{
  "added_at": "2026-11-06",
  "arxiv_id": "2105.05445",
  "arxiv_version_reviewed": "v2",
  "authors": [
    "Xiaotao Feng",
    "Ruoxi Sun",
    "Xiaogang Zhu",
    "Minhui Xue",
    "Sheng Wen",
    "Dongxi Liu",
    "Surya Nepal",
    "Yang Xiang"
  ],
  "bibtex_url": "https://awesomerea.org/papers/citations/paper-snipuzz.bib",
  "code_url": null,
  "date_basis": "First arXiv submission date; the arXiv comment names the venue.",
  "date_basis_zh": "arXiv 首次提交日期；arXiv 备注中写明发表场所。",
  "date_precision": "day",
  "description_en": "Snipuzz fuzzes IoT firmware as a client, using device responses to infer message snippets that guide mutations. It was evaluated on 20 real-world IoT devices and compared with four IoT fuzzing approaches.",
  "description_zh": "Snipuzz 作为客户端与物联网设备通信，根据设备响应推断消息片段，以指导固件黑盒模糊测试中的消息变异。论文在 20 款真实物联网设备上进行了评估，并与四种物联网模糊测试方法比较。",
  "doi": null,
  "entry_url": "https://awesomerea.org/papers/paper-snipuzz/",
  "entry_url_zh": "https://awesomerea.org/zh/papers/paper-snipuzz/",
  "evidence_urls": [
    "https://arxiv.org/abs/2105.05445"
  ],
  "first_arxiv_date": "2021-05-12",
  "id": "paper-snipuzz",
  "json_url": "https://awesomerea.org/papers/paper-snipuzz/record.json",
  "kind": "research",
  "markdown_url": "https://awesomerea.org/papers/paper-snipuzz/index.md",
  "markdown_url_zh": "https://awesomerea.org/zh/papers/paper-snipuzz/index.md",
  "metadata_notes": "The arXiv comment reads: Accepted to ACM CCS 2021",
  "metadata_notes_zh": "发表场所依据 arXiv 备注。",
  "pdf_url": "https://arxiv.org/pdf/2105.05445",
  "project_url": null,
  "publication_date": "2021-05-12",
  "publication_status": "conference-accepted",
  "record_type": "paper",
  "runtime_tested": false,
  "scope_limitations_en": "The evaluation covers 20 popular real-world IoT devices and comparisons with IoTFuzzer, BooFuzz, Doona, and Nemesys. It reports five newly discovered zero-day vulnerabilities, three exposed only by Snipuzz.",
  "scope_limitations_zh": "评估涵盖 20 款流行的真实物联网设备，并与 IoTFuzzer、BooFuzz、Doona 和 Nemesys 比较。论文报告发现了 5 个新的零日漏洞，其中 3 个仅由 Snipuzz 发现。",
  "targets": [
    "firmware"
  ],
  "title": "Snipuzz: Black-box Fuzzing of IoT Firmware via Message Snippet Inference",
  "title_zh": "Snipuzz：通过消息片段推断对物联网固件进行黑盒模糊测试",
  "url": "https://arxiv.org/abs/2105.05445",
  "venue": "ACM CCS 2021",
  "verification": "source-reviewed",
  "verified_at": "2026-11-06",
  "why_fits_en": "It infers message structure from device responses to guide black-box testing of IoT firmware.",
  "why_fits_zh": "它从设备响应中推断消息结构，用于指导物联网固件的黑盒测试。",
  "year": 2021
}