{"id":"https://openalex.org/W4415178687","doi":"https://doi.org/10.1109/access.2025.3620811","title":"A Use-After-Free Vulnerability Detection Method for Multi-Threaded Programs Based on an Improved Petri Net and Value Flow Graph","display_name":"A Use-After-Free Vulnerability Detection Method for Multi-Threaded Programs Based on an Improved Petri Net and Value Flow Graph","publication_year":2025,"publication_date":"2025-01-01","ids":{"openalex":"https://openalex.org/W4415178687","doi":"https://doi.org/10.1109/access.2025.3620811"},"language":"en","primary_location":{"id":"doi:10.1109/access.2025.3620811","is_oa":true,"landing_page_url":"https://doi.org/10.1109/access.2025.3620811","pdf_url":null,"source":{"id":"https://openalex.org/S2485537415","display_name":"IEEE Access","issn_l":"2169-3536","issn":["2169-3536"],"is_oa":true,"is_in_doaj":true,"is_core":true,"host_organization":"https://openalex.org/P4310319808","host_organization_name":"Institute of Electrical and Electronics Engineers","host_organization_lineage":["https://openalex.org/P4310319808"],"host_organization_lineage_names":["Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Access","raw_type":"journal-article"},"type":"article","indexed_in":["crossref","doaj"],"open_access":{"is_oa":true,"oa_status":"gold","oa_url":"https://doi.org/10.1109/access.2025.3620811","any_repository_has_fulltext":true},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5106406620","display_name":"Shanshan Li","orcid":"https://orcid.org/0009-0005-3669-6112"},"institutions":[{"id":"https://openalex.org/I80143920","display_name":"Shandong University of Science and Technology","ror":"https://ror.org/04gtjhw98","country_code":"CN","type":"education","lineage":["https://openalex.org/I80143920"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Shanshan Li","raw_affiliation_strings":["1College of Computer Science and Engineering, Shandong University of Science and Technology, Qingdao, China","The College of Computer Science and Engineering, Shandong University of Science and Technology, Qingdao, China"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"1College of Computer Science and Engineering, Shandong University of Science and Technology, Qingdao, China","institution_ids":["https://openalex.org/I80143920"]},{"raw_affiliation_string":"The College of Computer Science and Engineering, Shandong University of Science and Technology, Qingdao, China","institution_ids":["https://openalex.org/I80143920"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5040136684","display_name":"Yun Bao","orcid":null},"institutions":[{"id":"https://openalex.org/I80143920","display_name":"Shandong University of Science and Technology","ror":"https://ror.org/04gtjhw98","country_code":"CN","type":"education","lineage":["https://openalex.org/I80143920"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Yunxia Bao","raw_affiliation_strings":["2College of Mathematics and System Science, Shandong University of Science and Technology, Qingdao, China","The College of Mathematics and System Science, Shandong University of Science and Technology, Qingdao, China"],"raw_orcid":"https://orcid.org/0009-0004-0975-819X","affiliations":[{"raw_affiliation_string":"2College of Mathematics and System Science, Shandong University of Science and Technology, Qingdao, China","institution_ids":["https://openalex.org/I80143920"]},{"raw_affiliation_string":"The College of Mathematics and System Science, Shandong University of Science and Technology, Qingdao, China","institution_ids":["https://openalex.org/I80143920"]}]},{"author_position":"middle","author":{"id":null,"display_name":"Faming Lu","orcid":null},"institutions":[{"id":"https://openalex.org/I80143920","display_name":"Shandong University of Science and Technology","ror":"https://ror.org/04gtjhw98","country_code":"CN","type":"education","lineage":["https://openalex.org/I80143920"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Faming Lu","raw_affiliation_strings":["1College of Computer Science and Engineering, Shandong University of Science and Technology, Qingdao, China","The College of Computer Science and Engineering, Shandong University of