{"id":"https://openalex.org/W4288057809","doi":"https://doi.org/10.1109/sp46214.2022.9833799","title":"SoK: Demystifying Binary Lifters Through the Lens of Downstream Applications","display_name":"SoK: Demystifying Binary Lifters Through the Lens of Downstream Applications","publication_year":2022,"publication_date":"2022-05-01","ids":{"openalex":"https://openalex.org/W4288057809","doi":"https://doi.org/10.1109/sp46214.2022.9833799"},"language":"en","primary_location":{"id":"doi:10.1109/sp46214.2022.9833799","doi":"https://doi.org/10.1109/sp46214.2022.9833799","is_oa":false,"landing_page_url":"https://doi.org/10.1109/sp46214.2022.9833799","pdf_url":null,"source":{"id":"https://openalex.org/S4210233669","display_name":"IEEE Symposium on Security and Privacy (S&P)","issn_l":"1081-6011","issn":["1081-6011","2375-1207"],"is_oa":false,"is_in_doaj":false,"is_core":true,"listed_in":["cwts-core","norway-2"],"host_organization":"https://openalex.org/P4310320439","host_organization_name":"IEEE Computer Society","host_organization_lineage":["https://openalex.org/P4310320439","https://openalex.org/P4310319808"],"host_organization_lineage_names":["IEEE Computer Society","Institute of Electrical and Electronics Engineers"],"type":"conference"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"2022 IEEE Symposium on Security and Privacy (SP)","raw_type":"proceedings-article"},"volume":null,"type":"conference-paper","is_traditional":true,"indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5068911323","display_name":"Zhibo Liu","orcid":"https://orcid.org/0000-0002-7872-1129","observed_orcids":["https://orcid.org/0000-0002-7872-1129"]},"institutions":[{"id":"https://openalex.org/I200769079","display_name":"Hong Kong University of Science and Technology","ror":"https://ror.org/00q4vv597","country_code":"HK","type":"education","lineage":["https://openalex.org/I200769079"]}],"countries":["HK"],"is_corresponding":false,"raw_author_name":"Zhibo Liu","raw_affiliation_strings":["The Hong Kong University of Science and Technology"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"The Hong Kong University of Science and Technology","institution_ids":["https://openalex.org/I200769079"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5024293177","display_name":"Yuanyuan Yuan","orcid":"https://orcid.org/0000-0002-3053-8923","observed_orcids":["https://orcid.org/0000-0002-3053-8923"]},"institutions":[{"id":"https://openalex.org/I200769079","display_name":"Hong Kong University of Science and Technology","ror":"https://ror.org/00q4vv597","country_code":"HK","type":"education","lineage":["https://openalex.org/I200769079"]}],"countries":["HK"],"is_corresponding":false,"raw_author_name":"Yuanyuan Yuan","raw_affiliation_strings":["The Hong Kong University of Science and Technology"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"The Hong Kong University of Science and Technology","institution_ids":["https://openalex.org/I200769079"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5100328264","display_name":"Shuai Wang","orcid":"https://orcid.org/0000-0002-0866-0308","observed_orcids":["https://orcid.org/0000-0002-0866-0308","https://orcid.org/0000-0002-2838-7249"]},"institutions":[{"id":"https://openalex.org/I200769079","display_name":"Hong Kong University of Science and Technology","ror":"https://ror.org/00q4vv597","country_code":"HK","type":"education","lineage":["https://openalex.org/I200769079"]}],"countries":["HK"],"is_corresponding":false,"raw_author_name":"Shuai Wang","raw_affiliation_strings":["The Hong Kong University of Science and Technology"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"The Hong Kong University of Science and Technology","institution_ids":["https://openalex.org/I200769079"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5056854451","display_name":"Yuyan Bao","orcid":"https://orcid.org/0000-0002-3832-3134","observed_orcids":["https://orcid.org/0000-0002-3832-3134"]},"institutions":[{"id":"https://openalex.org/I151746483","display_name":"University of Waterloo","ror":"https://ror.org/01aff2v68","country_code":"CA","type":"education","lineage":["https://openalex.org/I151746483"]}],"countries":["CA"],"is_corresponding":false,"raw_author_name":"Yuyan Bao","raw_affiliation_strings":["University of Waterloo"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"University of