{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,10,8]],"date-time":"2026-10-08T11:50:14Z","timestamp":1791460214120,"version":"4.3.4"},"reference-count":49,"publisher":"Springer Science and Business Media LLC","issue":"1","license":[{"start":{"date-parts":[[2018,6,5]],"date-time":"2018-06-05T00:00:00Z","timestamp":1528156800000},"content-version":"tdm","delay-in-days":0,"URL":"https:\/\/creativecommons.org\/licenses\/by\/4.0"}],"content-domain":{"domain":["link.springer.com"],"crossmark-restriction":false},"short-container-title":["Cybersecur"],"published-print":{"date-parts":[[2018,12]]},"DOI":"10.1186\/s42400-018-0002-y","type":"journal-article","created":{"date-parts":[[2018,5,28]],"date-time":"2018-05-28T22:00:11Z","timestamp":1527544811000},"update-policy":"https:\/\/doi.org\/10.1007\/springer_crossmark_policy","source":"Crossref","is-referenced-by-count":267,"title":["Fuzzing: a survey"],"prefix":"10.1186","volume":"1","author":[{"given":"Jun","family":"Li","sequence":"first","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Bodong","family":"Zhao","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Chao","family":"Zhang","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]}],"member":"297","published-online":{"date-parts":[[2018,6,5]]},"reference":[{"key":"2_CR1","unstructured":"Aldeid (2013) Browser fuzzer 3. \n                    https:\/\/www.aldeid.com\/wiki\/Bf3\n                    \n                  . Accessed 25 Dec 2017."},{"key":"2_CR2","unstructured":"Amini, P (2017) Sulley fuzzing framework. \n                    https:\/\/github.com\/OpenRCE\/sulley\n                    \n                  . Accessed 25 Dec 2017."},{"key":"2_CR3","doi-asserted-by":"publisher","first-page":"343","DOI":"10.1007\/11836810_25","volume-title":"International Conference on Information Security","author":"G Banks","year":"2006","unstructured":"Banks, G, Cova M, Felmetsger V, Almeroth K, Kemmerer R, Vigna G (2006) Snooze: toward a stateful network protocol fuzzer In: International Conference on Information Security, 343\u2013358.. Springer, Berlin."},{"key":"2_CR4","doi-asserted-by":"publisher","first-page":"2329","DOI":"10.1145\/3133956.3134020","volume-title":"Proceeding CCS \u201917 Proceedings of the 2017 ACM SIGSAC Conference on Computer and Communications Security","author":"M B\u00f6hme","year":"2017","unstructured":"B\u00f6hme, M, Pham V-T, Nguyen M-D, Roychoudhury A (2017) Directed greybox fuzzing In: Proceeding CCS \u201917 Proceedings of the 2017 ACM SIGSAC Conference on Computer and Communications Security, 2329\u20132344.. ACM, New York. \n                    https:\/\/doi.org\/10.1145\/3133956.3134020\n                    \n                  ."},{"key":"2_CR5","doi-asserted-by":"crossref","unstructured":"B\u00f6hme, M, Pham VT, Roychoudhury A (2017) Coverage-based greybox fuzzing as markov chain In: Proceedings of the 2016 ACM SIGSAC Conference on Computer and Communications Security, 1032\u20131043.. ACM.","DOI":"10.1145\/2976749.2978428"},{"key":"2_CR6","unstructured":"Bowne, S (2015) Fuzzing with spike. \n                    https:\/\/samsclass.info\/127\/proj\/p18-spike.htm\n                    \n                  . Accessed 25 Dec 2017."},{"key":"2_CR7","doi-asserted-by":"publisher","first-page":"380","DOI":"10.1109\/SP.2012.31","volume-title":"Security and Privacy (SP) 2012 IEEE Symposium on","author":"SK Cha","year":"2012","unstructured":"Cha, SK, Avgerinos T, Rebert A, Brumley D (2012) Unleashing mayhem on binary code In: Security and Privacy (SP) 2012 IEEE Symposium on, 380\u2013394.. IEEE, San Francisco. \n                    https:\/\/doi.org\/10.1109\/SP.2012.31\n                    \n                  ."