Science and Technology, Qingdao, China"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"1College of Computer Science and Engineering, Shandong University of Science and Technology, Qingdao, China","institution_ids":["https://openalex.org/I80143920"]},{"raw_affiliation_string":"The College of Computer Science and Engineering, Shandong University of Science and Technology, Qingdao, China","institution_ids":["https://openalex.org/I80143920"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5110088534","display_name":"Cheng Yu","orcid":null},"institutions":[{"id":"https://openalex.org/I108688024","display_name":"Qingdao University","ror":"https://ror.org/021cj6z65","country_code":"CN","type":"education","lineage":["https://openalex.org/I108688024"]},{"id":"https://openalex.org/I4210119987","display_name":"Qingdao Municipal Hospital","ror":"https://ror.org/02jqapy19","country_code":"CN","type":"healthcare","lineage":["https://openalex.org/I4210119987"]},{"id":"https://openalex.org/I4210135108","display_name":"Beijing Municipal Health Commission","ror":"https://ror.org/0374a5s68","country_code":"CN","type":"government","lineage":["https://openalex.org/I4210110145","https://openalex.org/I4210135108"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Cheng Yu","raw_affiliation_strings":["3Qingdao Municipal Bureau of Statistics, Qingdao, China","The Qingdao Municipal Bureau of Statistics, Qingdao, China"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"3Qingdao Municipal Bureau of Statistics, Qingdao, China","institution_ids":["https://openalex.org/I108688024","https://openalex.org/I4210119987","https://openalex.org/I4210135108"]},{"raw_affiliation_string":"The Qingdao Municipal Bureau of Statistics, Qingdao, China","institution_ids":["https://openalex.org/I108688024","https://openalex.org/I4210119987"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5101409897","display_name":"Cong Liu","orcid":"https://orcid.org/0000-0002-2665-7153"},"institutions":[{"id":"https://openalex.org/I141596103","display_name":"University of Lisbon","ror":"https://ror.org/01c27hj86","country_code":"PT","type":"education","lineage":["https://openalex.org/I141596103"]},{"id":"https://openalex.org/I83558840","display_name":"Universidade Nova de Lisboa","ror":"https://ror.org/02xankh89","country_code":"PT","type":"education","lineage":["https://openalex.org/I83558840"]}],"countries":["PT"],"is_corresponding":false,"raw_author_name":"Cong Liu","raw_affiliation_strings":["4NOVA Information Management School, Nova University of Lisbon, Lisbon, Portugal","NOVA Information Management School, Nova University of Lisbon, Lisbon, Portugal"],"raw_orcid":"https://orcid.org/0000-0002-2665-7153","affiliations":[{"raw_affiliation_string":"4NOVA Information Management School, Nova University of Lisbon, Lisbon, Portugal","institution_ids":["https://openalex.org/I83558840","https://openalex.org/I141596103"]},{"raw_affiliation_string":"NOVA Information Management School, Nova University of Lisbon, Lisbon, Portugal","institution_ids":["https://openalex.org/I83558840","https://openalex.org/I141596103"]}]}],"institutions":[],"countries_distinct_count":2,"institutions_distinct_count":6,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":{"value":1850,"currency":"USD","value_usd":1850},"apc_paid":{"value":1850,"currency":"USD","value_usd":1850},"fwci":0.0,"has_fulltext":false,"cited_by_count":0,"citation_normalized_percentile":{"value":0.27880544,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":null,"biblio":{"volume":"13","issue":null,"first_page":"177994","last_page":"178005"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T12423","display_name":"Software Reliability and Analysis Research","score":0.9822999835014343,"subfield":{"id":"https://openalex.org/subfields/1712","display_name":"Software"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T12423","display_name":"Software Reliability and Analysis Research","score":0.9822999835014343,"subfield":{"id":"https://openalex.org/subfields/1712","display_name":"Software"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T12127","display_name":"Software System Performance and