{
  "added_at": "2026-10-17",
  "arxiv_id": null,
  "arxiv_version_reviewed": null,
  "authors": [
    "Tobias Scharnowski",
    "Nils Bars",
    "Moritz Schloegel",
    "Eric Gustafson",
    "Marius Muench",
    "Giovanni Vigna",
    "Christopher Kruegel",
    "Thorsten Holz",
    "Ali Abbasi"
  ],
  "bibtex_url": "https://awesomerea.org/papers/citations/paper-fuzzware.bib",
  "citation": {
    "container_title": "31st USENIX Security Symposium (USENIX Security 22)",
    "pages": "1239-1256",
    "publisher": "USENIX Association",
    "sources": [
      "https://www.usenix.org/conference/usenixsecurity22/presentation/scharnowski"
    ]
  },
  "code_url": "https://github.com/fuzzware-fuzzer/fuzzware",
  "date_basis": "Publication month in the official USENIX proceedings citation; no exact publication day is asserted.",
  "date_basis_zh": "采用 USENIX 官方论文集引用中的出版月份，不推定具体出版日。",
  "date_precision": "month",
  "description_en": "Rehosts monolithic ARM Cortex-M firmware for fuzzing, using locally scoped symbolic execution to model memory-mapped I/O accesses and focus input mutations on values relevant to firmware logic.",
  "description_zh": "重托管单体 ARM Cortex-M 固件以开展模糊测试，利用局部符号执行为内存映射 I/O 访问建模，使输入变异集中于影响固件逻辑的值。",
  "doi": null,
  "entry_url": "https://awesomerea.org/papers/paper-fuzzware/",
  "entry_url_zh": "https://awesomerea.org/zh/papers/paper-fuzzware/",
  "evidence_urls": [
    "https://www.usenix.org/conference/usenixsecurity22/presentation/scharnowski",
    "https://www.usenix.org/system/files/sec22-scharnowski.pdf",
    "https://www.usenix.org/system/files/usenixsecurity22-scharnowski.pdf",
    "https://github.com/fuzzware-fuzzer/fuzzware/blob/424fce42bbe0cef3928ae589b8f6bbac666857e1/README.md",
    "https://github.com/fuzzware-fuzzer/fuzzware/blob/424fce42bbe0cef3928ae589b8f6bbac666857e1/LICENSE",
    "https://github.com/fuzzware-fuzzer/fuzzware-experiments/blob/b6462adfa125ae1664077a0aa912c081cfde1c4a/README.md",
    "https://github.com/fuzzware-fuzzer/fuzzware-experiments/blob/b6462adfa125ae1664077a0aa912c081cfde1c4a/LICENSE",
    "https://zenodo.org/records/6499215"
  ],
  "first_arxiv_date": null,
  "id": "paper-fuzzware",
  "json_url": "https://awesomerea.org/papers/paper-fuzzware/record.json",
  "kind": "research",
  "markdown_url": "https://awesomerea.org/papers/paper-fuzzware/index.md",
  "markdown_url_zh": "https://awesomerea.org/zh/papers/paper-fuzzware/index.md",
  "metadata_notes": "The official proceedings give pages 1239–1256 and nine authors. No paper DOI or arXiv identifier was verified. Zenodo DOI 10.5281/zenodo.6499215 identifies the software artifact, not this paper. The artifact appendix names the sec22-ae-accepted release and declares Apache-2.0 for code and data; third-party components retain their own terms.",
  "metadata_notes_zh": "官方论文集列出页码 1239–1256 和九位作者。未核实论文 DOI 或 arXiv 标识符。Zenodo DOI 10.5281/zenodo.6499215 标识软件产物，并非本论文。产物附录指定 sec22-ae-accepted 版本，并将代码和数据声明为 Apache-2.0；第三方组件仍适用各自条款。",
  "pdf_url": "https://www.usenix.org/system/files/sec22-scharnowski.pdf",
  "project_url": null,
  "publication_date": "2022-08",
  "publication_status": "conference-paper",
  "record_type": "paper",
  "runtime_tested": false,
  "scope_limitations_en": "The Cortex-M3/M4 artifact requires memory-map configuration and does not automatically model DMA. Abstracting hardware can produce crashes that are impossible on the physical device. This is an analysis environment, not original-source recovery or faithful full-device reconstruction.",
  "scope_limitations_zh": "面向 Cortex-M3/M4 的产物需要配置内存映射，且不会自动为 DMA 建模。对硬件的抽象可能产生真实设备上不可能出现的崩溃。该工作构建分析环境，不代表恢复原始源码或忠实重建完整设备。",
  "targets": [
    "firmware"
  ],
  "title": "Fuzzware: Using Precise MMIO Modeling for Effective Firmware Fuzzing",
  "title_zh": "Fuzzware：利用精确的 MMIO 建模提升固件模糊测试效果",
  "url": "https://www.usenix.org/conference/usenixsecurity22/presentation/scharnowski",
  "venue": "USENIX Security 2022",
  "verification": "source-reviewed",
  "verified_at": "2026-10-16",
  "why_fits_en": "Shows how firmware logic can be exercised without its original hardware by reconstructing enough of the execution environment for dynamic analysis.",
  "why_fits_zh": "展示如何恢复动态分析所需的执行环境，使固件逻辑能够脱离原始硬件运行。",
  "year": 2022
}