KOP-Fuzzer: A Key-Operation-based Fuzzer for Type Confusion Bugs in JavaScript Engines | IEEE Conference Publication | IEEE Xplore