},{"key":"2_CR8","first-page":"193","volume-title":"Proceeding SEC\u201915 Proceedings of the 24th USENIX Conference on Security Symposium","author":"J De Ruiter","year":"2015","unstructured":"De Ruiter, J, Poll E (2015) Protocol state fuzzing of tls implementations In: Proceeding SEC\u201915 Proceedings of the 24th USENIX Conference on Security Symposium, 193\u2013206.. USENIX Association, Berkeley."},{"issue":"1","key":"2_CR9","doi-asserted-by":"publisher","first-page":"20","DOI":"10.1145\/2090147.2094081","volume":"10","author":"P Godefroid","year":"2012","unstructured":"Godefroid, P, Levin MY, Molnar D (2012) Sage: whitebox fuzzing for security testing. Queue 10(1):20.","journal-title":"Queue"},{"key":"2_CR10","first-page":"50","volume-title":"Proceeding ASE 2017 Proceedings of the 32nd IEEE\/ACM International Conference on Automated Software Engineering","author":"P Godefroid","year":"2017","unstructured":"Godefroid, P, Peleg H, Singh R (2017) Learn & fuzz: Machine learning for input fuzzing In: Proceeding ASE 2017 Proceedings of the 32nd IEEE\/ACM International Conference on Automated Software Engineering, 50\u201359.. IEEE Press, Piscataway."},{"issue":"8","key":"2_CR11","first-page":"239","volume":"10","author":"S Gorbunov","year":"2010","unstructured":"Gorbunov, S, Rosenbloom A (2010) Autofuzz: Automated network protocol fuzzing framework. IJCSNS 10(8):239.","journal-title":"IJCSNS"},{"key":"2_CR12","doi-asserted-by":"publisher","first-page":"2345","DOI":"10.1145\/3133956.3134103","volume-title":"Proceeding CCS \u201917 Proceedings of the 2017 ACM SIGSAC Conference on Computer and Communications Security","author":"H Han","year":"2017","unstructured":"Han, H, Cha SK (2017) Imf: Inferred model-based fuzzer In: Proceeding CCS \u201917 Proceedings of the 2017 ACM SIGSAC Conference on Computer and Communications Security, 2345\u20132358.. ACM, New York. \n                    https:\/\/doi.org\/10.1145\/3133956.3134103\n                    \n                  ."},{"key":"2_CR13","unstructured":"Hertz, J (2015) Triforceafl. \n                    https:\/\/github.com\/nccgroup\/TriforceAFL\n                    \n                  . Accessed 25 Dec 2017."},{"key":"2_CR14","unstructured":"James, R (2013) Processor tracing. \n                    https:\/\/software.intel.com\/en-us\/blogs\/2013\/09\/18\/processor-tracing\n                    \n                  . Accessed 25 Dec 2017."},{"key":"2_CR15","unstructured":"Jones, D (2010) trinity. \n                    https:\/\/github.com\/kernelslacker\/trinity\n                    \n                  . Accessed 25 Dec 2017."},{"issue":"7","key":"2_CR16","doi-asserted-by":"publisher","first-page":"385","DOI":"10.1145\/360248.360252","volume":"19","author":"JC King","year":"1976","unstructured":"King, JC (1976) Symbolic execution and program testing. Commun ACM 19(7):385\u2013394.","journal-title":"Commun ACM"},{"key":"2_CR17","unstructured":"lcamtuf (2014) Fuzzing random programs without execve(). \n                    https:\/\/lcamtuf.blogspot.jp\/2014\/10\/fuzzing-binaries-without-execve.html\n                    \n                  . Accessed 25 Dec 2017."},{"key":"2_CR18","unstructured":"libfuzzer (2017) A library for coverage-guided fuzz testing. \n                    https:\/\/llvm.org\/docs\/LibFuzzer.html\n                    \n                  . Accessed 25 Dec 2017."},{"key":"2_CR19","doi-asserted-by":"publisher","first-page":"152","DOI":"10.1109\/MINES.2012.202","volume-title":"Multimedia Information Networking and Security (MINES), 2012 Fourth International Conference on","author":"B Liu","year":"2012","unstructured":"Liu, B, Shi L, Cai Z, Li M (2012) Software vulnerability discovery techniques: A survey In: Multimedia Information Networking and Security (MINES), 2012 Fourth International Conference on, 152\u2013156.. IEEE, Nanjing. \n                    https:\/\/doi.org\/10.1109\/MINES.2012.202\n                    \n                  ."