\/10.1145\/3658644.3690237","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2025,8,22]],"date-time":"2025-08-22T06:07:24Z","timestamp":1755842844000},"score":1,"resource":{"primary":{"URL":"https:\/\/dl.acm.org\/doi\/10.1145\/3658644.3690237"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2024,12,2]]},"references-count":54,"alternative-id":["10.1145\/3658644.3690237","10.1145\/3658644"],"URL":"https:\/\/doi.org\/10.1145\/3658644.3690237","relation":{},"subject":[],"published":{"date-parts":[[2024,12,2]]},"assertion":[{"value":"2024-12-09","order":3,"name":"published","label":"Published","group":{"name":"publication_history","label":"Publication History"}}]}}