EDBT 2026 Demo / reviewers in the wild / expert
Renxiang Wang
dblp:184/0954
· DBLP profile ↗
1ranked-venue papers
0as first author
1since 2021 · last 2024
0009-0003-1960-6213ORCID · reported
Domains — the database's venue-derived domains; a paper can count in several
Software engineering, systems software and programming languages · 1 · 1 since 2021
Expertise — from the expertise taxonomy: the topics of the expert's papers under the CCF categories. A weight counts papers with recency: 1 for a paper about the topic, 0.3 when the topic is its context, halved every five years.
| Software engineering, system software, and programming languages
1 paper |
Software testing · 81% Program analysis · 19% | |
| Network and information security
1 paper |
Systems and software security · 100% |
Topics — the 4 heaviest of 4, each with the papers that count most for it
| Topic | Weight | Papers | Last | Evidence papers |
|---|---|---|---|---|
Systems and software security
vulnerability discovery |
0.8 | 1 | 2024 | Atlas: Automating Cross-Language Fuzzing on Android Closed-Source Libraries · ISSTA 2024 |
Software testing
fuzzing |
0.8 | 1 | 2024 | Atlas: Automating Cross-Language Fuzzing on Android Closed-Source Libraries · ISSTA 2024 |
Software testing › test infrastructure
harness generation |
0.2 | 1 | 2024 | Atlas: Automating Cross-Language Fuzzing on Android Closed-Source Libraries · ISSTA 2024 |
Program analysis
static analysis |
0.2 | 1 | 2024 | Atlas: Automating Cross-Language Fuzzing on Android Closed-Source Libraries · ISSTA 2024 |
Methods — techniques the papers use, named apart from their topics
static analysis · 1.5harness generation · 1.5
| Year | Publication | Venue | Position |
|---|---|---|---|
| 2024 | Atlas: Automating Cross-Language Fuzzing on Android Closed-Source LibrariesabstractFuzzing is an effective method for detecting security bugs in software, and there have been quite a few effective works on fuzzing Android. Researchers have developed methods for fuzzing open-source native APIs and Java interfaces on actual Android devices. However, the realm of automatically fuzzing Android closed-source native libraries, particularly on emulators, remains insufficiently explored. There are two key challenges: firstly, the multi-language programming model inherent to Android; and secondly, the absence of a Java runtime environment within the emulator. To address these challenges, we propose Atlas, a practical automated fuzz framework for Android closed-source native libraries. Atlas consists of an automatic harness generator and a fuzzer containing the necessary runtime environment. The generator uses static analysis techniques to deduce the correct calling sequences and parameters of the native API according to the information from the "native world" and the "Java world". To maximize the practicality of the generated harness, Atlas heuristically optimizes the generated harness. The Fuzzer provides the essential Java runtime environment in the emulator, making it possible to fuzz the Android closed-source native libraries on a multi-core server. We have tested Atlas on 17 pre-installed apps from four Android vendors. Atlas generates 820 harnesses containing 767 native APIs, of which 78% is practical. Meanwhile, Atlas has discovered 74 new security bugs with 16 CVEs assigned. The experiments show that Atlas can efficiently generate high-quality harnesses and find security bugs. Qinming Dai, Mingran Qiu, Renxiang Wang, Wenbo Shen, Yajin Zhou |
ISSTA | 5 |