{"id":"https://openalex.org/W7131123823","doi":"https://doi.org/10.1109/cgo68049.2026.11395222","title":"On the Precision of Dynamic Program Fingerprints Based on Performance Counters","display_name":"On the Precision of Dynamic Program Fingerprints Based on Performance Counters","publication_year":2026,"publication_date":"2026-01-31","ids":{"openalex":"https://openalex.org/W7131123823","doi":"https://doi.org/10.1109/cgo68049.2026.11395222"},"language":null,"primary_location":{"id":"doi:10.1109/cgo68049.2026.11395222","is_oa":false,"landing_page_url":"https://doi.org/10.1109/cgo68049.2026.11395222","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"2026 IEEE/ACM International Symposium on Code Generation and Optimization (CGO)","raw_type":"proceedings-article"},"type":"conference-paper","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5074854183","display_name":"Anderson Faustino da Silva","orcid":"https://orcid.org/0000-0002-8588-8197"},"institutions":[{"id":"https://openalex.org/I123443094","display_name":"Universidade Estadual de Maring\u00e1","ror":"https://ror.org/04bqqa360","country_code":"BR","type":"education","lineage":["https://openalex.org/I123443094"]}],"countries":["BR"],"is_corresponding":false,"raw_author_name":"Anderson Faustino Da Silva","raw_affiliation_strings":["UEM,Maring&#x00E1;,Brazil"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"UEM,Maring&#x00E1;,Brazil","institution_ids":["https://openalex.org/I123443094"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5101973892","display_name":"Marcelo Borges Nogueira","orcid":"https://orcid.org/0009-0009-3099-0328"},"institutions":[{"id":"https://openalex.org/I35046152","display_name":"Universidade Federal do Rio Grande do Norte","ror":"https://ror.org/04wn09761","country_code":"BR","type":"education","lineage":["https://openalex.org/I35046152"]}],"countries":["BR"],"is_corresponding":false,"raw_author_name":"Marcelo Borges Nogueira","raw_affiliation_strings":["UFRN,Natal,Brazil"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"UFRN,Natal,Brazil","institution_ids":["https://openalex.org/I35046152"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5057209426","display_name":"S\u00e9rgio Queir\u00f3z de Medeiros","orcid":"https://orcid.org/0000-0002-0759-0926"},"institutions":[{"id":"https://openalex.org/I35046152","display_name":"Universidade Federal do Rio Grande do Norte","ror":"https://ror.org/04wn09761","country_code":"BR","type":"education","lineage":["https://openalex.org/I35046152"]}],"countries":["BR"],"is_corresponding":false,"raw_author_name":"S\u00e9rgio Queiroz De Medeiros","raw_affiliation_strings":["UFRN,Natal,Brazil"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"UFRN,Natal,Brazil","institution_ids":["https://openalex.org/I35046152"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5126597761","display_name":"Jeronimo Castrillon","orcid":null},"institutions":[{"id":"https://openalex.org/I78650965","display_name":"Technische Universit\u00e4t Dresden","ror":"https://ror.org/042aqky30","country_code":"DE","type":"education","lineage":["https://openalex.org/I78650965"]}],"countries":["DE"],"is_corresponding":false,"raw_author_name":"Jeronimo Castrillon","raw_affiliation_strings":["TU Dresden,Dresden,Germany"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"TU Dresden,Dresden,Germany","institution_ids":["https://openalex.org/I78650965"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5078149140","display_name":"Fernando Magno Quint\u00e3o Pereira","orcid":"https://orcid.org/0000-0002-0375-1657"},"institutions":[{"id":"https://openalex.org/I110200422","display_name":"Universidade Federal de Minas Gerais","ror":"https://ror.org/0176yjw32","country_code":"BR","type":"education","lineage":["https://openalex.org/I110200422"]},{"id":"https://openalex.org/I4210107309","display_name":"Faculdade de Ci\u00eancias M\u00e9dicas de Minas Gerais","ror":"https://ror.org/01p7p3890","country_code":"BR","type":"education","lineage":["https://openalex.org/I4210107309"]}],"countries":["BR"],"is_corresponding":false,"raw_author_name":"Fernando Magno Quint\u00e3o Pereira","raw_affiliation_strings":["UFMG,Belo