{"id":"https://openalex.org/W4290996340","doi":"https://doi.org/10.1109/icc45855.2022.9839008","title":"Finding Vulnerabilities in Internal-binary of Firmware with Clues","display_name":"Finding Vulnerabilities in Internal-binary of Firmware with Clues","publication_year":2022,"publication_date":"2022-05-16","ids":{"openalex":"https://openalex.org/W4290996340","doi":"https://doi.org/10.1109/icc45855.2022.9839008"},"language":"en","primary_location":{"id":"doi:10.1109/icc45855.2022.9839008","is_oa":false,"landing_page_url":"https://doi.org/10.1109/icc45855.2022.9839008","pdf_url":null,"source":{"id":"https://openalex.org/S4363607711","display_name":"ICC 2022 - IEEE International Conference on Communications","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":null,"host_organization_name":null,"host_organization_lineage":[],"host_organization_lineage_names":[],"type":"conference"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"ICC 2022 - IEEE International Conference on Communications","raw_type":"proceedings-article"},"type":"conference-paper","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5037451675","display_name":"Puzhuo Liu","orcid":"https://orcid.org/0000-0002-8995-5924"},"institutions":[{"id":"https://openalex.org/I4210156404","display_name":"Institute of Information Engineering","ror":"https://ror.org/04r53se39","country_code":"CN","type":"facility","lineage":["https://openalex.org/I19820366","https://openalex.org/I4210156404"]},{"id":"https://openalex.org/I4210165038","display_name":"University of Chinese Academy of Sciences","ror":"https://ror.org/05qbk4x57","country_code":"CN","type":"education","lineage":["https://openalex.org/I19820366","https://openalex.org/I4210165038"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Puzhuo Liu","raw_affiliation_strings":["Institute of Information Engineering,CAS,China","School of Cyber Security, University of Chinese Academy of Sciences, China","CAS, Institute of Information Engineering, China"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Institute of Information Engineering,CAS,China","institution_ids":["https://openalex.org/I4210156404"]},{"raw_affiliation_string":"School of Cyber Security, University of Chinese Academy of Sciences, China","institution_ids":["https://openalex.org/I4210165038"]},{"raw_affiliation_string":"CAS, Institute of Information Engineering, China","institution_ids":["https://openalex.org/I4210156404"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5008957254","display_name":"Dong-Liang Fang","orcid":"https://orcid.org/0000-0002-9669-7994"},"institutions":[{"id":"https://openalex.org/I4210156404","display_name":"Institute of Information Engineering","ror":"https://ror.org/04r53se39","country_code":"CN","type":"facility","lineage":["https://openalex.org/I19820366","https://openalex.org/I4210156404"]},{"id":"https://openalex.org/I4210165038","display_name":"University of Chinese Academy of Sciences","ror":"https://ror.org/05qbk4x57","country_code":"CN","type":"education","lineage":["https://openalex.org/I19820366","https://openalex.org/I4210165038"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Dongliang Fang","raw_affiliation_strings":["Institute of Information Engineering,CAS,China","School of Cyber Security, University of Chinese Academy of Sciences, China","CAS, Institute of Information Engineering, China"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Institute of Information Engineering,CAS,China","institution_ids":["https://openalex.org/I4210156404"]},{"raw_affiliation_string":"School of Cyber Security, University of Chinese Academy of Sciences, China","institution_ids":["https://openalex.org/I4210165038"]},{"raw_affiliation_string":"CAS, Institute of Information Engineering, China","institution_ids":["https://openalex.org/I4210156404"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5007659962","display_name":"Chuan Qin","orcid":"https://orcid.org/0000-0002-4851-6474"},"institutions":[{"id":"https://openalex.org/I4210156404","display_name":"Institute of Information Engineering","ror":"https://ror.org/04r53se39","country_code":"CN","type":"facility","lineage":["https://openalex.org/I19820366","https://openalex.org/I4210156404"]},{"id":"https://openalex.org/I4210165038","display_name":"University of Chinese Academy of