Reliability","score":0.9419000148773193,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10430","display_name":"Software Engineering Techniques and Practices","score":0.9135000109672546,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/petri-net","display_name":"Petri net","score":0.8730000257492065},{"id":"https://openalex.org/keywords/control-flow-graph","display_name":"Control flow graph","score":0.6244000196456909},{"id":"https://openalex.org/keywords/control-flow","display_name":"Control flow","score":0.5378000140190125},{"id":"https://openalex.org/keywords/graph","display_name":"Graph","score":0.47940000891685486},{"id":"https://openalex.org/keywords/concurrency","display_name":"Concurrency","score":0.4772000014781952},{"id":"https://openalex.org/keywords/stochastic-petri-net","display_name":"Stochastic Petri net","score":0.461899995803833},{"id":"https://openalex.org/keywords/source-code","display_name":"Source code","score":0.4544000029563904},{"id":"https://openalex.org/keywords/static-analysis","display_name":"Static analysis","score":0.4016999900341034}],"concepts":[{"id":"https://openalex.org/C38677869","wikidata":"https://www.wikidata.org/wiki/Q724168","display_name":"Petri net","level":2,"score":0.8730000257492065},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.7348999977111816},{"id":"https://openalex.org/C27458966","wikidata":"https://www.wikidata.org/wiki/Q1187693","display_name":"Control flow graph","level":2,"score":0.6244000196456909},{"id":"https://openalex.org/C160191386","wikidata":"https://www.wikidata.org/wiki/Q868299","display_name":"Control flow","level":2,"score":0.5378000140190125},{"id":"https://openalex.org/C132525143","wikidata":"https://www.wikidata.org/wiki/Q141488","display_name":"Graph","level":2,"score":0.47940000891685486},{"id":"https://openalex.org/C193702766","wikidata":"https://www.wikidata.org/wiki/Q1414548","display_name":"Concurrency","level":2,"score":0.4772000014781952},{"id":"https://openalex.org/C197551870","wikidata":"https://www.wikidata.org/wiki/Q7617809","display_name":"Stochastic Petri net","level":3,"score":0.461899995803833},{"id":"https://openalex.org/C43126263","wikidata":"https://www.wikidata.org/wiki/Q128751","display_name":"Source code","level":2,"score":0.4544000029563904},{"id":"https://openalex.org/C97686452","wikidata":"https://www.wikidata.org/wiki/Q7604153","display_name":"Static analysis","level":2,"score":0.4016999900341034},{"id":"https://openalex.org/C124101348","wikidata":"https://www.wikidata.org/wiki/Q172491","display_name":"Data mining","level":1,"score":0.40119999647140503},{"id":"https://openalex.org/C95713431","wikidata":"https://www.wikidata.org/wiki/Q631425","display_name":"Vulnerability (computing)","level":2,"score":0.3921000063419342},{"id":"https://openalex.org/C80444323","wikidata":"https://www.wikidata.org/wiki/Q2878974","display_name":"Theoretical computer science","level":1,"score":0.3774999976158142},{"id":"https://openalex.org/C176359209","wikidata":"https://www.wikidata.org/wiki/Q2348963","display_name":"Control flow analysis","level":5,"score":0.3634999990463257},{"id":"https://openalex.org/C64357122","wikidata":"https://www.wikidata.org/wiki/Q1149766","display_name":"Causality (physics)","level":2,"score":0.36340001225471497},{"id":"https://openalex.org/C11413529","wikidata":"https://www.wikidata.org/wiki/Q8366","display_name":"Algorithm","level":1,"score":0.3506999909877777},{"id":"https://openalex.org/C120314980","wikidata":"https://www.wikidata.org/wiki/Q180634","display_name":"Distributed computing","level":1,"score":0.3393000066280365},{"id":"https://openalex.org/C81669768","wikidata":"https://www.wikidata.org/wiki/Q2359161","display_name":"Precision and recall","level":2,"score":0.33000001311302185},{"id":"https://openalex.org/C489000","wikidata":"https://www.wikidata.org/wiki/Q747385","display_name":"Data flow diagram","level":2,"score":0.3154999911785126},{"id":"https://openalex.org/C2776291640","wikidata":"https://www.wikidata.org/wiki/Q2912517","display_name":"Value (mathematics)","level":2,"score":0.3052000105381012},{"id":"https://openalex.org/C91071405","wikidata":"https://www.wikidata.org/wiki/Q1413145","display_name":"Program