{"id":"https://openalex.org/W3014628735","doi":"https://doi.org/10.1109/saner48275.2020.9054797","title":"Automated Bug Detection and Replay for COTS Linux Kernel Modules with Concolic Execution","display_name":"Automated Bug Detection and Replay for COTS Linux Kernel Modules with Concolic Execution","publication_year":2020,"publication_date":"2020-02-01","ids":{"openalex":"https://openalex.org/W3014628735","doi":"https://doi.org/10.1109/saner48275.2020.9054797","mag":"3014628735"},"language":"en","primary_location":{"id":"doi:10.1109/saner48275.2020.9054797","is_oa":false,"landing_page_url":"https://doi.org/10.1109/saner48275.2020.9054797","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"2020 IEEE 27th International Conference on Software Analysis, Evolution and Reengineering (SANER)","raw_type":"proceedings-article"},"type":"conference-paper","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5100427291","display_name":"Bo Chen","orcid":"https://orcid.org/0000-0001-9372-9607"},"institutions":[{"id":"https://openalex.org/I1343180700","display_name":"Intel (United States)","ror":"https://ror.org/01ek73717","country_code":"US","type":"company","lineage":["https://openalex.org/I1343180700"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Bo Chen","raw_affiliation_strings":["Intel Corporation, Hillsboro, OR, USA"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Intel Corporation, Hillsboro, OR, USA","institution_ids":["https://openalex.org/I1343180700"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5002419350","display_name":"Zhenkun Yang","orcid":"https://orcid.org/0000-0001-7567-2870"},"institutions":[{"id":"https://openalex.org/I1343180700","display_name":"Intel (United States)","ror":"https://ror.org/01ek73717","country_code":"US","type":"company","lineage":["https://openalex.org/I1343180700"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Zhenkun Yang","raw_affiliation_strings":["Intel Corporation, Hillsboro, OR, USA"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Intel Corporation, Hillsboro, OR, USA","institution_ids":["https://openalex.org/I1343180700"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5101521759","display_name":"Lei Li","orcid":"https://orcid.org/0000-0003-4498-6126"},"institutions":[{"id":"https://openalex.org/I126345244","display_name":"Portland State University","ror":"https://ror.org/00yn2fy02","country_code":"US","type":"education","lineage":["https://openalex.org/I126345244"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Li Lei","raw_affiliation_strings":["Portland State University, Portland, OR, USA"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Portland State University, Portland, OR, USA","institution_ids":["https://openalex.org/I126345244"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5075308631","display_name":"Kai Cong","orcid":"https://orcid.org/0000-0003-3983-1963"},"institutions":[{"id":"https://openalex.org/I126345244","display_name":"Portland State University","ror":"https://ror.org/00yn2fy02","country_code":"US","type":"education","lineage":["https://openalex.org/I126345244"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Kai Cong","raw_affiliation_strings":["Portland State University, Portland, OR, USA"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Portland State University, Portland, OR, USA","institution_ids":["https://openalex.org/I126345244"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5106551350","display_name":"Fei Xie","orcid":"https://orcid.org/0000-0002-7324-3287"},"institutions":[{"id":"https://openalex.org/I126345244","display_name":"Portland State University","ror":"https://ror.org/00yn2fy02","country_code":"US","type":"education","lineage":["https://openalex.org/I126345244"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Fei Xie","raw_affiliation_strings":["Portland State University, Portland, OR, USA"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Portland State University, Portland, OR, USA","institution_ids":["https://openalex.org/I126345244"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":2,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":null,"has_fulltext":false,"cited_by_count":9,"citation_normalized_percentile":null,"cited_by_percentile_year":null,"biblio":{"volume":null,"issue":null,"first_page":"172","last_page":"183"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10743","display_name":"Software Testing and Debugging Techniques","score":0.9991000294685364,"subfield":{"id":"https://openalex.org/subfields/1712","display_name":"Software"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T10743","display_name":"Software Testing and Debugging Techniques","score":0.9991000294685364,"subfield":{"id":"https://openalex.org/subfields/1712","display_name":"Software"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11424","display_name":"Security