{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2025,8,2]],"date-time":"2025-08-02T19:01:46Z","timestamp":1754161306078,"version":"3.41.2"},"publisher-location":"New York, NY, USA","reference-count":33,"publisher":"ACM","funder":[{"DOI":"10.13039\/501100000923","name":"Australian Research Council","doi-asserted-by":"publisher","award":["FT240100269"],"award-info":[{"award-number":["FT240100269"]}],"id":[{"id":"10.13039\/501100000923","id-type":"DOI","asserted-by":"publisher"}]},{"name":"China National Natural Science Foundation","award":["62372330"],"award-info":[{"award-number":["62372330"]}]}],"content-domain":{"domain":["dl.acm.org"],"crossmark-restriction":true},"short-container-title":[],"published-print":{"date-parts":[[2025,6,23]]},"DOI":"10.1145\/3696630.3728546","type":"proceedings-article","created":{"date-parts":[[2025,7,28]],"date-time":"2025-07-28T19:08:09Z","timestamp":1753729689000},"page":"204-214","update-policy":"https:\/\/doi.org\/10.1145\/crossmark-policy","source":"Crossref","is-referenced-by-count":0,"title":["Grey-Box Fuzzing in Constrained Ultra-Large Systems: Lessons for SE Community"],"prefix":"10.1145","author":[{"ORCID":"https:\/\/orcid.org\/0009-0002-6484-3261","authenticated-orcid":false,"given":"Jiazhao","family":"Yu","sequence":"first","affiliation":[{"name":"Sun Yat-sen University, Guangzhou, China"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-3632-5339","authenticated-orcid":false,"given":"Yanlun","family":"Tu","sequence":"additional","affiliation":[{"name":"Ant Group, shanghai, China"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"ORCID":"https:\/\/orcid.org\/0009-0003-2455-4913","authenticated-orcid":false,"given":"Zhanlei","family":"Zhang","sequence":"additional","affiliation":[{"name":"Macquaire University, Sydney, Australia"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-7195-4472","authenticated-orcid":false,"given":"Tiehua","family":"Zhang","sequence":"additional","affiliation":[{"name":"Tongji University, shanghai, China"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"ORCID":"https:\/\/orcid.org\/0009-0001-0067-2929","authenticated-orcid":false,"given":"Cheng","family":"Xu","sequence":"additional","affiliation":[{"name":"Ant Group, shanghai, China"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-4714-7021","authenticated-orcid":false,"given":"Weigang","family":"Wu","sequence":"additional","affiliation":[{"name":"Sun Yat-sen University, guangzhou, China"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"ORCID":"https:\/\/orcid.org\/0000-0001-7335-7295","authenticated-orcid":false,"given":"Hong Jin","family":"Kang","sequence":"additional","affiliation":[{"name":"University of Sydney, sydney, Australia"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-2572-2355","authenticated-orcid":false,"given":"Xi","family":"Zheng","sequence":"additional","affiliation":[{"name":"Macquarie University, sydney, Australia"}],"role":[{"role":"author","vocabulary":"crossref"}]}],"member":"320","published-online":{"date-parts":[[2025,7,28]]},"reference":[{"key":"e_1_3_2_1_1_1","volume-title":"Announcing OSS-Fuzz: Continuous fuzzing for open source software. Google Testing Blog","author":"Aizatsky Mike","year":"2016","unstructured":"Mike Aizatsky, Kostya Serebryany, Oliver Chang, Abhishek Arya, and Meredith Whittaker. 2016. Announcing OSS-Fuzz: Continuous fuzzing for open source software. Google Testing Blog (2016)."},{"key":"e_1_3_2_1_2_1","unstructured":"Alibaba. 2025. fastjson2. https:\/\/github.com\/alibaba\/fastjson2."},{"key":"e_1_3_2_1_3_1","unstructured":"Alibaba. 2025. jvm-sandbox. https:\/\/github.com\/alibaba\/jvm-sandbox."},{"key":"e_1_3_2_1_4_1","doi-asserted-by":"publisher","DOI":"10.1145\/3652157"},{"key":"e_1_3_2_1_5_1","doi-asserted-by":"crossref","first-page":"4","DOI":"10.1007\/s10515-024-00478-1","article-title":"Tool report: EvoMaster\u2014black and white box search-based fuzzing for REST, GraphQL and RPC APIs","volume":"32","author":"Arcuri Andrea","year":"2025","unstructured":"Andrea Arcuri, Man Zhang, Susruthan Seran, Juan Pablo Galeotti, Amid Golmohammadi, Onur Duman, Agustina Aldasoro, and Hernan Ghianni. 