{"id":"W7126220716","doi":"10.1109/raid67961.2025.00034","title":"SyzGrapher: Resource-Centric Graph-Based Kernel Fuzzing","year":2025,"lang":"","type":"article","venue":"","topic":"Security and Verification in Computing","field":"Computer Science","cited_by":0,"is_retracted":false,"has_abstract":true,"ca_institutions":"University of Toronto","funders":"","keywords":"Fuzz testing; Exploit; Kernel (algebra); Code (set theory); System call; Call stack; Dependency (UML); Linux kernel","routes":{"ca_aff":true,"ca_fund":false,"ca_venue":false,"about_ca":false,"invisible_to_affiliation_only":false},"retraction":null,"screen":null,"direct_labels":[],"prediction":{"model_version":"codex-gemma-dda1882f352a","candidate_categories":["metaepi_narrow","scholarly_communication"],"consensus_categories":[],"category_scores_codex":[0.0012808,0.0004671941,0.0004504728,0.00111277,0.001191047,0.001196399,0.002580177,0.0003126526,0.0003242193],"category_scores_gemma":[0.000205345,0.0005146942,0.0004453369,0.007115395,0.0002679545,0.0003705683,0.0006246236,0.0006235921,0.0001784008],"about_ca_system_candidate":false,"about_ca_system_consensus":false,"about_ca_system_score_codex":0.0001499528,"about_ca_system_score_gemma":0.0006637021,"about_ca_topic_candidate":false,"about_ca_topic_consensus":false,"about_ca_topic_score_codex":0.00010758,"about_ca_topic_score_gemma":0.000009819318,"domain_scores_codex":[0.9954641,0.0004450805,0.0010427,0.001426029,0.0006460442,0.0009760511],"domain_scores_gemma":[0.9964799,0.0008289358,0.0003346378,0.001779927,0.0003177809,0.0002588638],"domain_codex":null,"domain_gemma":null,"domain_candidate":null,"domain_consensus":null,"study_design_codex":"theoretical_or_conceptual","study_design_gemma":"simulation_or_modeling","study_design_scores_codex":[0.00005668956,0.0007745772,0.00782718,0.0003786951,0.0001737871,0.00002727453,0.001216792,0.005927233,0.0001323057,0.7487704,0.03644871,0.1982664],"study_design_scores_gemma":[0.001414993,0.00008312871,0.003598161,0.0005026482,0.00006413604,0.00000494014,0.0002870262,0.8623958,0.002344746,0.008464734,0.1201681,0.0006716091],"study_design_candidate":"simulation_or_modeling","study_design_consensus":null,"genre_codex":"methods","genre_gemma":"empirical","genre_scores_codex":[0.004146352,0.003338551,0.9096194,0.006006705,0.002478043,0.0005175482,0.000002894688,0.0005776497,0.07331289],"genre_scores_gemma":[0.9649051,0.0000868731,0.02464175,0.007519593,0.0001982264,0.00002450076,0.000005269741,0.00002059174,0.002598053],"genre_candidate":"empirical","genre_consensus":null,"teacher_disagreement_score":0.9607588,"threshold_uncertainty_score":0.9998404,"prediction_status":"machine_predicted_unvalidated"},"machine_scores":{"provisional":true,"baseline":true,"maturity_gate_passed":false,"score_opus":0.01873558124654708,"score_gpt":0.2607275642574595,"score_spread":0.2419919830109124,"validation_status":"score_only:v0-immature-baseline","note":"Baseline scores from an immature model (maturity gate not passed). Scores rank; they never assert a category."}}