Sciences","ror":"https://ror.org/05qbk4x57","country_code":"CN","type":"education","lineage":["https://openalex.org/I19820366","https://openalex.org/I4210165038"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Chuan Qin","raw_affiliation_strings":["Institute of Information Engineering,CAS,China","CAS, Institute of Information Engineering, China","School of Cyber Security, University of Chinese Academy of Sciences, China"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Institute of Information Engineering,CAS,China","institution_ids":["https://openalex.org/I4210156404"]},{"raw_affiliation_string":"CAS, Institute of Information Engineering, China","institution_ids":["https://openalex.org/I4210156404"]},{"raw_affiliation_string":"School of Cyber Security, University of Chinese Academy of Sciences, China","institution_ids":["https://openalex.org/I4210165038"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5101761689","display_name":"Kai Cheng","orcid":"https://orcid.org/0000-0002-4340-8482"},"institutions":[{"id":"https://openalex.org/I4210156404","display_name":"Institute of Information Engineering","ror":"https://ror.org/04r53se39","country_code":"CN","type":"facility","lineage":["https://openalex.org/I19820366","https://openalex.org/I4210156404"]},{"id":"https://openalex.org/I4210165038","display_name":"University of Chinese Academy of Sciences","ror":"https://ror.org/05qbk4x57","country_code":"CN","type":"education","lineage":["https://openalex.org/I19820366","https://openalex.org/I4210165038"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Kai Cheng","raw_affiliation_strings":["Institute of Information Engineering,CAS,China","School of Cyber Security, University of Chinese Academy of Sciences, China","CAS, Institute of Information Engineering, China"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Institute of Information Engineering,CAS,China","institution_ids":["https://openalex.org/I4210156404"]},{"raw_affiliation_string":"School of Cyber Security, University of Chinese Academy of Sciences, China","institution_ids":["https://openalex.org/I4210165038"]},{"raw_affiliation_string":"CAS, Institute of Information Engineering, China","institution_ids":["https://openalex.org/I4210156404"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5102025291","display_name":"Shichao Lv","orcid":"https://orcid.org/0000-0002-0549-0999"},"institutions":[{"id":"https://openalex.org/I4210156404","display_name":"Institute of Information Engineering","ror":"https://ror.org/04r53se39","country_code":"CN","type":"facility","lineage":["https://openalex.org/I19820366","https://openalex.org/I4210156404"]},{"id":"https://openalex.org/I4210165038","display_name":"University of Chinese Academy of Sciences","ror":"https://ror.org/05qbk4x57","country_code":"CN","type":"education","lineage":["https://openalex.org/I19820366","https://openalex.org/I4210165038"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Shichao Lv","raw_affiliation_strings":["Institute of Information Engineering,CAS,China","CAS, Institute of Information Engineering, China","School of Cyber Security, University of Chinese Academy of Sciences, China"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Institute of Information Engineering,CAS,China","institution_ids":["https://openalex.org/I4210156404"]},{"raw_affiliation_string":"CAS, Institute of Information Engineering, China","institution_ids":["https://openalex.org/I4210156404"]},{"raw_affiliation_string":"School of Cyber Security, University of Chinese Academy of Sciences, China","institution_ids":["https://openalex.org/I4210165038"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5087012171","display_name":"Hongsong Zhu","orcid":"https://orcid.org/0000-0003-3720-7403"},"institutions":[{"id":"https://openalex.org/I4210156404","display_name":"Institute of Information Engineering","ror":"https://ror.org/04r53se39","country_code":"CN","type":"facility","lineage":["https://openalex.org/I19820366","https://openalex.org/I4210156404"]},{"id":"https://openalex.org/I4210165038","display_name":"University of Chinese Academy of Sciences","ror":"https://ror.org/05qbk4x57","country_code":"CN","type":"education","lineage":["https://openalex.org/I19820366","https://openalex.org/I4210165038"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Hongsong Zhu","raw_affiliation_strings":["Institute of Information Engineering,CAS,China","CAS, Institute of