Waterloo","institution_ids":["https://openalex.org/I151746483"]}]}],"institutions":[],"countries_distinct_count":2,"institutions_distinct_count":2,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":3.9651,"has_fulltext":false,"cited_by_count":34,"citation_normalized_percentile":{"value":0.95565371,"is_in_top_1_percent":false,"is_in_top_10_percent":true},"cited_by_percentile_year":{"min":88,"max":99},"biblio":{"volume":null,"issue":null,"first_page":"1100","last_page":"1119"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11424","display_name":"Security and Verification in Computing","score":0.9585000276565552,"subfield":{"id":"https://openalex.org/subfields/1708","display_name":"Hardware and Architecture"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11424","display_name":"Security and Verification in Computing","score":0.9585000276565552,"subfield":{"id":"https://openalex.org/subfields/1708","display_name":"Hardware and Architecture"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10260","display_name":"Software Engineering Research","score":0.033799998462200165,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":0.0019000000320374966,"subfield":{"id":"https://openalex.org/subfields/1712","display_name":"Software"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/llvm-intermediate-representation","display_name":"LLVM intermediate representation","score":0.9070000052452087},{"id":"https://openalex.org/keywords/pointer-analysis","display_name":"pointer analysis","score":0.7419999837875366},{"id":"https://openalex.org/keywords/binary-decompilation","display_name":"binary decompilation","score":0.8429999947547913},{"id":"https://openalex.org/keywords/static-analysis","display_name":"static analysis","score":0.41499999165534973},{"id":"https://openalex.org/keywords/security-assessment","display_name":"security analysis","score":0.4740000069141388}],"concepts":[{"id":"https://openalex.org/C160145156","wikidata":"https://www.wikidata.org/wiki/Q778586","display_name":"Executable","level":2,"score":0.8737463355064392},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.8122085332870483},{"id":"https://openalex.org/C169590947","wikidata":"https://www.wikidata.org/wiki/Q47506","display_name":"Compiler","level":2,"score":0.7867693901062012},{"id":"https://openalex.org/C48372109","wikidata":"https://www.wikidata.org/wiki/Q3913","display_name":"Binary number","level":2,"score":0.6499171853065491},{"id":"https://openalex.org/C77660490","wikidata":"https://www.wikidata.org/wiki/Q244916","display_name":"Intermediate language","level":3,"score":0.5832207202911377},{"id":"https://openalex.org/C63435697","wikidata":"https://www.wikidata.org/wiki/Q864135","display_name":"Binary code","level":3,"score":0.5504199862480164},{"id":"https://openalex.org/C199360897","wikidata":"https://www.wikidata.org/wiki/Q9143","display_name":"Programming language","level":1,"score":0.4938858151435852},{"id":"https://openalex.org/C2776760102","wikidata":"https://www.wikidata.org/wiki/Q5139990","display_name":"Code (set theory)","level":3,"score":0.49030640721321106},{"id":"https://openalex.org/C97686452","wikidata":"https://www.wikidata.org/wiki/Q7604153","display_name":"Static analysis","level":2,"score":0.478670209646225},{"id":"https://openalex.org/C2777904410","wikidata":"https://www.wikidata.org/wiki/Q7397","display_name":"Software","level":2,"score":0.4336865544319153},{"id":"https://openalex.org/C43126263","wikidata":"https://www.wikidata.org/wiki/Q128751","display_name":"Source code","level":2,"score":0.4255933463573456},{"id":"https://openalex.org/C94375191","wikidata":"https://www.wikidata.org/wiki/Q11205","display_name":"Arithmetic","level":1,"score":0.07695701718330383},{"id":"https://openalex.org/C177264268","wikidata":"https://www.wikidata.org/wiki/Q1514741","display_name":"Set (abstract data type)","level":2,"score":0.0},{"id":"https://openalex.org/C33923547","wikidata":"https://www.wikidata.org/wiki/Q395","display_name":"Mathematics","level":0,"score":0.0}],"mesh":[],"locations_count":2,"locations":[{"id":"doi:10.1109/sp46214.2022.9833799","doi":"https://doi.org/10.1109/sp46214.2022.9833799","is_oa":false,"landing_page_url":"https://doi.org/10.1109/sp46214.2022.9833799","pdf_url":null,"source":{"id":"https://openalex.org/S4210233669","display_name":"IEEE Symposium on Security and Privacy (S&P)","issn_l":"1081-6011","issn":["1081-6011","2375-1207"],"is_oa":false,"is_in_doaj":false,"is_core":true,"listed_in":["cwts-core","norway-2"],"host_organization":"https://openalex.org/P4310320439","host_organization_name":"IEEE Computer Society","host_organization_lineage":["https://openalex.org/P4310320439","https://openalex.org/P4310319808"],"host_organization_lineage_names":["IEEE Computer Society","Institute of Electrical and Electronics Engineers"],"type":"conference"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"2022 IEEE Symposium on Security and Privacy (SP)","raw_type":"proceedings-article"},{"id":"pmh:oai:repository.hkust.edu.hk:1783.1-119386","doi":null,"is_oa":false,"landing_page_url":"http://repository.hkust.edu.hk/ir/Record/1783.1-119386","pdf_url":null,"source":{"id":"https://openalex.org/S4306401796","display_name":"Rare & Special e-Zone (The Hong Kong University of Science and Technology)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"listed_in":[],"host_organization":"https://openalex.org/I200769079","host_organization_name":"Hong Kong University of Science and Technology","host_organization_lineage":["https://openalex.org/I200769079"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"Conference paper"}],"best_oa_location":null,"sustainable_development_goals":[],"study_designs":[],"awards":[],"funders":[],"has_content":{"grobid_xml":false,"pdf":false},"content_urls":null,"referenced_works_count":93,"referenced_works":["https://openalex.org/W961099885","https://openalex.org/W1457363419","https://openalex.org/W1463623766","https://openalex.org/W1522250664","https://openalex.org/W1582456956","https://openalex.org/W1690253345","https://openalex.org/W1710734607","https://openalex.org/W1878544538","https://openalex.org/W1994718921","https://openalex.org/W1994742583","https://openalex.org/W1997385049","https://openalex.org/W1997394198","https://openalex.org/W2009614414","https://openalex.org/W2030906223","https://openalex.org/W2072385532","https://openalex.org/W2085050643","https://openalex.org/W2090554354","https://openalex.org/W2095445208","https://openalex.org/W2107558499","https://openalex.org/W2128345666","https://openalex.org/W2147118954","https://openalex.org/W2148755014","https://openalex.org/W2170737051","https://openalex.org/W2282866165","https://openalex.org/W2297774820","https://openalex.org/W2328210346","https://openalex.org/W2398729674","https://openalex.org/W2407989913","https://openalex.org/W2414803796","https://openalex.org/W2514974017","https://openalex.org/W2532737545","https://openalex.org/W2532962075","https://openalex.org/W2612128870","https://openalex.org/W2749008552","https://openalex.org/W2753395445","https://openalex.org/W2767373589","https://openalex.org/W2774286308","https://openalex.org/W2791218785","https://openalex.org/W2792181598","https://openalex.org/W2792247670","https://openalex.org/W2794073659","https://openalex.org/W2794718534","https://openalex.org/W2795143051","https://openalex.org/W2809662498","https://openalex.org/W2884017574","https://openalex.org/W2889242166","https://openalex.org/W2889354405","https://openalex.org/W2890042297","https://openalex.org/W2891235722","https://openalex.org/W2891865791","https://openalex.org/W2892187814","https://openalex.org/W2905044737","https://openalex.org/W2914503388","https://openalex.org/W2926178846","https://openalex.org/W2927543040","https://openalex.org/W2930019028","https://openalex.org/W2942259124","https://openalex.org/W2954121408","https://openalex.org/W2963934162","https://openalex.org/W2965563623","https://openalex.org/W2965967214","https://openalex.org/W2970971581","https://openalex.org/W2989703616","https://openalex.org/W2997915791","https://openalex.org/W3005238444","https://openalex.org/W3007413911","https://openalex.org/W3008334537","https://openalex.org/W3009071074","https://openalex.org/W3012221736","https://openalex.org/W3014339000","https://openalex.org/W3015291177","https://openalex.org/W3015365135","https://openalex.org/W3023141480","https://openalex.org/W3033606455","https://openalex.org/W3043641306","https://openalex.org/W3048272215","https://openalex.org/W3098380913","https://openalex.org/W3107604447","https://openalex.org/W3112894679","https://openalex.org/W3133719257","https://openalex.org/W3137108338","https://openalex.org/W3152893301","https://openalex.org/W3154462492","https://openalex.org/W3155466149","https://openalex.org/W3161722915","https://openalex.org/W3164168419","https://openalex.org/W4226065182","