},{"key":"2_CR20","first-page":"190","volume-title":"Acm sigplan notices, volume 40","author":"C-K Luk","year":"2005","unstructured":"Luk, C-K, Cohn R, Muth R, Patil H, Klauser A, Lowney G, Wallace S, Reddi VJ, Hazelwood K (2005) Pin: building customized program analysis tools with dynamic instrumentation In: Acm sigplan notices, volume 40, 190\u2013200.. ACM, Chicago."},{"key":"2_CR21","unstructured":"Nichols, N, Raugas M, Jasper R, Hilliard N (2017) Faster fuzzing: Reinitialization with deep neural models. arXiv preprint arXiv:1711.02807."},{"key":"2_CR22","unstructured":"PeachTech (2017) Peach. \n                    https:\/\/www.peach.tech\/\n                    \n                  . Accessed 25 Dec 2017."},{"key":"2_CR23","doi-asserted-by":"publisher","unstructured":"Petsios, T, Zhao J, Keromytis AD, Jana S (2017) Slowfuzz: Automated domain-independent detection of algorithmic complexity vulnerabilities In: Proceeding CCS \u201917 Proceedings of the 2017 ACM SIGSAC Conference on Computer and Communications Security, 2155\u20132168.. ACM, New York. \n                    https:\/\/doi.org\/10.1145\/3133956.3134073\n                    \n                  .","DOI":"10.1145\/3133956.3134073"},{"key":"2_CR24","unstructured":"Rajpal, M, Blum W, Singh R (2017) Not all bytes are equal: Neural byte sieve for fuzzing. arXiv preprint arXiv:1711.04596."},{"key":"2_CR25","doi-asserted-by":"crossref","unstructured":"Rawat, S, Jain V, Kumar A, Cojocar L, Giuffrida C, Bos H (2017) Vuzzer: Application-aware evolutionary fuzzing In: Proceedings of the Network and Distributed System Security Symposium (NDSS). \n                    https:\/\/www.vusec.net\/download\/?t=papers\/vuzzer_ndss17.pdf\n                    \n                  .","DOI":"10.14722\/ndss.2017.23404"},{"key":"2_CR26","first-page":"167","volume-title":"26th USENIX Security Symposium, USENIX Security 2017","author":"S Schumilo","year":"2017","unstructured":"Schumilo, S, Aschermann C, Gawlik R, Schinzel S, Holz T (2017) kAFL: Hardware-assisted feedback fuzzing for OS kernels. In: Kirda E Ristenpart T (eds)26th USENIX Security Symposium, USENIX Security 2017, 167\u2013182.. USENIX Association, Vancouver."},{"key":"2_CR27","first-page":"309","volume-title":"Proceeding USENIX ATC\u201912 Proceedings of the 2012 USENIX conference on Annual Technical Conference","author":"K Serebryany","year":"2012","unstructured":"Serebryany, K, Bruening D, Potapenko A, Vyukov D (2012) Addresssanitizer: A fast address sanity checker In: Proceeding USENIX ATC\u201912 Proceedings of the 2012 USENIX conference on Annual Technical Conference, 309\u2013318.. USENIX Association, Berkeley."},{"key":"2_CR28","doi-asserted-by":"crossref","unstructured":"Serebryany, K, Iskhodzhanov T (2009) Threadsanitizer: data race detection in practice In: Proceedings of the Workshop on Binary Instrumentation and Applications, 62\u201371.","DOI":"10.1145\/1791194.1791203"},{"key":"2_CR29","doi-asserted-by":"crossref","unstructured":"Shirey, RW (2000) Internet security glossary. \n                    https:\/\/tools.ietf.org\/html\/rfc2828\n                    \n                  . Accessed 25 Dec 2017.","DOI":"10.17487\/rfc2828"},{"key":"2_CR30","unstructured":"Stephenfewer (2016) Grinder. \n                    https:\/\/github.com\/stephenfewer\/grinder\n                    \n                  . Accessed 25 Dec 2017."