2025. Tool report: EvoMaster\u2014black and white box search-based fuzzing for REST, GraphQL and RPC APIs. Automated Software Engineering 32, 1 (2025), 4.","journal-title":"Automated Software Engineering"},{"key":"e_1_3_2_1_6_1","volume-title":"Proceedings of the 2016 ACM SIGSAC Conference on Computer and Communications Security","author":"B\u00f6hme Marcel","year":"2016","unstructured":"Marcel B\u00f6hme, Van-Thuan Pham, and Abhik Roychoudhury. 2016. Coverage-based Greybox Fuzzing as Markov Chain. In Proceedings of the 2016 ACM SIGSAC Conference on Computer and Communications Security, Vienna, Austria, October 24\u201328, 2016, Edgar R. Weippl, Stefan Katzenbeisser, Christopher Kruegel, Andrew C. Myers, and Shai Halevi (Eds.). ACM, 1032\u20131043."},{"key":"e_1_3_2_1_7_1","volume-title":"Proceedings of the 46th International Conference on Software Engineering: Software Engineering in Practice. 216\u2013227","author":"Di Peng","year":"2024","unstructured":"Peng Di, Bingchang Liu, and Yiyi Gao. 2024. MicroFuzz: An Efficient Fuzzing Framework for Microservices. In Proceedings of the 46th International Conference on Software Engineering: Software Engineering in Practice. 216\u2013227."},{"volume-title":"Companion Proceedings of the 32nd ACM International Conference on the Foundations of Software Engineering. 10\u201320.","author":"Ding Xuanwen","key":"e_1_3_2_1_8_1","unstructured":"Xuanwen Ding, Qingshun Wang, Dan Liu, Lihua Xu, Jun Xiao, Bojun Zhang, Xue Li, Liang Dou, Liang He, and Tao Xie. 2024. FinHunter: Improved Search-Based Test Generation for Structural Testing of FinTech Systems. In Companion Proceedings of the 32nd ACM International Conference on the Foundations of Software Engineering. 10\u201320."},{"key":"e_1_3_2_1_9_1","volume-title":"Proceedings of the 14th USENIX Conference on Offensive Technologies (WOOT'20)","author":"Fioraldi Andrea","year":"2020","unstructured":"Andrea Fioraldi, Dominik Maier, Heiko Ei\u00dffeldt, and Marc Heuse. 2020. AFL++: combining incremental steps of fuzzing research. In Proceedings of the 14th USENIX Conference on Offensive Technologies (WOOT'20). USENIX Association, USA, Article 10, 1 pages."},{"key":"e_1_3_2_1_10_1","unstructured":"Ant Group. 2025. SOFASTACK. https:\/\/github.com\/sofastack."},{"key":"e_1_3_2_1_11_1","volume-title":"Robust Black-box Testing of Deep Neural Networks using Co-Domain Coverage. arXiv preprint arXiv:2408.06766","author":"Gupta Aishwarya","year":"2024","unstructured":"Aishwarya Gupta, Indranil Saha, and Piyush Rai. 2024. Robust Black-box Testing of Deep Neural Networks using Co-Domain Coverage. arXiv preprint arXiv:2408.06766 (2024)."},{"key":"e_1_3_2_1_12_1","volume-title":"Search-Based White-Box Fuzzing of Web Frontend Applications. In 2024 IEEE 35th International Symposium on Software Reliability Engineering Workshops (ISSREW). 95\u201398","author":"Kertusha Iva","year":"2024","unstructured":"Iva Kertusha. 2024. Search-Based White-Box Fuzzing of Web Frontend Applications. In 2024 IEEE 35th International Symposium on Software Reliability Engineering Workshops (ISSREW). 95\u201398. 10.1109\/ISSREW63542.2024.00054"},{"key":"e_1_3_2_1_13_1","volume-title":"2018 IEEE 25th International Conference on Software Analysis, Evolution and Reengineering (SANER). IEEE, 562\u2013566","author":"Liang Jie","year":"2018","unstructured":"Jie Liang, Mingzhe Wang, Yuanliang Chen, Yu Jiang, and Renwei Zhang. 2018. Fuzz testing in practice: Obstacles and solutions. In 2018 IEEE 25th International Conference on Software Analysis, Evolution and Reengineering (SANER). IEEE, 562\u2013566."},{"key":"e_1_3_2_1_14_1","doi-asserted-by":"crossref","first-page":"1825","DOI":"10.1109\/JPROC.2020.2993293","article-title":"Software Vulnerability Detection Using Deep Neural Networks: A Survey","volume":"108","author":"Lin Guanjun","year":"2020","unstructured":"Guanjun Lin, Sheng Wen, Qing-Long Han, Jun Zhang, and Yang Xiang. 