https://openalex.org/W4244413641","https://openalex.org/W4403451191","https://openalex.org/W6607853461","https://openalex.org/W6754298449","https://openalex.org/W6794314717","https://openalex.org/W6884737772"],"related_works":["https://openalex.org/W7131106494","https://openalex.org/W2767373589","https://openalex.org/W4405182770","https://openalex.org/W7213928727","https://openalex.org/W4415046993","https://openalex.org/W4394999238","https://openalex.org/W7223407438","https://openalex.org/W4409311655","https://openalex.org/W7166837905","https://openalex.org/W7153254026"],"abstract_inverted_index":{"Binary":[0],"lifters":[1,35,61,81,173,204,222],"convert":[2],"executables":[3,187],"into":[4],"an":[5,76,83],"intermediate":[6],"representation":[7],"(IR)":[8],"of":[9,32,79,93,121,141,185,257,260,268,273,301,313],"a":[10,183,253,325],"compiler":[11,28],"framework.":[12],"The":[13],"recovered":[14],"IR":[15,65,103,123,143,172,206,240,318],"code":[16,24,66,104,124,144,207,230,241],"is":[17,209],"generally":[18],"deemed":[19],"\u201canalysis":[20],"friendly,\u201d":[21],"bridging":[22],"low-level":[23],"analysis":[25,112,160,214,233,247,315],"with":[26,67,271],"well-established":[27],"infrastructures.":[29],"With":[30],"years":[31],"development,":[33],"binary":[34,60,80,94,203,221,235,261,282,302],"are":[36,162],"becoming":[37],"increasingly":[38],"popular":[39,167],"for":[40,71,212,294,327],"use":[41,297],"in":[42,110,226,276],"various":[43,190],"security,":[44],"systems,":[45],"and":[46,85,96,154,156,169,192,194,215,217,284,291,298,322],"software":[47],"(re)-engineering":[48],"applications.":[49],"Recent":[50],"studies":[51],"have":[52],"also":[53,264,305],"reported":[54],"highly":[55,86,210],"promising":[56],"results":[57,161],"that":[58,174,201,208,219,272],"suggest":[59,218],"can":[62,105,223],"generate":[63,118],"LLVM":[64,102,122,142,171],"correct":[68,296],"functionality,":[69],"even":[70],"complex":[72],"cases.This":[73],"paper":[74],"conducts":[75],"in-depth":[77],"study":[78,165],"from":[82,182],"orthogonal":[84],"demanding":[87],"perspective.":[88],"We":[89,135,164,287,304],"demystify":[90],"the":[91,100,132,178,238,258,266,295,311],"\u201cexpressiveness\u201d":[92],"lifters,":[95,262],"reveal":[97],"how":[98],"well":[99],"lifted":[101,239,317],"support":[106],"critical":[107],"downstream":[108,148],"applications":[109,149],"security":[111,232,278],"scenarios.":[113],"To":[114,251],"do":[115],"so,":[116],"we":[117,263],"two":[119,139],"pieces":[120,140],"by":[125,130,177,189,320],"compiling":[126],"C/C++":[127],"programs":[128],"or":[129,180,229],"lifting":[131],"corresponding":[133],"executables.":[134],"then":[136],"feed":[137],"these":[138],"to":[145,244,309],"three":[146,277],"keystone":[147],"(pointer":[150],"analysis,":[151,153],"discriminability":[152,213],"decompilation)":[155],"determine":[157],"whether":[158],"inconsistent":[159],"generated.":[163],"four":[166],"static":[168,246],"dynamic":[170],"were":[175],"developed":[176],"industry":[179],"academia":[181],"total":[184],"252,063":[186],"generated":[188],"compilers":[191],"optimizations":[193],"on":[195],"different":[196],"architectures.":[197],"Our":[198],"findings":[199,290],"show":[200],"modern":[202],"afford":[205],"suitable":[211],"decompilation,":[216],"such":[220],"be":[224],"applied":[225],"common":[227],"similarity-":[228],"comprehension-based":[231],"(e.g.,":[234,248],"diffing).":[236],"However,":[237],"appears":[242],"unsuited":[243],"rigorous":[245],"pointer":[249,314],"analysis).":[250],"obtain":[252],"more":[254],"comprehensive":[255],"view":[256],"utility":[259],"compare":[265],"performance":[267],"lifter-enabled":[269],"approaches":[270],"binary-only":[274],"tools":[275],"tasks,":[279],"i.e.,":[280],"sanitization,":[281],"diffing,":[283],"C":[285],"decompilation.":[286],"summarize":[288],"our":[289],"make":[292],"suggestions":[293],"further":[299],"enhancement":[300],"lifters.":[303],"explored":[306],"practical":[307],"ways":[308],"enhance":[310],"accuracy":[312],"using":[316,321],"code,":[319],"augmenting":[323],"Debin,":[324],"tool":[326],"predicting":[328],"debug":[329],"information.":[330]},"counts_by_year":[{"year":2026,"cited_by_count":11},{"year":2025,"cited_by_count":8},{"year":2024,"cited_by_count":10},{"year":2023,"cited_by_count":4},{"year":2022,"cited_by_count":1}],"updated_date":"2026-11-10T11:39:43.021295","created_date":"2022-07-28T00:00:00"}