Demonstration venue · read-only. Every page can be browsed; the buttons that would change it are switched off. Create an account to run TaxoReview on your own data.

Renxiang Wang

dblp:184/0954 · DBLP profile ↗
← Back
1ranked-venue papers
0as first author
1since 2021 · last 2024
0009-0003-1960-6213ORCID · reported

Domains — the database's venue-derived domains; a paper can count in several

Software engineering, systems software and programming languages · 1 · 1 since 2021

Expertise — from the expertise taxonomy: the topics of the expert's papers under the CCF categories. A weight counts papers with recency: 1 for a paper about the topic, 0.3 when the topic is its context, halved every five years.

Software engineering, system software, and programming languages
1 paper
Software testing · 81% Program analysis · 19%
Network and information security
1 paper
Systems and software security · 100%

Topics — the 4 heaviest of 4, each with the papers that count most for it

TopicWeightPapersLastEvidence papers
Systems and software security
vulnerability discovery
0.812024
Atlas: Automating Cross-Language Fuzzing on Android Closed-Source Libraries · ISSTA 2024
Software testing
fuzzing
0.812024
Atlas: Automating Cross-Language Fuzzing on Android Closed-Source Libraries · ISSTA 2024
Software testing › test infrastructure
harness generation
0.212024
Atlas: Automating Cross-Language Fuzzing on Android Closed-Source Libraries · ISSTA 2024
Program analysis
static analysis
0.212024
Atlas: Automating Cross-Language Fuzzing on Android Closed-Source Libraries · ISSTA 2024

Methods — techniques the papers use, named apart from their topics

static analysis · 1.5harness generation · 1.5
YearPublicationVenuePosition
2024 Atlas: Automating Cross-Language Fuzzing on Android Closed-Source Libraries
abstract
Fuzzing is an effective method for detecting security bugs in software, and there have been quite a few effective works on fuzzing Android. Researchers have developed methods for fuzzing open-source native APIs and Java interfaces on actual Android devices. However, the realm of automatically fuzzing Android closed-source native libraries, particularly on emulators, remains insufficiently explored. There are two key challenges: firstly, the multi-language programming model inherent to Android; and secondly, the absence of a Java runtime environment within the emulator. To address these challenges, we propose Atlas, a practical automated fuzz framework for Android closed-source native libraries. Atlas consists of an automatic harness generator and a fuzzer containing the necessary runtime environment. The generator uses static analysis techniques to deduce the correct calling sequences and parameters of the native API according to the information from the "native world" and the "Java world". To maximize the practicality of the generated harness, Atlas heuristically optimizes the generated harness. The Fuzzer provides the essential Java runtime environment in the emulator, making it possible to fuzz the Android closed-source native libraries on a multi-core server. We have tested Atlas on 17 pre-installed apps from four Android vendors. Atlas generates 820 harnesses containing 767 native APIs, of which 78% is practical. Meanwhile, Atlas has discovered 74 new security bugs with 16 CVEs assigned. The experiments show that Atlas can efficiently generate high-quality harnesses and find security bugs.
Qinming Dai, Mingran Qiu, Renxiang Wang, Wenbo Shen, Yajin Zhou
ISSTA5