slicing","level":3,"score":0.3010999858379364},{"id":"https://openalex.org/C2779136372","wikidata":"https://www.wikidata.org/wiki/Q10283002","display_name":"Information flow","level":2,"score":0.2987000048160553},{"id":"https://openalex.org/C38349280","wikidata":"https://www.wikidata.org/wiki/Q1434290","display_name":"Flow (mathematics)","level":2,"score":0.2840999960899353},{"id":"https://openalex.org/C2775924081","wikidata":"https://www.wikidata.org/wiki/Q55608371","display_name":"Control (management)","level":2,"score":0.2590999901294708},{"id":"https://openalex.org/C79403827","wikidata":"https://www.wikidata.org/wiki/Q3988","display_name":"Real-time computing","level":1,"score":0.25450000166893005}],"mesh":[],"locations_count":3,"locations":[{"id":"doi:10.1109/access.2025.3620811","is_oa":true,"landing_page_url":"https://doi.org/10.1109/access.2025.3620811","pdf_url":null,"source":{"id":"https://openalex.org/S2485537415","display_name":"IEEE Access","issn_l":"2169-3536","issn":["2169-3536"],"is_oa":true,"is_in_doaj":true,"is_core":true,"host_organization":"https://openalex.org/P4310319808","host_organization_name":"Institute of Electrical and Electronics Engineers","host_organization_lineage":["https://openalex.org/P4310319808"],"host_organization_lineage_names":["Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Access","raw_type":"journal-article"},{"id":"pmh:oai:run.unl.pt:10362/189858","is_oa":true,"landing_page_url":"http://hdl.handle.net/10362/189858","pdf_url":null,"source":{"id":"https://openalex.org/S4306400678","display_name":"Universidade Nova de Lisboa's Repository (Universidade Nova de Lisboa)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I83558840","host_organization_name":"Universidade Nova de Lisboa","host_organization_lineage":["https://openalex.org/I83558840"],"host_organization_lineage_names":[],"type":"repository"},"license":"other-oa","license_id":"https://openalex.org/licenses/other-oa","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":null,"raw_type":"article"},{"id":"pmh:oai:doaj.org/article:0918786113b743769bc175d3ffff92df","is_oa":true,"landing_page_url":"https://doaj.org/article/0918786113b743769bc175d3ffff92df","pdf_url":null,"source":{"id":"https://openalex.org/S4306401280","display_name":"DOAJ (DOAJ: Directory of Open Access Journals)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":null,"host_organization_name":null,"host_organization_lineage":[],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by-sa","license_id":"https://openalex.org/licenses/cc-by-sa","version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":"IEEE Access, Vol 13, Pp 177994-178005 (2025)","raw_type":"article"}],"best_oa_location":{"id":"doi:10.1109/access.2025.3620811","is_oa":true,"landing_page_url":"https://doi.org/10.1109/access.2025.3620811","pdf_url":null,"source":{"id":"https://openalex.org/S2485537415","display_name":"IEEE Access","issn_l":"2169-3536","issn":["2169-3536"],"is_oa":true,"is_in_doaj":true,"is_core":true,"host_organization":"https://openalex.org/P4310319808","host_organization_name":"Institute of Electrical and Electronics Engineers","host_organization_lineage":["https://openalex.org/P4310319808"],"host_organization_lineage_names":["Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Access","raw_type":"journal-article"},"sustainable_development_goals":[],"awards":[{"id":"https://openalex.org/G1117133122","display_name":null,"funder_award_id":"ZR2024QF107","funder_id":"https://openalex.org/F4320321001","funder_display_name":"National Natural Science Foundation of China"},{"id":"https://openalex.org/G281858718","display_name":null,"funder_award_id":"2022ZD0119501","funder_id":"https://openalex.org/F4320335774","funder_display_name":"Key Technologies Research and Development Program"},{"id":"https://openalex.org/G3126674251","display_name":null,"funder_award_id":"ts20190936","funder_id":"https://openalex.org/F4320326185","funder_display_name":"Taishan Scholar Foundation of Shandong Province"},{"id":"https://openalex.org/G4353863251","display_name":null,"funder_award_id":"52374221","funder_id":"https://openalex.org/F4320321001","funder_display_name":"National