Information Engineering, China","School of Cyber Security, University of Chinese Academy of Sciences, China"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Institute of Information Engineering,CAS,China","institution_ids":["https://openalex.org/I4210156404"]},{"raw_affiliation_string":"CAS, Institute of Information Engineering, China","institution_ids":["https://openalex.org/I4210156404"]},{"raw_affiliation_string":"School of Cyber Security, University of Chinese Academy of Sciences, China","institution_ids":["https://openalex.org/I4210165038"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5061643975","display_name":"Limin Sun","orcid":"https://orcid.org/0000-0003-2745-7521"},"institutions":[{"id":"https://openalex.org/I4210156404","display_name":"Institute of Information Engineering","ror":"https://ror.org/04r53se39","country_code":"CN","type":"facility","lineage":["https://openalex.org/I19820366","https://openalex.org/I4210156404"]},{"id":"https://openalex.org/I4210165038","display_name":"University of Chinese Academy of Sciences","ror":"https://ror.org/05qbk4x57","country_code":"CN","type":"education","lineage":["https://openalex.org/I19820366","https://openalex.org/I4210165038"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Limin Sun","raw_affiliation_strings":["Institute of Information Engineering,CAS,China","CAS, Institute of Information Engineering, China","School of Cyber Security, University of Chinese Academy of Sciences, China"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Institute of Information Engineering,CAS,China","institution_ids":["https://openalex.org/I4210156404"]},{"raw_affiliation_string":"CAS, Institute of Information Engineering, China","institution_ids":["https://openalex.org/I4210156404"]},{"raw_affiliation_string":"School of Cyber Security, University of Chinese Academy of Sciences, China","institution_ids":["https://openalex.org/I4210165038"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":2,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":null,"has_fulltext":false,"cited_by_count":8,"citation_normalized_percentile":null,"cited_by_percentile_year":null,"biblio":{"volume":null,"issue":null,"first_page":"5397","last_page":"5402"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":0.9998000264167786,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":0.9998000264167786,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11424","display_name":"Security and Verification in Computing","score":0.9987999796867371,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":0.9983999729156494,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/firmware","display_name":"Firmware","score":0.8332834243774414},{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.7102488875389099},{"id":"https://openalex.org/keywords/binary-number","display_name":"Binary number","score":0.43018007278442383},{"id":"https://openalex.org/keywords/computer-security","display_name":"Computer security","score":0.33777326345443726},{"id":"https://openalex.org/keywords/operating-system","display_name":"Operating system","score":0.11193731427192688},{"id":"https://openalex.org/keywords/arithmetic","display_name":"Arithmetic","score":0.07705998420715332},{"id":"https://openalex.org/keywords/mathematics","display_name":"Mathematics","score":0.07530826330184937}],"concepts":[{"id":"https://openalex.org/C67212190","wikidata":"https://www.wikidata.org/wiki/Q104851","display_name":"Firmware","level":2,"score":0.8332834243774414},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.7102488875389099},{"id":"https://openalex.org/C48372109","wikidata":"https://www.wikidata.org/wiki/Q3913","display_name":"Binary number","level":2,"score":0.43018007278442383},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.33777326345443726},{"id":"https://openalex.org/C111919701","wikidata":"https://www.wikidata.org/wiki/Q9135","display_name":"Operating system","level":1,"score":0.11193731427192688},{"id":"https://openalex.org/C94375191","wikidata":"https://www.wikidata.org/wiki/Q11205","display_name":"Arithmetic","level":1,"score":0.07705998420715332},{"id":"https://openalex.org/C33923547","wikidata":"https://www.wikidata.org/wiki/Q395","display_name":"Mathematics","level":0,"score":0.07530826330184937}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1109/icc45855.2022.9839008","is_oa":false,"landing_page_url":"https://doi.org/10.1109/icc45855.2022.9839008","pdf_url":null,"source":{"id":"https://openalex.org/S4363607711","display_name":"ICC 