and Verification in Computing","score":0.9987000226974487,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":0.9969000220298767,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.8385632038116455},{"id":"https://openalex.org/keywords/linux-kernel","display_name":"Linux kernel","score":0.7178874015808105},{"id":"https://openalex.org/keywords/operating-system","display_name":"Operating system","score":0.6841601729393005},{"id":"https://openalex.org/keywords/sysfs","display_name":"sysfs","score":0.6730539798736572},{"id":"https://openalex.org/keywords/fuzz-testing","display_name":"Fuzz testing","score":0.6589545607566833},{"id":"https://openalex.org/keywords/kernel","display_name":"Kernel (algebra)","score":0.5511408448219299},{"id":"https://openalex.org/keywords/configfs","display_name":"Configfs","score":0.5228477120399475},{"id":"https://openalex.org/keywords/embedded-system","display_name":"Embedded system","score":0.5097178816795349},{"id":"https://openalex.org/keywords/debugging","display_name":"Debugging","score":0.4447908401489258},{"id":"https://openalex.org/keywords/software","display_name":"Software","score":0.20670273900032043}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.8385632038116455},{"id":"https://openalex.org/C553261973","wikidata":"https://www.wikidata.org/wiki/Q14579","display_name":"Linux kernel","level":2,"score":0.7178874015808105},{"id":"https://openalex.org/C111919701","wikidata":"https://www.wikidata.org/wiki/Q9135","display_name":"Operating system","level":1,"score":0.6841601729393005},{"id":"https://openalex.org/C90307666","wikidata":"https://www.wikidata.org/wiki/Q1932562","display_name":"sysfs","level":3,"score":0.6730539798736572},{"id":"https://openalex.org/C111065885","wikidata":"https://www.wikidata.org/wiki/Q1189053","display_name":"Fuzz testing","level":3,"score":0.6589545607566833},{"id":"https://openalex.org/C74193536","wikidata":"https://www.wikidata.org/wiki/Q574844","display_name":"Kernel (algebra)","level":2,"score":0.5511408448219299},{"id":"https://openalex.org/C94127936","wikidata":"https://www.wikidata.org/wiki/Q5160105","display_name":"Configfs","level":3,"score":0.5228477120399475},{"id":"https://openalex.org/C149635348","wikidata":"https://www.wikidata.org/wiki/Q193040","display_name":"Embedded system","level":1,"score":0.5097178816795349},{"id":"https://openalex.org/C168065819","wikidata":"https://www.wikidata.org/wiki/Q845566","display_name":"Debugging","level":2,"score":0.4447908401489258},{"id":"https://openalex.org/C2777904410","wikidata":"https://www.wikidata.org/wiki/Q7397","display_name":"Software","level":2,"score":0.20670273900032043},{"id":"https://openalex.org/C114614502","wikidata":"https://www.wikidata.org/wiki/Q76592","display_name":"Combinatorics","level":1,"score":0.0},{"id":"https://openalex.org/C33923547","wikidata":"https://www.wikidata.org/wiki/Q395","display_name":"Mathematics","level":0,"score":0.0}],"mesh":[],"locations_count":2,"locations":[{"id":"doi:10.1109/saner48275.2020.9054797","is_oa":false,"landing_page_url":"https://doi.org/10.1109/saner48275.2020.9054797","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"2020 IEEE 27th International Conference on Software Analysis, Evolution and Reengineering (SANER)","raw_type":"proceedings-article"},{"id":"pmh:oai:pdxscholar.library.pdx.edu:compsci_fac-1254","is_oa":false,"landing_page_url":"https://pdxscholar.library.pdx.edu/compsci_fac/251","pdf_url":null,"source":{"id":"https://openalex.org/S4377196300","display_name":"PDXScholar  (Portland State University)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I126345244","host_organization_name":"Portland State University","host_organization_lineage":["https://openalex.org/I126345244"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":"Computer Science Faculty Publications and Presentations","raw_type":"text"}],"best_oa_location":null,"sustainable_development_goals":[],"awards":[],"funders":[],"has_content":{"pdf":false,"grobid_xml":false},"content_urls":null,"referenced_works_count":77,"referenced_works":["https://openalex.org/W1521824845","https://openalex.org/W1522250664","https://openalex.org/W1709754610","https://openalex.org/W1710734607","https://openalex.org/W1782947347","https://openalex.org/W1827907817","https://openalex.org/W1970005004","https://openalex.org/W1976721395","https://openalex.org/W2008626182","https://openalex.org/W2009489720","https://openalex.org/W2042033151","https://openalex.org/W2056689755","https://openalex.org/W2098202130","https://openalex.org/W2107147876","https://openalex.org/W2113164299","https://openalex.org/W2113864883","https://openalex.org/W2119068918","https://openalex.org/W2128182542","https://openalex.org/W2138788987","https://openalex.org/W2150990339","https://openalex.org/W2153185479","https://openalex.org/W2159849744","https://openalex.org/W2162422574","https