Horizonte,Brazil"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"UFMG,Belo Horizonte,Brazil","institution_ids":["https://openalex.org/I110200422","https://openalex.org/I4210107309"]}]}],"institutions":[],"countries_distinct_count":2,"institutions_distinct_count":5,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":0.0,"has_fulltext":false,"cited_by_count":0,"citation_normalized_percentile":{"value":0.11693002,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":null,"biblio":{"volume":null,"issue":null,"first_page":"507","last_page":"519"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10054","display_name":"Parallel Computing and Optimization Techniques","score":0.20149999856948853,"subfield":{"id":"https://openalex.org/subfields/1708","display_name":"Hardware and Architecture"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T10054","display_name":"Parallel Computing and Optimization Techniques","score":0.20149999856948853,"subfield":{"id":"https://openalex.org/subfields/1708","display_name":"Hardware and Architecture"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10126","display_name":"Logic, programming, and type systems","score":0.12770000100135803,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11424","display_name":"Security and Verification in Computing","score":0.10790000110864639,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/classifier","display_name":"Classifier (UML)","score":0.5863999724388123},{"id":"https://openalex.org/keywords/binary-number","display_name":"Binary number","score":0.5077999830245972},{"id":"https://openalex.org/keywords/obfuscation","display_name":"Obfuscation","score":0.5074999928474426},{"id":"https://openalex.org/keywords/dynamic-program-analysis","display_name":"Dynamic program analysis","score":0.48190000653266907},{"id":"https://openalex.org/keywords/overhead","display_name":"Overhead (engineering)","score":0.47360000014305115},{"id":"https://openalex.org/keywords/redundancy","display_name":"Redundancy (engineering)","score":0.44369998574256897},{"id":"https://openalex.org/keywords/binary-classification","display_name":"Binary classification","score":0.43810001015663147},{"id":"https://openalex.org/keywords/histogram","display_name":"Histogram","score":0.42829999327659607},{"id":"https://openalex.org/keywords/malware","display_name":"Malware","score":0.42809998989105225}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.7803000211715698},{"id":"https://openalex.org/C95623464","wikidata":"https://www.wikidata.org/wiki/Q1096149","display_name":"Classifier (UML)","level":2,"score":0.5863999724388123},{"id":"https://openalex.org/C48372109","wikidata":"https://www.wikidata.org/wiki/Q3913","display_name":"Binary number","level":2,"score":0.5077999830245972},{"id":"https://openalex.org/C40305131","wikidata":"https://www.wikidata.org/wiki/Q2616305","display_name":"Obfuscation","level":2,"score":0.5074999928474426},{"id":"https://openalex.org/C140006998","wikidata":"https://www.wikidata.org/wiki/Q2499307","display_name":"Dynamic program analysis","level":3,"score":0.48190000653266907},{"id":"https://openalex.org/C119857082","wikidata":"https://www.wikidata.org/wiki/Q2539","display_name":"Machine learning","level":1,"score":0.48069998621940613},{"id":"https://openalex.org/C2779960059","wikidata":"https://www.wikidata.org/wiki/Q7113681","display_name":"Overhead (engineering)","level":2,"score":0.47360000014305115},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.44859999418258667},{"id":"https://openalex.org/C152124472","wikidata":"https://www.wikidata.org/wiki/Q1204361","display_name":"Redundancy (engineering)","level":2,"score":0.44369998574256897},{"id":"https://openalex.org/C66905080","wikidata":"https://www.wikidata.org/wiki/Q17005494","display_name":"Binary classification","level":3,"score":0.43810001015663147},{"id":"https://openalex.org/C53533937","wikidata":"https://www.wikidata.org/wiki/Q185020","display_name":"Histogram","level":3,"score":0.42829999327659607},{"id":"https://openalex.org/C541664917","wikidata":"https://www.wikidata.org/wiki/Q14001","display_name":"Malware","level":2,"score":0.42809998989105225},{"id":"https://openalex.org/C2776760102","wikidata":"https://www.wikidata.org/wiki/Q5139990","display_name":"Code (set theory)","level":3,"score":0.397599995136261},{"id":"https://openalex.org/C63435697","wikidata":"https://www.wikidata.org/wiki/Q864135","display_name":"Binary code","level":3,"score":0.3903000056743622},{"id":"https://openalex.org/C97686452","wikidata":"https://www.wikidata.org/wiki/Q7604153","display_name":"Static analysis","level":2,"score":0.3869999945163727},{"id":"https://openalex.org/C124101348","wikidata":"https://www.wikidata.org/wiki/Q172491","display_name":"Data mining","level":1,"score":0.38679999113082886},{"id":"https://openalex.org/C3309909","wikidata":"https://www.wikidata.org/wiki/Q864155","display_name":"Binary decision diagram","level":2,"score":0.38440001010894775},{"id":"https://openalex.org/C2777256151","wikidata":"https://www.wikidata.org/wiki/Q7897273","display_name":"Unpacking","level":2,"score":0.3822999894618988},{"id":"https://openalex.org/C43126263","wikidata":"https://www.wikidata.org/wiki/Q128751","display_name":"Source code","level":2,"score":0.35600000619888306},{"id":"https://openalex.org/C153180895","wikidata":"https://www.wikidata.org/wiki/Q7148389","display_name":"Pattern recognition (psychology)","level":2,"score":0.3391999900341034},{"id":"https://openalex.org/C113775141","wikidata":"https://www.wikidata.org/wiki/Q428691","display_name":"Computer engineering","level":1,"score":0.32690000534057617},{"id":"https://openalex.org/C2780451532","wikidata":"https://www.wikidata.org/wiki/Q759676","display_name":"Task (project management)","level":2,"score":0.32030001282691956},{"id":"https://openalex.org/C2776359362","wikidata":"https://www.wikidata.org/wiki/Q2145286","display_name":"Representation (politics)","level":3,"score":0.30550000071525574},{"id":"https://openalex.org/C75294576","wikidata":"https://www.wikidata.org/wiki/Q5165192","display_name":"Contextual image classification","level":3,"score":0.29100000858306885},{"id":"https://openalex.org/C98183937","wikidata":"https://www.wikidata.org/wiki/Q2112188","display_name":"Program analysis","level":2,"score":0.28929999470710754},{"id":"https://openalex.org/C118530786","wikidata":"https://www.wikidata.org/wiki/Q1134732","display_name":"Instrumentation (computer programming)","level":2,"score":0.2888000011444092},{"id":"https://openalex.org/C207850805","wikidata":"https://www.wikidata.org/wiki/Q269608","display_name":"Reverse engineering","level":2,"score":0.27810001373291016},{"id":"https://openalex.org/C137287247","wikidata":"https://www.wikidata.org/wiki/Q1329550","display_name":"Static program analysis","level":4,"score":0.2766000032424927},{"id":"https://openalex.org/C37736160","wikidata":"https://www.wikidata.org/wiki/Q1801315","display_name":"Adversarial system","level":2,"score":0.2619999945163727},{"id":"https://openalex.org/C46686674","wikidata":"https://www.wikidata.org/wiki/Q466303","display_name":"Boosting (machine learning)","level":2,"score":0.25859999656677246},{"id":"https://openalex.org/C2779395397","wikidata":"https://www.wikidata.org/wiki/Q15731404","display_name":"Malware analysis","level":3,"score":0.250900000333786}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1109/cgo68049.2026.11395222","is_oa":false,"landing_page_url":"https://doi.org/10.1109/cgo68049.2026.11395222","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"2026 IEEE/ACM International Symposium on Code Generation and Optimization (CGO)","raw_type":"proceedings-article"}],"best_oa_location":null,"sustainable_development_goals":[],"awards":[],"funders":[{"id":"https://openalex.org/F4320308239","display_name":"EMI","ror":"https://ror.org/01qstkr73"}],"has_content":{"grobid_xml":false,"pdf":false},"content_urls":null,"referenced_works_count":40,"referenced_works":["https://openalex.org/W1942295288","https://openalex.org/W1978813754","https://openalex.org/W2060164640","https://openalex.org/W2096961019","https://openalex.org/W2119438786","https://openalex.org/W2142079700","https://openalex.org/W2145705994","https://openalex.org/W2160844513","https://openalex.org/W2170467352","https://openalex.org/W2171539112","https://openalex.org/W2282866165","https://openalex.org/W2901689459","https://openalex.org/W2926178846","https://openalex.org/W2932551155","https://openalex.org/W2939686442","https://openalex.org/W2963935794","https://openalex.org/W2964150020","https://openalex.org/W3007205676","https://openalex.org/W3007413911","https://openalex.org/W3047867423","https://openalex.org/W3092300773","https://openalex.org/W3097813857","https://openalex.org/W3153398259","https://openalex.org/W3193122818","https://openalex.org/W3206733312","https://openalex.org/W4247464060","https://openalex.org/W4249297534","https://openalex.org/W4252684946","https://openalex.org/W4255185178","https://openalex.org/W4306145873","https://openalex.org/W4313137049","https://openalex.org/W4321496253","https://openalex.org/W4386833013","https://openalex.org/W4390751813","https://openalex.org/W4394745170","https://openalex.org/W4396860941","https://openalex.org/W4407942926","https://openalex.org/W4408219068","https://openalex.org/W4411348502","https://openalex.org/W7131131659"],"related_works":[],"abstract_inverted_index":{"Task":[0],"classification":[1,65,102,215],"is":[2,17,66],"the":[3,12,38,41,44,48,52,56,86,113,151,168,191,196,226],"challenge":[4,225],"of":[5,47,89,94,100,153,164,193],"determining":[6],"whether":[7],"two":[8],"binary":[9,45,137],"programs":[10,74],"perform":[11],"same":[13],"task.":[14],"This":[15,78,139],"problem":[16],"essential":[18],"in":[19,51,70,190,239],"scenarios":[20],"such":[21,91,120,241],"as":[22,92,121,130,132,242],"malware":[23],"identification,":[24],"plagiarism":[25],"detection,":[26],"and":[27,162,207,247],"redundancy":[28],"elimination.":[29],"Classification":[30],"can":[31,124],"be":[32,76,237],"performed":[33],"statically":[34],"or":[35],"dynamically.":[36],"In":[37],"former":[39],"case,":[40],"classifier":[42],"analyzes":[43],"image":[46],"program,":[49],"whereas":[50],"latter":[53],"it":[54],"observes":[55],"program\u2019s":[57],"execution.":[58],"Recent":[59],"research":[60],"has":[61],"demonstrated":[62],"that":[63,229],"dynamic":[64,101,118,230],"more":[67],"accurate,":[68],"particularly":[69,189],"adversarial":[71],"settings":[72],"where":[73],"may":[75],"obfuscated.":[77],"remains":[79],"true":[80],"even":[81],"when":[82],"both":[83,160],"classifiers":[84,171,199,232],"use":[85],"exact":[87],"representation":[88],"programs,":[90],"histograms":[93],"instruction":[95],"opcodes.":[96],"The":[97],"superior":[98],"accuracy":[99,184],"stems":[103],"from":[104],"its":[105],"ability":[106],"to":[107,136,142,213,236],"disregard":[108],"dead":[109],"code":[110,231],"inserted":[111],"during":[112],"obfuscation":[114],"process.":[115],"However,":[116],"state-of-the-art":[117],"techniques,":[119],"Valgrind":[122],"plugins,":[123],"slow":[125],"down":[126],"program":[127,148],"execution":[128],"by":[129,146],"much":[131],"100":[133],"times":[134],"due":[135],"instrumentation.":[138],"paper":[140],"proposes":[141],"eliminate":[143],"this":[144,165],"overhead":[145,180],"replacing":[147],"instrumentation":[149],"with":[150],"sampling":[152],"hardware":[154,174],"performance":[155],"counters.":[156],"Our":[157],"findings":[158],"reveal":[159],"advantages":[161],"limitations":[163],"approach.":[166],"On":[167,195],"positive":[169],"side,":[170],"based":[172],"on":[173],"counters":[175],"impose":[176],"almost":[177],"no":[178],"runtime":[179],"while":[181],"retaining":[182],"greater":[183],"than":[185,204,217],"purely":[186],"static":[187],"classifiers,":[188],"presence":[192],"obfuscation.":[194],"downside,":[197],"counter-based":[198],"are":[200,233],"slightly":[201],"less":[202],"accurate":[203],"instrumentation-based":[205],"approaches":[206],"offer":[208],"coarser":[209],"granularity,":[210],"being":[211],"limited":[212],"whole-program":[214],"rather":[216],"individual":[218],"functions.":[219],"Despite":[220],"these":[221],"limitations,":[222],"our":[223],"results":[224],"conventional":[227],"belief":[228],"too":[234],"costly":[235],"deployed":[238],"environments":[240],"online":[243],"servers,":[244],"operating":[245],"systems,":[246],"virtual":[248],"machines.":[249]},"counts_by_year":[],"updated_date":"2026-07-29T14:22:42.915294","created_date":"2026-02-24T00:00:00"}