Natural Science Foundation of China"},{"id":"https://openalex.org/G5035565962","display_name":null,"funder_award_id":"52574256","funder_id":"https://openalex.org/F4320321001","funder_display_name":"National Natural Science Foundation of China"}],"funders":[{"id":"https://openalex.org/F4320321001","display_name":"National Natural Science Foundation of China","ror":"https://ror.org/01h0zpd94"},{"id":"https://openalex.org/F4320326185","display_name":"Taishan Scholar Foundation of Shandong Province","ror":null},{"id":"https://openalex.org/F4320335774","display_name":"Key Technologies Research and Development Program","ror":null}],"has_content":{"pdf":false,"grobid_xml":false},"content_urls":null,"referenced_works_count":28,"referenced_works":["https://openalex.org/W327452528","https://openalex.org/W1480909796","https://openalex.org/W1996567876","https://openalex.org/W2025411198","https://openalex.org/W2799226481","https://openalex.org/W2948024290","https://openalex.org/W2999501513","https://openalex.org/W3007984939","https://openalex.org/W3127966135","https://openalex.org/W3174544859","https://openalex.org/W3214518579","https://openalex.org/W4251273449","https://openalex.org/W4283379523","https://openalex.org/W4298447450","https://openalex.org/W4308411157","https://openalex.org/W4312651353","https://openalex.org/W4323668066","https://openalex.org/W4360764512","https://openalex.org/W4387321736","https://openalex.org/W4393407125","https://openalex.org/W4393864573","https://openalex.org/W4396234760","https://openalex.org/W4398787797","https://openalex.org/W4399304408","https://openalex.org/W4403892769","https://openalex.org/W4404952897","https://openalex.org/W4408707866","https://openalex.org/W4411552618"],"related_works":[],"abstract_inverted_index":{"Use-After-Free":[0],"(UAF)":[1],"vulnerability":[2,61],"is":[3,93,115,125,153,212],"one":[4],"of":[5,30,77,111,186,203],"the":[6,36,103,120,128,139,142,172,189,207],"common":[7],"vulnerabilities":[8],"in":[9,119],"multi-threaded":[10,79,113],"programs.":[11],"Its":[12],"static":[13,59,107],"detection":[14,62],"methods":[15],"based":[16,64,86],"on":[17,65,87,163],"value":[18,71,108],"flow":[19,72,97,109,146],"analysis":[20,24],"commonly":[21],"show":[22,170],"good":[23],"precision":[25,178,195],"and":[26,44,70,95,130,133,150,165,177,181,194,198,206,217,223],"efficiency.":[27],"However,":[28],"most":[29],"them":[31],"do":[32],"not":[33],"adequately":[34],"consider":[35],"causality":[37,98],"constraints":[38,99,135,152],"caused":[39],"by":[40,214],"different":[41],"concurrency":[42],"primitives":[43],"complex":[45],"control":[46,96,145],"structures,":[47],"which":[48,88],"may":[49],"lead":[50],"to":[51,155],"false":[52],"positives.":[53],"Hence,":[54],"this":[55],"work":[56,160],"proposes":[57],"a":[58,78,89,106,112],"UAF":[60,131,148,157],"method":[63],"an":[66],"improved":[67],"Petri":[68,91,123],"net":[69,92,124],"graph.":[73,140],"Firstly,":[74],"source":[75],"codes":[76],"program":[80,114],"are":[81,100,136,179,196],"transformed":[82],"into":[83],"intermediate":[84],"codes,":[85],"segmented":[90,122],"constructed,":[94,116],"analyzed":[101,137,154],"from":[102,138],"net.":[104],"Then,":[105],"graph":[110],"segment":[117],"information":[118],"corresponding":[121],"associated":[126],"with":[127,221],"graph,":[129],"triggering":[132],"condition-satisfied":[134,151],"Finally,":[141],"compatibility":[143],"among":[144],"causality,":[147],"triggering,":[149],"detect":[156],"vulnerabilities.":[158],"This":[159],"conducts":[161],"experiments":[162],"public":[164],"synthetic":[166],"datasets.":[167],"Experimental":[168],"results":[169],"that":[171],"proposed":[173,190,208],"method\u2019s":[174,191,209],"recall":[175,192],"rate":[176,193],"25%":[180],"33.3%":[182],"higher":[183,200],"than":[184,201],"those":[185,202],"Canary,":[187],"respectively;":[188,205],"3%":[197],"15.1%":[199],"Saber,":[204,224],"time":[210],"complexity":[211],"reduced":[213],"12.6":[215],"ms":[216,219],"21.3":[218],"compared":[220],"Canary":[222],"respectively.":[225]},"counts_by_year":[],"updated_date":"2026-03-27T05:58:40.876381","created_date":"2025-10-15T00:00:00"}