{"id":"https://openalex.org/W4387674220","doi":"https://doi.org/10.1145/3622819","title":"Towards Better Semantics Exploration for Browser Fuzzing","display_name":"Towards Better Semantics Exploration for Browser Fuzzing","publication_year":2023,"publication_date":"2023-10-16","ids":{"openalex":"https://openalex.org/W4387674220","doi":"https://doi.org/10.1145/3622819"},"language":"en","primary_location":{"id":"doi:10.1145/3622819","is_oa":true,"landing_page_url":"https://doi.org/10.1145/3622819","pdf_url":"https://dl.acm.org/doi/pdf/10.1145/3622819","source":{"id":"https://openalex.org/S4210216081","display_name":"Proceedings of the ACM on Programming Languages","issn_l":"2475-1421","issn":["2475-1421"],"is_oa":true,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310319798","host_organization_name":"Association for Computing Machinery","host_organization_lineage":["https://openalex.org/P4310319798"],"host_organization_lineage_names":["Association for Computing Machinery"],"type":"journal"},"license":"cc-by-nc-sa","license_id":"https://openalex.org/licenses/cc-by-nc-sa","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the ACM on Programming Languages","raw_type":"journal-article"},"type":"article","indexed_in":["crossref"],"open_access":{"is_oa":true,"oa_status":"diamond","oa_url":"https://dl.acm.org/doi/pdf/10.1145/3622819","any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5004909890","display_name":"Chijin Zhou","orcid":"https://orcid.org/0000-0002-6446-247X"},"institutions":[{"id":"https://openalex.org/I99065089","display_name":"Tsinghua University","ror":"https://ror.org/03cve4549","country_code":"CN","type":"education","lineage":["https://openalex.org/I99065089"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Chijin Zhou","raw_affiliation_strings":["Tsinghua University, Beijing, China"],"raw_orcid":"https://orcid.org/0000-0002-6446-247X","affiliations":[{"raw_affiliation_string":"Tsinghua University, Beijing, China","institution_ids":["https://openalex.org/I99065089"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5100406666","display_name":"Quan Zhang","orcid":"https://orcid.org/0000-0001-7778-4243"},"institutions":[{"id":"https://openalex.org/I99065089","display_name":"Tsinghua University","ror":"https://ror.org/03cve4549","country_code":"CN","type":"education","lineage":["https://openalex.org/I99065089"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Quan Zhang","raw_affiliation_strings":["Tsinghua University, Beijing, China"],"raw_orcid":"https://orcid.org/0000-0001-7778-4243","affiliations":[{"raw_affiliation_string":"Tsinghua University, Beijing, China","institution_ids":["https://openalex.org/I99065089"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5101908065","display_name":"Lihua Guo","orcid":"https://orcid.org/0000-0002-4336-7190"},"institutions":[{"id":"https://openalex.org/I99065089","display_name":"Tsinghua University","ror":"https://ror.org/03cve4549","country_code":"CN","type":"education","lineage":["https://openalex.org/I99065089"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Lihua Guo","raw_affiliation_strings":["Tsinghua University, Beijing, China"],"raw_orcid":"https://orcid.org/0000-0002-4336-7190","affiliations":[{"raw_affiliation_string":"Tsinghua University, Beijing, China","institution_ids":["https://openalex.org/I99065089"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5100630730","display_name":"Mingzhe Wang","orcid":"https://orcid.org/0000-0002-2153-6766"},"institutions":[{"id":"https://openalex.org/I99065089","display_name":"Tsinghua University","ror":"https://ror.org/03cve4549","country_code":"CN","type":"education","lineage":["https://openalex.org/I99065089"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Mingzhe Wang","raw_affiliation_strings":["Tsinghua University, Beijing, China"],"raw_orcid":"https://orcid.org/0000-0002-2153-6766","affiliations":[{"raw_affiliation_string":"Tsinghua University, Beijing, China","institution_ids":["https://openalex.org/I99065089"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5060117799","display_name":"Yu Jiang","orcid":"https://orcid.org/0000-0003-0955-503X"},"institutions":[{"id":"https://openalex.org/I99065089","display_name":"Tsinghua University","ror":"https://ror.org/03cve4549","country_code":"CN","type":"education","lineage":["https://openalex.org/I99065089"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Yu