2020. Software Vulnerability Detection Using Deep Neural Networks: A Survey. Proc. IEEE 108, 10 (2020), 1825\u20131848.","journal-title":"Proc. IEEE"},{"key":"e_1_3_2_1_15_1","volume-title":"20th Annual Computer Security Applications Conference. IEEE, 2\u201313","author":"Lipner Steve","year":"2004","unstructured":"Steve Lipner. 2004. The trustworthy computing security development lifecycle. In 20th Annual Computer Security Applications Conference. IEEE, 2\u201313."},{"key":"e_1_3_2_1_16_1","doi-asserted-by":"publisher","DOI":"10.1016\/j.infsof.2024.107640"},{"key":"e_1_3_2_1_17_1","doi-asserted-by":"crossref","first-page":"32","DOI":"10.1145\/96267.96279","article-title":"An Empirical Study of the Reliability of UNIX","volume":"33","author":"Miller Barton P.","year":"1990","unstructured":"Barton P. Miller, Lars Fredriksen, and Bryan So. 1990. An Empirical Study of the Reliability of UNIX Utilities. Commun. ACM 33, 12 (1990), 32\u201344.","journal-title":"Utilities. Commun. ACM"},{"key":"e_1_3_2_1_18_1","volume-title":"Proceedings of the 44th International Conference on Software Engineering. 249\u2013261","author":"Nguyen Hoang Lam","year":"2022","unstructured":"Hoang Lam Nguyen and Lars Grunske. 2022. Bedivfuzz: Integrating behavioral diversity into generator-based fuzzing. In Proceedings of the 44th International Conference on Software Engineering. 249\u2013261."},{"key":"e_1_3_2_1_19_1","volume-title":"Proceedings of the 28th ACM SIGSOFT International Symposium on Software Testing and Analysis","author":"Padhye Rohan","year":"2019","unstructured":"Rohan Padhye, Caroline Lemieux, and Koushik Sen. 2019. JQF: coverage-guided property-based testing in Java. In Proceedings of the 28th ACM SIGSOFT International Symposium on Software Testing and Analysis (Beijing, China) (ISSTA 2019). Association for Computing Machinery, New York, NY, USA, 398\u2013401. 10.1145\/3293882.3339002"},{"key":"e_1_3_2_1_20_1","volume-title":"Proceedings of the 28th ACM SIGSOFT International Symposium on Software Testing and Analysis","author":"Padhye Rohan","year":"2019","unstructured":"Rohan Padhye, Caroline Lemieux, Koushik Sen, Mike Papadakis, and Yves Le Traon. 2019. Semantic fuzzing with zest. In Proceedings of the 28th ACM SIGSOFT International Symposium on Software Testing and Analysis (Beijing, China) (ISSTA 2019). Association for Computing Machinery, New York, NY, USA, 329\u2013340. 10.1145\/3293882.3330576"},{"key":"e_1_3_2_1_21_1","unstructured":"Perforce. 2025. JRebel. https:\/\/www.jrebel.com\/blog\/java-hotswap-guide."},{"key":"e_1_3_2_1_22_1","unstructured":"LLVM Project. 2025. libFuzzer. https:\/\/llvm.org\/docs\/LibFuzzer.html."},{"key":"e_1_3_2_1_23_1","volume-title":"Proceedings of the ACM\/IEEE 42nd International Conference on Software Engineering. 1410\u20131421","author":"Reddy Sameer","year":"2020","unstructured":"Sameer Reddy, Caroline Lemieux, Rohan Padhye, and Koushik Sen. 2020. Quickly generating diverse valid test inputs with reinforcement learning. In Proceedings of the ACM\/IEEE 42nd International Conference on Software Engineering. 1410\u20131421."},{"key":"e_1_3_2_1_24_1","unstructured":"Miles Str\u00e4ssle. 2024. Systematic Identification of Vulnerabilities in C and C++ Source Code through Fuzzing. Ph. D. Dissertation. OST Ostschweizer Fachhochschule."},{"key":"e_1_3_2_1_25_1","unstructured":"VMware. 2025. Spring. https:\/\/spring.io\/."},{"key":"e_1_3_2_1_26_1","first-page":"10","volume-title":"Proc. ACM Program. Lang. 8, OOPSLA2, Article 296 (Oct.","author":"Yang Chenyuan","year":"2024","unstructured":"Chenyuan Yang, Yinlin Deng, Runyu Lu, Jiayi Yao, Jiawei Liu, Reyhaneh Jabbarvand, and Lingming Zhang. 2024. WhiteFox: White-Box Compiler Fuzzing Empowered by Large Language Models. Proc. ACM Program. Lang. 8, OOPSLA2, Article 296 (Oct. 2024), 27 pages. 