Demo Data from EDBT 2026 / reviewers in the wild / expert
Jueon Eom
dblp:371/0891
· DBLP profile ↗
1ranked-venue papers
1as first author
1since 2021 · last 2024
0009-0000-5967-6804ORCID · reported
Domains — the database's venue-derived domains; a paper can count in several
Software engineering, systems software and programming languages · 1 · 1 first-author · 1 since 2021
Expertise — from the expertise taxonomy: the topics of the expert's papers under the CCF categories. A weight counts papers with recency: 1 for a paper about the topic, 0.3 when the topic is its context, halved every five years.
| Software engineering, system software, and programming languages
1 paper |
Software testing · 100% | |
| Network and information security
1 paper |
Systems and software security · 100% |
Topics — the 4 heaviest of 4, each with the papers that count most for it
| Topic | Weight | Papers | Last | Evidence papers |
|---|---|---|---|---|
Software testing › fuzzing
coverage-guided fuzzing |
0.8 | 1 | 2024 | Fuzzing JavaScript Interpreters with Coverage-Guided Reinforcement Learning for LLM-Based Mutation · ISSTA 2024 |
Software testing
fuzzing |
0.8 | 1 | 2024 | Fuzzing JavaScript Interpreters with Coverage-Guided Reinforcement Learning for LLM-Based Mutation · ISSTA 2024 |
Software testing › fuzzing
mutation-based fuzzing |
0.8 | 1 | 2024 | Fuzzing JavaScript Interpreters with Coverage-Guided Reinforcement Learning for LLM-Based Mutation · ISSTA 2024 |
Systems and software security
vulnerability discovery |
0.2 | 1 | 2024 | Fuzzing JavaScript Interpreters with Coverage-Guided Reinforcement Learning for LLM-Based Mutation · ISSTA 2024 |
Methods — techniques the papers use, named apart from their topics
reinforcement learning · 1.5large language model · 1.5TF-IDF · 1.5
| Year | Publication | Venue | Position |
|---|---|---|---|
| 2024 | Fuzzing JavaScript Interpreters with Coverage-Guided Reinforcement Learning for LLM-Based MutationabstractJavaScript interpreters, crucial for modern web browsers, require an effective fuzzing method to identify security-related bugs. However, the strict grammatical requirements for input present significant challenges. Recent efforts to integrate language models for context- aware mutation in fuzzing are promising but lack the necessary coverage guidance to be fully effective. This paper presents a novel technique called CovRL (Coverage-guided Reinforcement Learning) that combines Large Language Models (LLMs) with Reinforcement Learning (RL) from coverage feedback. Our fuzzer, CovRL-Fuzz, integrates coverage feedback directly into the LLM by leveraging the Term Frequency-Inverse Document Frequency (TF-IDF) method to construct a weighted coverage map. This map is key in calculating the fuzzing reward, which is then applied to the LLM-based mutator through reinforcement learning. CovRL-Fuzz, through this approach, enables the generation of test cases that are more likely to discover new coverage areas, thus improving bug detection while minimizing syntax and semantic errors, all without needing extra post-processing. Our evaluation results show that CovRL-Fuzz outperforms the state-of-the-art fuzzers in enhancing code coverage and identifying bugs in JavaScript interpreters: CovRL-Fuzz identified 58 real-world security-related bugs in the latest JavaScript interpreters, including 50 previously unknown bugs and 15 CVEs. Jueon Eom, Seyeon Jeong, Taekyoung Kwon 0002 |
ISSTA | 1 |