{"id":"https://openalex.org/W4405102828","doi":"https://doi.org/10.1109/milcom61039.2024.10773925","title":"GrizzlyBay: Retroactive SBOM with Automated Identification for Legacy Binaries","display_name":"GrizzlyBay: Retroactive SBOM with Automated Identification for Legacy Binaries","publication_year":2024,"publication_date":"2024-10-28","ids":{"openalex":"https://openalex.org/W4405102828","doi":"https://doi.org/10.1109/milcom61039.2024.10773925"},"language":"en","primary_location":{"id":"doi:10.1109/milcom61039.2024.10773925","is_oa":false,"landing_page_url":"https://doi.org/10.1109/milcom61039.2024.10773925","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"MILCOM 2024 - 2024 IEEE Military Communications Conference (MILCOM)","raw_type":"proceedings-article"},"type":"article","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5054561146","display_name":"Junghwan Rhee","orcid":"https://orcid.org/0000-0002-4043-9371"},"institutions":[{"id":"https://openalex.org/I139325414","display_name":"University of Central Oklahoma","ror":"https://ror.org/02n455404","country_code":"US","type":"education","lineage":["https://openalex.org/I139325414"]}],"countries":["US"],"is_corresponding":true,"raw_author_name":"Junghwan \u201cJohn\u201d Rhee","raw_affiliation_strings":["University of Central Oklahoma,Edmond,OK,U.S.A.,73034"],"affiliations":[{"raw_affiliation_string":"University of Central Oklahoma,Edmond,OK,U.S.A.,73034","institution_ids":["https://openalex.org/I139325414"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5027974592","display_name":"Fei Zuo","orcid":null},"institutions":[{"id":"https://openalex.org/I139325414","display_name":"University of Central Oklahoma","ror":"https://ror.org/02n455404","country_code":"US","type":"education","lineage":["https://openalex.org/I139325414"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Fei Zuo","raw_affiliation_strings":["University of Central Oklahoma,Edmond,OK,U.S.A.,73034"],"affiliations":[{"raw_affiliation_string":"University of Central Oklahoma,Edmond,OK,U.S.A.,73034","institution_ids":["https://openalex.org/I139325414"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5115028898","display_name":"Cody Tompkins","orcid":null},"institutions":[{"id":"https://openalex.org/I139325414","display_name":"University of Central Oklahoma","ror":"https://ror.org/02n455404","country_code":"US","type":"education","lineage":["https://openalex.org/I139325414"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Cody Tompkins","raw_affiliation_strings":["University of Central Oklahoma,Edmond,OK,U.S.A.,73034"],"affiliations":[{"raw_affiliation_string":"University of Central Oklahoma,Edmond,OK,U.S.A.,73034","institution_ids":["https://openalex.org/I139325414"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5104225045","display_name":"Jeehyun Oh","orcid":null},"institutions":[{"id":"https://openalex.org/I139325414","display_name":"University of Central Oklahoma","ror":"https://ror.org/02n455404","country_code":"US","type":"education","lineage":["https://openalex.org/I139325414"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Jeehyun Oh","raw_affiliation_strings":["University of Central Oklahoma,Edmond,OK,U.S.A.,73034"],"affiliations":[{"raw_affiliation_string":"University of Central Oklahoma,Edmond,OK,U.S.A.,73034","institution_ids":["https://openalex.org/I139325414"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5109767496","display_name":"Yung Ryn Choe","orcid":"https://orcid.org/0000-0001-6114-054X"},"institutions":[{"id":"https://openalex.org/I192454743","display_name":"Sandia National Laboratories California","ror":"https://ror.org/058m7ey48","country_code":"US","type":"facility","lineage":["https://openalex.org/I1330989302","https://openalex.org/I1330989302","https://openalex.org/I192454743","https://openalex.org/I198811213","https://openalex.org/I198811213","https://openalex.org/I4210104735"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Yung Ryn Choe","raw_affiliation_strings":["Sandia National Laboratories,Livermore,CA,USA,94551"],"affiliations":[{"raw_affiliation_string":"Sandia National Laboratories,Livermore,CA,USA,94551","institution_ids":["https://openalex.org/I192454743"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":5,"corresponding_author_ids":["https://openalex.org/A5054561146"],"corresponding_institution_ids":["https://openalex.org/I139325414"],"apc_list":null,"apc_paid":null,"fwci":0.0,"has_fulltext":false,"cited_by_count":0,"citation_normalized_percentile":{"value":0.1398459,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":null,"biblio":{"volume":null,"issue":null,"first_page":"437","last_page":"444"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11915","display_name":"Pickering emulsions and particle stabilization","score":0.7480000257492065,"subfield":{"id":"https://openalex.org/subfields/2505","display_name":"Materials Chemistry"},"field":{"id":"https://openalex.org/fields/25","display_name":"Materials Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11915","display_name":"Pickering emulsions and particle stabilization","score":0.7480000257492065,"subfield":{"id":"https://openalex.org/subfields/2505","display_name":"Materials