10.1145\/3689736"},{"key":"e_1_3_2_1_27_1","first-page":"1","article-title":"Fuzzing of embedded systems: A survey","volume":"55","author":"Yun Joobeom","year":"2022","unstructured":"Joobeom Yun, Fayozbek Rustamov, Juhwan Kim, and Youngjoo Shin. 2022. Fuzzing of embedded systems: A survey. Comput. Surveys 55, 7 (2022), 1\u201333.","journal-title":"Comput. Surveys"},{"key":"e_1_3_2_1_28_1","unstructured":"Micha\u0142 Zalewski. 2025. American Fuzzing Lop (AFL). https:\/\/lcamtuf.coredump.cx\/afl\/."},{"key":"e_1_3_2_1_29_1","volume-title":"Your Fix Is My Exploit: Enabling Comprehensive DL Library API Fuzzing with Large Language Models. In 2025 IEEE\/ACM 47th International Conference on Software Engineering (ICSE). IEEE Computer Society","author":"Zhang Kunpeng","year":"2025","unstructured":"Kunpeng Zhang, Shuai Wang, Jitao Han, Xiaogang Zhu, Xian Li, Shaohua Wang, and Sheng Wen. 2025. Your Fix Is My Exploit: Enabling Comprehensive DL Library API Fuzzing with Large Language Models. In 2025 IEEE\/ACM 47th International Conference on Software Engineering (ICSE). IEEE Computer Society, Los Alamitos, CA, USA, 508\u2013520. 10.1109\/ICSE55347.2025.00041"},{"key":"e_1_3_2_1_30_1","volume-title":"Proceedings of the 39th IEEE\/ACM International Conference on Automated Software Engineering","author":"Zhang Man","year":"2024","unstructured":"Man Zhang, Andrea Arcuri, Piyun Teng, Kaiming Xue, and Wenhao Wang. 2024. Seeding and Mocking in White-Box Fuzzing Enterprise RPC APIs: An Industrial Case Study. In Proceedings of the 39th IEEE\/ACM International Conference on Automated Software Engineering (Sacramento, CA, USA) (ASE '24). Association for Computing Machinery, New York, NY, USA, 2024\u20132034. 10.1145\/3691620.3695265"},{"key":"e_1_3_2_1_31_1","volume-title":"2021 IEEE\/ACM 43rd International Conference on Software Engineering: Software Engineering in Practice (ICSE-SEIP). IEEE, 318\u2013327","author":"Zhang Mingrui","year":"2021","unstructured":"Mingrui Zhang, Jianzhong Liu, Fuchen Ma, Huafeng Zhang, and Yu Jiang. 2021. Intelligen: Automatic driver synthesis for fuzz testing. In 2021 IEEE\/ACM 43rd International Conference on Software Engineering: Software Engineering in Practice (ICSE-SEIP). IEEE, 318\u2013327."},{"key":"e_1_3_2_1_32_1","volume-title":"Proceedings of the 26th Symposium on Operating Systems Principles","author":"Zhao Xu","year":"2017","unstructured":"Xu Zhao, Kirk Rodrigues, Yu Luo, Michael Stumm, Ding Yuan, and Yuanyuan Zhou. 2017. Log20: Fully Automated Optimal Placement of Log Printing Statements under Specified Overhead Threshold. In Proceedings of the 26th Symposium on Operating Systems Principles (Shanghai, China) (SOSP '17). Association for Computing Machinery, New York, NY, USA, 565\u2013581. 10.1145\/3132747.3132778"},{"key":"e_1_3_2_1_33_1","volume-title":"Fuzzing: A Survey for Roadmap. ACM Comput. Surv. 54, 11s","author":"Zhu Xiaogang","year":"2022","unstructured":"Xiaogang Zhu, Sheng Wen, Seyit Camtepe, and Yang Xiang. 2022. Fuzzing: A Survey for Roadmap. ACM Comput. Surv. 54, 11s (2022), 230:1\u2013230:36."}],"event":{"name":"FSE Companion '25: 33rd ACM International Conference on the Foundations of Software Engineering","sponsor":["SIGSOFT ACM Special Interest Group on Software Engineering"],"location":"Clarion Hotel Trondheim Trondheim Norway","acronym":"FSE Companion '25"},"container-title":["Proceedings of the 33rd ACM International Conference on the Foundations of Software Engineering"],"original-title":[],"link":[{"URL":"https:\/\/dl.acm.org\/doi\/pdf\/10.1145\/3696630.3728546","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2025,7,28]],"date-time":"2025-07-28T19:15:08Z","timestamp":1753730108000},"score":1,"resource":{"primary":{"URL":"https:\/\/dl.acm.org\/doi\/10.1145\/3696630.3728546"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2025,6,23]]},"references-count":33,"alternative-id":["10.1145\/3696630.3728546","10.1145\/3696630"],"URL":"https:\/\/doi.org\/10.1145\/3696630.3728546","relation":{},"subject":[],"published":{"date-parts":[[2025,6,23]]},"assertion":[{"value":"2025-07-28","order":3,"name":"published","label":"Published","group":{"name":"publication_history","label":"Publication History"}}]}}