},{"key":"2_CR31","doi-asserted-by":"crossref","unstructured":"Stephens, N, Grosen J, Salls C, Dutcher A, Wang R, Corbetta J, Shoshitaishvili Y, Kruegel C, Vigna G (2016) Driller: Augmenting fuzzing through selective symbolic execution In: NDSS, volume 16, 1\u201316, San Diego.","DOI":"10.14722\/ndss.2016.23368"},{"key":"2_CR32","volume-title":"Fuzzing: brute force vulnerability discovery","author":"M Sutton","year":"2007","unstructured":"Sutton, M, Greene A, Amini P (2007) Fuzzing: brute force vulnerability discovery. Pearson Education, Upper Saddle River."},{"key":"2_CR33","doi-asserted-by":"crossref","unstructured":"Takanen, A, Demott JD, Miller C (2008) Fuzzing for software security testing and quality assurance. Artech House.","DOI":"10.1016\/S1353-4858(08)70095-3"},{"key":"2_CR34","unstructured":"The Clang Team (2017) Dataflowsanitizer. \n                    https:\/\/clang.llvm.org\/docs\/DataFlowSanitizerDesign.html\n                    \n                  . Accessed 25 Dec 2017."},{"key":"2_CR35","unstructured":"The Clang Team (2017) Leaksanitizer. \n                    https:\/\/clang.llvm.org\/docs\/LeakSanitizer.html\n                    \n                  . Accessed 25 Dec 2017."},{"key":"2_CR36","unstructured":"Van Sprundel, I (2005) Fuzzing: Breaking software in an automated fashion. Decmember 8th."},{"key":"2_CR37","unstructured":"Vyukov, D (2015) Syzkaller. \n                    https:\/\/github.com\/google\/syzkaller\n                    \n                  . Accessed 25 Dec 2017."},{"key":"2_CR38","doi-asserted-by":"publisher","DOI":"10.1109\/SP.2017.23","volume-title":"Security and Privacy (SP), 2017 IEEE Symposium on","author":"J Wang","year":"2017","unstructured":"Wang, J, Chen B, Wei L, Liu Y (2017) Skyfire: Data-driven seed generation for fuzzing In: Security and Privacy (SP), 2017 IEEE Symposium on.. IEEE, San Jose. \n                    https:\/\/doi.org\/10.1109\/SP.2017.23\n                    \n                  ."},{"key":"2_CR39","doi-asserted-by":"publisher","first-page":"523","DOI":"10.1145\/3106237.3106258","volume-title":"Proceedings of the 2017 11th Joint Meeting on Foundations of Software Engineering","author":"S Wang","year":"2017","unstructured":"Wang, S, Nam J, Tan L (2017) Qtep: quality-aware test case prioritization In: Proceedings of the 2017 11th Joint Meeting on Foundations of Software Engineering, 523\u2013534.. ACM, New York. \n                    https:\/\/doi.org\/10.1145\/3106237.3106258\n                    \n                  ."},{"key":"2_CR40","doi-asserted-by":"publisher","first-page":"497","DOI":"10.1109\/SP.2010.37","volume-title":"Security and privacy (SP) 2010 IEEE symposium on","author":"T Wang","year":"2010","unstructured":"Wang, T, Wei T, Gu G, Zou W (2010) Taintscope: A checksum-aware directed fuzzing tool for automatic software vulnerability detection In: Security and privacy (SP) 2010 IEEE symposium on, 497\u2013512.. IEEE, Berkeley. \n                    https:\/\/doi.org\/10.1109\/SP.2010.37\n                    \n                  ."},{"issue":"2","key":"2_CR41","doi-asserted-by":"publisher","first-page":"69","DOI":"10.1049\/sej.1995.0010","volume":"10","author":"BA Wichmann","year":"1995","unstructured":"Wichmann, BA, Canning AA, Clutterbuck DL, Winsborrow LA, Ward NJ, Marsh DWR (1995) Industrial perspective on static analysis. Softw Eng J 10(2):69\u201375.","journal-title":"Softw Eng J"},{"key":"2_CR42","unstructured":"Wikipedia, Wannacry ransomware attack (2017). \n                    https:\/\/en.wikipedia.org\/wiki\/WannaCry_ransomware_attack\n                    \n                  . Accessed 25 Dec 2017."},{"key":"2_CR43","unstructured":"Wikipedia (2017) Dynamic program analysis. \n                    https:\/\/en.wikipedia.org\/wiki\/Dynamic_program_analysis\n                    \n                  . Accessed 25 Dec 2017."