Chemistry"},"field":{"id":"https://openalex.org/fields/25","display_name":"Materials Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10015","display_name":"Genomics and Phylogenetic Studies","score":0.7275999784469604,"subfield":{"id":"https://openalex.org/subfields/1312","display_name":"Molecular Biology"},"field":{"id":"https://openalex.org/fields/13","display_name":"Biochemistry, Genetics and Molecular Biology"},"domain":{"id":"https://openalex.org/domains/1","display_name":"Life Sciences"}},{"id":"https://openalex.org/T11269","display_name":"Algorithms and Data Compression","score":0.6328999996185303,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.6667731404304504},{"id":"https://openalex.org/keywords/identification","display_name":"Identification (biology)","score":0.5763154029846191}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.6667731404304504},{"id":"https://openalex.org/C116834253","wikidata":"https://www.wikidata.org/wiki/Q2039217","display_name":"Identification (biology)","level":2,"score":0.5763154029846191},{"id":"https://openalex.org/C86803240","wikidata":"https://www.wikidata.org/wiki/Q420","display_name":"Biology","level":0,"score":0.0},{"id":"https://openalex.org/C59822182","wikidata":"https://www.wikidata.org/wiki/Q441","display_name":"Botany","level":1,"score":0.0}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1109/milcom61039.2024.10773925","is_oa":false,"landing_page_url":"https://doi.org/10.1109/milcom61039.2024.10773925","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"MILCOM 2024 - 2024 IEEE Military Communications Conference (MILCOM)","raw_type":"proceedings-article"}],"best_oa_location":null,"sustainable_development_goals":[],"awards":[],"funders":[{"id":"https://openalex.org/F4320306084","display_name":"U.S. Department of Energy","ror":"https://ror.org/01bj3aw27"}],"has_content":{"grobid_xml":false,"pdf":false},"content_urls":null,"referenced_works_count":28,"referenced_works":["https://openalex.org/W1690253345","https://openalex.org/W1942295288","https://openalex.org/W2021963610","https://openalex.org/W2414803796","https://openalex.org/W2529133275","https://openalex.org/W2555855703","https://openalex.org/W2619017101","https://openalex.org/W2749008552","https://openalex.org/W2768013588","https://openalex.org/W2781491433","https://openalex.org/W2785134958","https://openalex.org/W2885030880","https://openalex.org/W2886694146","https://openalex.org/W2901689459","https://openalex.org/W2926178846","https://openalex.org/W2997915791","https://openalex.org/W3007413911","https://openalex.org/W3085755012","https://openalex.org/W3166095789","https://openalex.org/W4229641819","https://openalex.org/W4365505517","https://openalex.org/W4384345766","https://openalex.org/W4386977908","https://openalex.org/W4389544232","https://openalex.org/W4401609668","https://openalex.org/W6679775712","https://openalex.org/W6697873463","https://openalex.org/W6754369729"],"related_works":["https://openalex.org/W4391375266","https://openalex.org/W2899084033","https://openalex.org/W2748952813","https://openalex.org/W2390279801","https://openalex.org/W4391913857","https://openalex.org/W2358668433","https://openalex.org/W4396701345","https://openalex.org/W2376932109","https://openalex.org/W2001405890","https://openalex.org/W4396696052"],"abstract_inverted_index":{"Software":[0],"Bill":[1],"of":[2,16,38,45,86,98,111,138],"Material":[3],"(SBOM)":[4],"has":[5],"been":[6],"actively":[7],"used":[8],"recently":[9],"to":[10,78],"improve":[11],"the":[12,26,109],"security":[13],"and":[14,91,101,134],"transparency":[15],"software":[17,28,33,87,112,123],"supply":[18],"chains.":[19],"This":[20],"information":[21,37,113],"is":[22,29,49],"often":[23],"created":[24],"when":[25],"corresponding":[27,92],"being":[30],"developed.":[31],"Several":[32],"platforms":[34],"with":[35,114,119,128],"rich":[36],"package":[39],"management":[40],"can":[41],"support":[42,52],"automatic":[43],"generation":[44],"SBOM.":[46],"However,":[47],"there":[48],"a":[50,73,121,129],"limited":[51],"for":[53,68],"native":[54],"binaries":[55],"whose":[56],"machine":[57],"code":[58],"does":[59],"not":[60],"have":[61],"much":[62],"metadata":[63],"included.":[64],"Towards":[65],"this":[66],"challenge":[67],"legacy":[69],"binaries,":[70],"we":[71],"propose":[72],"new":[74],"approach":[75,107],"called":[76],"GrizzlyBay":[77],"create":[79],"an":[80],"SBOM":[81],"that":[82],"supports":[83],"automated":[84],"identification":[85,110],"names,":[88],"version":[89],"numbers,":[90],"vulnerabilities":[93],"using":[94],"novel":[95],"locality-sensitive":[96],"hashing":[97],"abstract":[99],"instructions":[100],"program":[102],"structures.":[103],"We":[104],"demonstrate":[105],"our":[106],"offers":[108],"high":[115],"accuracy":[116],"on":[117],"par":[118],"Ghidra,":[120],"leading":[122],"reversing":[124],"engineering":[125],"software,":[126],"but":[127],"higher":[130],"reliability,":[131],"faster":[132],"speed,":[133],"more":[135],"concise":[136],"representation":[137],"software.":[139]},"counts_by_year":[],"updated_date":"2025-12-27T23:08:20.325037","created_date":"2025-10-10T00:00:00"}