Demo Data from VLDB 2026 / reviewers in the wild / expert
Xianglin Cheng
dblp:243/8918
· DBLP profile ↗
1ranked-venue papers
0as first author
1since 2021 · last 2024
—ORCID · none
Domains — the database's venue-derived domains; a paper can count in several
Security and privacy · 1 · 1 since 2021
Expertise — from the expertise taxonomy: the topics of the expert's papers under the CCF categories. A weight counts papers with recency: 1 for a paper about the topic, 0.3 when the topic is its context, halved every five years.
| Software engineering, system software, and programming languages
1 paper |
Software testing · 100% | |
| Network and information security
1 paper |
Systems and software security · 100% |
Topics — the 3 heaviest of 3, each with the papers that count most for it
| Topic | Weight | Papers | Last | Evidence papers |
|---|---|---|---|---|
Systems and software security
vulnerability discovery |
0.8 | 1 | 2024 | Multiple Targets Directed Greybox Fuzzing · IEEE Trans. Dependable Secur. Comput. 2024 |
Software testing › fuzzing › greybox fuzzing
directed greybox fuzzing |
0.8 | 1 | 2024 | Multiple Targets Directed Greybox Fuzzing · IEEE Trans. Dependable Secur. Comput. 2024 |
Software testing
fuzzing |
0.8 | 1 | 2024 | Multiple Targets Directed Greybox Fuzzing · IEEE Trans. Dependable Secur. Comput. 2024 |
Methods — techniques the papers use, named apart from their topics
energy scheduling · 1.5adaptive exploration-exploitation · 1.5
| Year | Publication | Venue | Position |
|---|---|---|---|
| 2024 | Multiple Targets Directed Greybox FuzzingabstractDirected greybox fuzzing (DGF) can quickly discover or reproduce bugs in programs by seeking to reach a program location or explore some locations in order. However, due to their static stage division and coarse-grained energy scheduling, prior DGF tools perform poorly when facing multiple target locations (targets for short). In this paper, we present multiple targets directed greybox fuzzing which aims to reach multiple programs locations in a fuzzing campaign. Specifically, we propose a novel strategy to adaptively coordinate exploration and exploitation stages, and a novel energy scheduling strategy by considering more relations between seeds and target locations. We implement our approaches in a tool called LeoFuzz and evaluate it on crash reproduction, true positives verification, and vulnerability exposure in real-world programs. Experimental results show that LeoFuzz outperforms six state-of-the-art fuzzers, i.e., QYSM, AFLGo, Lolly, Berry, Beacon and WindRanger in terms of effectiveness and efficiency. Moreover, LeoFuzz has detected 23 new vulnerabilities in real-world programs, and 12 of them have been assigned CVE IDs. Hongliang Liang, Xinglin Yu, Xianglin Cheng |
IEEE Trans. Dependable Secur. Comput. | 3 |