Jiang","raw_affiliation_strings":["Tsinghua University, Beijing, China"],"raw_orcid":"https://orcid.org/0000-0003-0955-503X","affiliations":[{"raw_affiliation_string":"Tsinghua University, Beijing, China","institution_ids":["https://openalex.org/I99065089"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5069241620","display_name":"Qing Liao","orcid":"https://orcid.org/0000-0003-1012-5301"},"institutions":[{"id":"https://openalex.org/I204983213","display_name":"Harbin Institute of Technology","ror":"https://ror.org/01yqg2h08","country_code":"CN","type":"education","lineage":["https://openalex.org/I204983213"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Qing Liao","raw_affiliation_strings":["Harbin Institute of Technology, Shenzhen, China"],"raw_orcid":"https://orcid.org/0000-0003-1012-5301","affiliations":[{"raw_affiliation_string":"Harbin Institute of Technology, Shenzhen, China","institution_ids":["https://openalex.org/I204983213"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5060120199","display_name":"Zhiyong Wu","orcid":"https://orcid.org/0000-0003-1908-5043"},"institutions":[{"id":"https://openalex.org/I170215575","display_name":"National University of Defense Technology","ror":"https://ror.org/05d2yfz11","country_code":"CN","type":"education","lineage":["https://openalex.org/I170215575"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Zhiyong Wu","raw_affiliation_strings":["National University of Defense Technology, Beijing, China"],"raw_orcid":"https://orcid.org/0000-0003-1908-5043","affiliations":[{"raw_affiliation_string":"National University of Defense Technology, Beijing, China","institution_ids":["https://openalex.org/I170215575"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5100656932","display_name":"Shanshan Li","orcid":"https://orcid.org/0000-0003-0798-974X"},"institutions":[{"id":"https://openalex.org/I170215575","display_name":"National University of Defense Technology","ror":"https://ror.org/05d2yfz11","country_code":"CN","type":"education","lineage":["https://openalex.org/I170215575"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Shanshan Li","raw_affiliation_strings":["National University of Defense Technology, Changsha, China"],"raw_orcid":"https://orcid.org/0000-0003-0798-974X","affiliations":[{"raw_affiliation_string":"National University of Defense Technology, Changsha, China","institution_ids":["https://openalex.org/I170215575"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5101862363","display_name":"Bin Gu","orcid":"https://orcid.org/0000-0001-7218-4839"},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Bin Gu","raw_affiliation_strings":["Beijing Institute of Control Engineering, Beijing, China"],"raw_orcid":"https://orcid.org/0000-0001-7218-4839","affiliations":[{"raw_affiliation_string":"Beijing Institute of Control Engineering, Beijing, China","institution_ids":[]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":3,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":2.3244,"has_fulltext":true,"cited_by_count":13,"citation_normalized_percentile":{"value":0.93403614,"is_in_top_1_percent":false,"is_in_top_10_percent":true},"cited_by_percentile_year":{"min":98,"max":99},"biblio":{"volume":"7","issue":"OOPSLA2","first_page":"604","last_page":"631"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10743","display_name":"Software Testing and Debugging Techniques","score":0.9998999834060669,"subfield":{"id":"https://openalex.org/subfields/1712","display_name":"Software"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T10743","display_name":"Software Testing and Debugging Techniques","score":0.9998999834060669,"subfield":{"id":"https://openalex.org/subfields/1712","display_name":"Software"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10260","display_name":"Software Engineering Research","score":0.992900013923645,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":0.992900013923645,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/fuzz-testing","display_name":"Fuzz testing","score":0.9275621175765991},{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.8294501900672913},{"id":"https://openalex.org/keywords/correctness","display_name":"Correctness","score":0.698104977607727},{"id":"https://openalex.org/keywords/semantics","display_name":"Semantics (computer science)","score":0.6797137260437012},{"id":"https://openalex.org/keywords/context","display_name":"Context (archaeology)","score":0.5925507545471191},{"id":"https://openalex.org/keywords/rule-based-machine-translation","display_name":"Rule-based machine translation","score":0.5077334642410278},{"id":"https://openalex.org/keywords/programming-language","display_name":"Programming language","score":0.4046023488044739},{"id":"https://openalex.org/keywords/artificial-intelligence","display_name":"Artificial intelligence","score":0.26449286937713623},{"id":"https://openalex.org/keywords/software","display_name":"Software","score":0.22672545909881592}],"concepts":[{"id":"https://openalex.org/C111065885","wikidata":"https://www.wikidata.org/wiki/Q1189053","display_name":"Fuzz testing","level":3,"score":0.9275621175765991},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.8294501900672913},{"id":"https://openalex.org/C55439883","wikidata":"https://www.wikidata.org/wiki/Q360812","display_name":"Correctness","level":2,"score":0.698104977607727},{"id":"https://openalex.org/C184337299","wikidata":"https://www.wikidata.org/wiki/Q1437428","display_name":"Semantics (computer science)","level":2,"score":0.6797137260437012},{"id":"https://openalex.org/C2779343474","wikidata":"https://www.wikidata.org/wiki/Q3109175","display_name":"Context (archaeology)","level":2,"score":0.5925507545471191},{"id":"https://openalex.org/C53893814","wikidata":"https://www.wikidata.org/wiki/Q7378909","display_name":"Rule-based machine translation","level":2,"score":0.5077334642410278},{"id":"https://openalex.org/C199360897","wikidata":"https://www.wikidata.org/wiki/Q9143","display_name":"Programming language","level":1,"score":0.4046023488044739},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.26449286937713623},{"id":"https://openalex.org/C2777904410","wikidata":"https://www.wikidata.org/wiki/Q7397","display_name":"Software","level":2,"score":0.22672545909881592},{"id":"https://openalex.org/C151730666","wikidata":"https://www.wikidata.org/wiki/Q7205","display_name":"Paleontology","level":1,"score":0.0},{"id":"https://openalex.org/C86803240","wikidata":"https://www.wikidata.org/wiki/Q420","display_name":"Biology","level":0,"score":0.0}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1145/3622819","is_oa":true,"landing_page_url":"https://doi.org/10.1145/3622819","pdf_url":"https://dl.acm.org/doi/pdf/10.1145/3622819","source":{"id":"https://openalex.org/S4210216081","display_name":"Proceedings of the ACM on Programming Languages","issn_l":"2475-1421","issn":["2475-1421"],"is_oa":true,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310319798","host_organization_name":"Association for Computing Machinery","host_organization_lineage":["https://openalex.org/P4310319798"],"host_organization_lineage_names":["Association for Computing Machinery"],"type":"journal"},"license":"cc-by-nc-sa","license_id":"https://openalex.org/licenses/cc-by-nc-sa","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the ACM on Programming Languages","raw_type":"journal-article"}],"best_oa_location":{"id":"doi:10.1145/3622819","is_oa":true,"landing_page_url":"https://doi.org/10.1145/3622819","pdf_url":"https://dl.acm.org/doi/pdf/10.1145/3622819","source":{"id":"https://openalex.org/S4210216081","display_name":"Proceedings of the ACM on Programming Languages","issn_l":"2475-1421","issn":["2475-1421"],"is_oa":true,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310319798","host_organization_name":"Association for Computing Machinery","host_organization_lineage":["https://openalex.org/P4310319798"],"host_organization_lineage_names":["Association for Computing Machinery"],"type":"journal"},"license":"cc-by-nc-sa","license_id":"https://openalex.org/licenses/cc-by-nc-sa","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the ACM on Programming Languages","raw_type":"journal-article"},"sustainable_development_goals":[],"awards":[{"id":"https://openalex.org/G3167315294","display_name":null,"funder_award_id":"U1911401","funder_id":"https://openalex.org/F4320321001","funder_display_name":"National Natural Science Foundation of China"},{"id":"https://openalex.org/G4456633529","display_name":null,"funder_award_id":"92167101","funder_id":"https://openalex.org/F4320321001","funder_display_name":"National Natural Science Foundation of China"},{"id":"https://openalex.org/G5216889655","display_name":null,"funder_award_id":"62022046","funder_id":"https://openalex.org/F4320321001","funder_display_name":"National Natural Science Foundation of China"},{"id":"https://openalex.org/G7091651887","display_name":null,"funder_award_id":"62021002","funder_id":"https://openalex.org/F4320321001","funder_display_name":"National Natural Science Foundation of China"},{"id":"https://openalex.org/G8356187857","display_name":null,"funder_award_id":"U20A6003","funder_id":"https://openalex.org/F4320321001","funder_display_name":"National Natural Science Foundation of China"}],"funders":[{"id":"https://openalex.org/F4320321001","display_name":"National Natural Science Foundation of China","ror":"https://ror.org/01h0zpd94"}],"has_content":{"grobid_xml":true,"pdf":true},"content_urls":{"pdf":"https://content.openalex.org/works/W4387674220.pdf","grobid_xml":"https://content.openalex.org/works/W4387674220.grobid-xml"},"referenced_works_count":18,"referenced_works":["https://openalex.org/W1488491377","https://openalex.org/W2499791918","https://openalex.org/W2741609678","https://openalex.org/W2947109320","https://openalex.org/W2955426500","https://openalex.org/W2961870034","https://openalex.org/W2963350015","https://openalex.org/W2963846926","https://openalex.org/W3097728505","https://openalex.org/W3102086861","https://openalex.org/W3154106427","https://openalex.org/W3180202404","https://openalex.org/W3207016455","https://openalex.org/W4213153339","https://openalex.org/W4238083723","https://openalex.org/W4281741991","https://openalex.org/W4285490419","https://openalex.org/W4386542590"],"related_works":["https://openalex.org/W2511770387","https://openalex.org/W3120811337","https://openalex.org/W3203597304","https://openalex.org/W2990186179","https://openalex.org/W4248424560","https://openalex.org/W4385301282","https://openalex.org/W3023977444","https://openalex.org/W2766647240","https://openalex.org/W2959616428","https://openalex.org/W2788308474"],"abstract_inverted_index":{"Web":[0],"browsers":[1],"exhibit":[2],"rich":[3],"semantics":[4,15,55,69,135],"that":[5,62,85,128],"enable":[6],"a":[7,29,65,105,117,130,137,173,179],"plethora":[8],"of":[9,24,56,67,92,133,140,147,189],"web-based":[10],"functionalities.":[11],"However,":[12,45],"these":[13,46],"intricate":[14],"present":[16,80],"significant":[17],"challenges":[18],"for":[19,41],"the":[20,53,68,90,145,187,198],"implementation":[21],"and":[22,70,111,160,204],"testing":[23,32],"browsers.":[25],"For":[26],"example,":[27],"fuzzing,":[28],"widely":[30],"adopted":[31],"technique,":[33],"typically":[34],"relies":[35],"on":[36,154],"handwritten":[37],"context-free":[38],"grammars":[39,95],"(CFGs)":[40],"automatically":[42],"generating":[43],"inputs.":[44,142],"CFGs":[47],"fall":[48],"short":[49],"in":[50,59,176,182],"adequately":[51],"modeling":[52],"complex":[54],"browsers,":[57,156,200],"resulting":[58,120],"generated":[60],"inputs":[61,127],"cover":[63],"only":[64],"portion":[66],"are":[71],"prone":[72],"to":[73,115,125,168],"semantic":[74,98,183],"errors.":[75],"In":[76],"this":[77],"paper,":[78],"we":[79,149,193],"SaGe,":[81,148],"an":[82],"automated":[83],"method":[84],"enhances":[86],"browser":[87,134,170],"fuzzing":[88,152],"through":[89],"use":[91],"production-context":[93],"sensitive":[94],"(PCSGs)":[96],"incorporating":[97],"information.":[99],"Our":[100,162],"approach":[101,163],"begins":[102],"by":[103],"extracting":[104],"rudimentary":[106],"CFG":[107],"from":[108],"W3C":[109],"standards":[110],"iteratively":[112],"enhancing":[113],"it":[114],"create":[116],"PCSG.":[118],"The":[119],"PCSG":[121],"enables":[122],"our":[123],"fuzzer":[124],"generate":[126],"explore":[129],"broader":[131],"range":[132],"with":[136,172,201],"higher":[138],"proportion":[139],"semantically-correct":[141],"To":[143],"evaluate":[144],"efficacy":[146],"conducted":[150],"24-hour":[151],"campaigns":[153],"mainstream":[155],"including":[157],"Chrome,":[158],"Safari,":[159],"Firefox.":[161],"demonstrated":[164],"better":[165],"performance":[166],"compared":[167],"existing":[169],"fuzzers,":[171],"6.03%-277.80%":[174],"improvement":[175],"edge":[177],"coverage,":[178],"3.56%-161.71%":[180],"boost":[181],"correctness":[184],"rate,":[185],"twice":[186],"number":[188],"bugs":[190,196],"discovered.":[191],"Moreover,":[192],"identified":[194],"62":[195],"across":[197],"three":[199],"40":[202],"confirmed":[203],"10":[205],"assigned":[206],"CVEs.":[207]},"counts_by_year":[{"year":2025,"cited_by_count":8},{"year":2024,"cited_by_count":5}],"updated_date":"2026-05-21T06:26:12.895304","created_date":"2025-10-10T00:00:00"}