2022 - IEEE International Conference on Communications","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":null,"host_organization_name":null,"host_organization_lineage":[],"host_organization_lineage_names":[],"type":"conference"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"ICC 2022 - IEEE International Conference on Communications","raw_type":"proceedings-article"}],"best_oa_location":null,"sustainable_development_goals":[{"id":"https://metadata.un.org/sdg/16","score":0.7400000095367432,"display_name":"Peace, Justice and strong institutions"}],"awards":[],"funders":[{"id":"https://openalex.org/F4320321001","display_name":"National Natural Science Foundation of China","ror":"https://ror.org/01h0zpd94"}],"has_content":{"grobid_xml":false,"pdf":false},"content_urls":null,"referenced_works_count":14,"referenced_works":["https://openalex.org/W1694077306","https://openalex.org/W2039427951","https://openalex.org/W2091939272","https://openalex.org/W2748868501","https://openalex.org/W2791018263","https://openalex.org/W2882992559","https://openalex.org/W2965272007","https://openalex.org/W2965717902","https://openalex.org/W3015383024","https://openalex.org/W3155102819","https://openalex.org/W6637594488","https://openalex.org/W6743493502","https://openalex.org/W6765985745","https://openalex.org/W6766830175"],"related_works":["https://openalex.org/W4391375266","https://openalex.org/W2748952813","https://openalex.org/W2582981600","https://openalex.org/W4389238932","https://openalex.org/W4387467152","https://openalex.org/W4212885212","https://openalex.org/W4379115910","https://openalex.org/W3010413952","https://openalex.org/W4253989935","https://openalex.org/W2810560948"],"abstract_inverted_index":{"Embedded":[0],"devices,":[1,7],"represented":[2],"by":[3,33],"Internet":[4,156],"of":[5,19,68],"Things":[6],"bring":[8],"great":[9],"convenience":[10],"to":[11,57,75,94,102,106,121,132,169],"our":[12,176],"daily":[13],"life.":[14],"Firmware":[15],"is":[16],"the":[17,20,27,36,66,96,110,115,123,129,138,143,150],"core":[18],"embedded":[21],"device":[22],"operation.":[23],"However,":[24],"vulnerabilities":[25,46],"in":[26,47,128,192],"firmware":[28,130],"can":[29],"be":[30],"exploited":[31],"remotely":[32],"hackers":[34],"through":[35],"network.":[37],"Unfortunately,":[38],"existing":[39],"methods":[40],"are":[41],"only":[42],"suitable":[43],"for":[44],"finding":[45],"binaries":[48,59,127],"(border-binary)":[49],"that":[50,61,153],"interact":[51,63],"directly":[52],"with":[53,64,181],"users.":[54],"When":[55],"applied":[56],"other":[58],"(internal-binary)":[60],"indirectly":[62],"users,":[65],"lack":[67],"analysis":[69,92,163],"sources":[70],"and":[71,79,117,174],"constraint":[72],"conditions":[73],"leads":[74],"many":[76],"false":[77,80],"negatives":[78],"positives.":[81],"In":[82],"this":[83],"paper,":[84],"we":[85,99,113,146,159],"propose":[86],"a":[87,183],"new":[88],"keyword-sensitive":[89],"data":[90,194],"flow":[91],"approach":[93],"address":[95],"challenge.":[97],"Specifically,":[98],"leverage":[100],"crawlers":[101],"collect":[103],"clues":[104,116],"related":[105],"vulnerability":[107],"reports":[108],"from":[109],"Internet.":[111],"Then":[112],"use":[114],"communication":[118],"paradigm":[119],"finders":[120],"establish":[122],"relationship":[124],"between":[125],"different":[126],"sample":[131],"form":[133],"binary":[134,151,166],"dependency":[135,167],"graphs.":[136],"At":[137],"same":[139],"time,":[140],"based":[141,164],"on":[142,165],"functional":[144],"features,":[145],"further":[147],"dig":[148],"out":[149],"relationships":[152],"have":[154],"no":[155],"clues.":[157],"Finally,":[158],"perform":[160],"static":[161],"taint":[162],"graphs":[168],"determine":[170],"vulnerabilities.":[171],"We":[172],"implemented":[173],"evaluated":[175],"prototype":[177],"system":[178],"FBI.":[179],"Compared":[180],"Karonte,":[182],"state-of-the-art":[184],"tool,":[185],"FBI":[186],"found":[187],"significantly":[188],"more":[189],"true":[190],"positives":[191],"Karonte\u2019s":[193],"set.":[195]},"counts_by_year":[{"year":2026,"cited_by_count":2},{"year":2025,"cited_by_count":6}],"updated_date":"2026-07-14T23:27:15.235271","created_date":"2025-10-10T00:00:00"}