},{"issue":"3","key":"2_CR44","first-page":"829","volume":"27","author":"Z-Y Wu","year":"2010","unstructured":"Wu, Z-Y, Wang H-C, Sun L-C, Pan Z-L, Liu J-J (2010) Survey of fuzzing. Appl Res Comput 27(3):829\u2013832.","journal-title":"Appl Res Comput"},{"key":"2_CR45","doi-asserted-by":"publisher","first-page":"2313","DOI":"10.1145\/3133956.3134046","volume-title":"Proceeding CCS \u201917 Proceedings of the 2017 ACM SIGSAC Conference on Computer and Communications Security","author":"W Xu","year":"2017","unstructured":"Xu, W, Kashyap S, Min C, Kim T (2017) Designing new operating primitives to improve fuzzing performance In: Proceeding CCS \u201917 Proceedings of the 2017 ACM SIGSAC Conference on Computer and Communications Security, 2313\u20132328.. ACM, New York. \n                    https:\/\/doi.org\/10.1145\/3133956.3134046\n                    \n                  ."},{"issue":"5","key":"2_CR46","doi-asserted-by":"publisher","first-page":"589","DOI":"10.1093\/comjnl\/bxm021","volume":"52","author":"Q Yang","year":"2007","unstructured":"Yang, Q, Li JJ, Weiss DM (2007) A survey of coverage-based testing tools. The Computer Journal 52(5):589\u2013597.","journal-title":"The Computer Journal"},{"key":"2_CR47","unstructured":"Zalewski, M (2017) American fuzzy lop. \n                    http:\/\/lcamtuf.coredump.cx\/afl\/\n                    \n                  . Accessed 25 Dec 2017."},{"key":"2_CR48","unstructured":"Zalewski, M (2017) Afl technical details. \n                    http:\/\/lcamtuf.coredump.cx\/afl\/technical_details.txt\n                    \n                  . Accessed 25 Dec 2017."},{"key":"2_CR49","unstructured":"Zimmer, D (2013) Comraider. \n                    http:\/\/sandsprite.com\/tools.php?id=16\n                    \n                  . Accessed 25 Dec 2017."}],"container-title":["Cybersecurity"],"original-title":[],"language":"en","link":[{"URL":"http:\/\/link.springer.com\/content\/pdf\/10.1186\/s42400-018-0002-y.pdf","content-type":"application\/pdf","content-version":"vor","intended-application":"text-mining"},{"URL":"http:\/\/link.springer.com\/article\/10.1186\/s42400-018-0002-y\/fulltext.html","content-type":"text\/html","content-version":"vor","intended-application":"text-mining"},{"URL":"http:\/\/link.springer.com\/content\/pdf\/10.1186\/s42400-018-0002-y.pdf","content-type":"application\/pdf","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2019,6,4]],"date-time":"2019-06-04T19:05:07Z","timestamp":1559675107000},"score":1,"resource":{"primary":{"URL":"https:\/\/cybersecurity.springeropen.com\/articles\/10.1186\/s42400-018-0002-y"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2018,6,5]]},"references-count":49,"journal-issue":{"issue":"1","published-print":{"date-parts":[[2018,12]]}},"alternative-id":["2"],"URL":"https:\/\/doi.org\/10.1186\/s42400-018-0002-y","relation":{},"ISSN":["2523-3246"],"issn-type":[{"value":"2523-3246","type":"electronic"}],"subject":[],"published":{"date-parts":[[2018,6,5]]},"assertion":[{"value":"3 January 2018","order":1,"name":"received","label":"Received","group":{"name":"ArticleHistory","label":"Article History"}},{"value":"17 April 2018","order":2,"name":"accepted","label":"Accepted","group":{"name":"ArticleHistory","label":"Article History"}},{"value":"5 June 2018","order":3,"name":"first_online","label":"First Online","group":{"name":"ArticleHistory","label":"Article History"}},{"value":"CZ is currently serving on the editorial board for Journal of Cybersecurity.","order":1,"name":"Ethics","group":{"name":"EthicsHeading","label":"Competing interests"}},{"value":"Springer Nature remains neutral with regard to jurisdictional claims in published maps and institutional affiliations.","order":2,"name":"Ethics","group":{"name":"EthicsHeading","label":"Publisher\u2019s Note"}}],"article-number":"6"}}