://openalex.org/W2171956059","https://openalex.org/W2243109068","https://openalex.org/W2243368861","https://openalex.org/W2276641853","https://openalex.org/W2334754211","https://openalex.org/W2418738556","https://openalex.org/W2574017551","https://openalex.org/W2740101739","https://openalex.org/W2740510556","https://openalex.org/W2751862727","https://openalex.org/W2752289980","https://openalex.org/W2753478887","https://openalex.org/W2766711930","https://openalex.org/W2793974819","https://openalex.org/W2795180899","https://openalex.org/W2795283266","https://openalex.org/W2796217566","https://openalex.org/W2885899032","https://openalex.org/W2886331223","https://openalex.org/W2888875512","https://openalex.org/W2889022041","https://openalex.org/W2899335252","https://openalex.org/W2927543040","https://openalex.org/W2929299477","https://openalex.org/W2944340780","https://openalex.org/W2963723316","https://openalex.org/W2963913218","https://openalex.org/W2965598643","https://openalex.org/W2979958354","https://openalex.org/W3100698844","https://openalex.org/W3142656464","https://openalex.org/W3152464770","https://openalex.org/W4246166885","https://openalex.org/W4288358042","https://openalex.org/W4302571523","https://openalex.org/W6631155369","https://openalex.org/W6637688222","https://openalex.org/W6638085551","https://openalex.org/W6638594544","https://openalex.org/W6674850668","https://openalex.org/W6683764873","https://openalex.org/W6690851006","https://openalex.org/W6717433430","https://openalex.org/W6741631869","https://openalex.org/W6741818149","https://openalex.org/W6743674107","https://openalex.org/W6743674419","https://openalex.org/W6749630398","https://openalex.org/W6753726376","https://openalex.org/W6753913213","https://openalex.org/W6754022011","https://openalex.org/W6754840073","https://openalex.org/W6762111733","https://openalex.org/W6785616173"],"related_works":["https://openalex.org/W2367644348","https://openalex.org/W2365356622","https://openalex.org/W2389042919","https://openalex.org/W2349540948","https://openalex.org/W4233102306","https://openalex.org/W4386995071","https://openalex.org/W3163483881","https://openalex.org/W2370449689","https://openalex.org/W2364369864","https://openalex.org/W2358068181"],"abstract_inverted_index":{"Linux":[0,20,50,144,198,246,260],"kernel":[1,21,63,145,167,210,228,247,261,267,278,291],"is":[2],"pervasive":[3],"in":[4,55,97,244],"the":[5,19,47,56,61,74,98,112,123,192,232,241,245,256,276,282,290],"cloud,":[6],"on":[7,11,64,148,184,289],"mobile":[8],"platforms,":[9],"and":[10,24,83,100,111,138,169,194,212,262,280],"supercomputers.":[12],"To":[13],"support":[14],"these":[15],"diverse":[16],"computing":[17],"environments,":[18],"provides":[22],"extensibility":[23],"modularity":[25],"through":[26],"Loadable":[27],"Kernel":[28],"Modules":[29],"(LKM),":[30],"while":[31],"featuring":[32],"a":[33,43,67,132,227],"monolithic":[34],"architecture":[35,40],"for":[36,134,160,165],"execution":[37,286],"efficiency.":[38],"This":[39],"design":[41],"brings":[42],"major":[44,189],"challenge":[45],"to":[46,118,171,225,255,264],"security":[48],"of":[49,85,91,140,157,197,235,259,284],"kernel.":[51,199],"Having":[52],"LKMs":[53,71,86,105,187],"run":[54],"same":[57],"memory":[58],"space":[59],"as":[60],"base":[62],"Ring":[65],"0,":[66],"single":[68],"flaw":[69,220],"from":[70,102,191],"may":[72,114],"compromise":[73],"entire":[75],"system,":[76],"e.g.,":[77],"gaining":[78],"root":[79],"access.":[80],"However,":[81],"validation":[82,124],"debugging":[84],"are":[87,106],"inherently":[88],"challenging,":[89],"because":[90],"its":[92],"special":[93],"interface":[94],"buried":[95],"deeply":[96],"kernel,":[99],"non-determinism":[101],"interrupts.":[103],"Also,":[104],"shipped":[107],"by":[108],"various":[109,209],"vendors":[110],"public":[113],"not":[115],"have":[116],"access":[117],"their":[119],"source":[120],"code,":[121],"making":[122],"even":[125],"harder.":[126],"In":[127],"this":[128],"paper,":[129],"we":[130,238],"propose":[131],"framework":[133,152],"efficient":[135],"bug":[136],"detection":[137],"replay":[139,233],"commercial":[141],"off-the-shelf":[142],"(COTS)":[143],"modules":[146,190],"based":[147],"concolic":[149,285],"execution.":[150],"Our":[151],"automatically":[153],"generates":[154],"compact":[155],"sets":[156],"test":[158,178],"cases":[159],"COTS":[161],"LKMs,":[162],"proactively":[163],"checks":[164],"common":[166],"bugs,":[168,211],"allows":[170,222],"reproduce":[172],"reported":[173,242],"bugs":[174,243],"repeatedly":[175],"with":[176,274],"actionable":[177],"cases.":[179],"We":[180,269],"evaluate":[181],"our":[182,204,236,272],"approach":[183,205],"over":[185,287],"20":[186],"covering":[188],"network":[193],"sound":[195],"subsystems":[196],"The":[200],"results":[201],"show":[202],"that":[203,221,252],"can":[206],"effectively":[207],"detect":[208],"reports":[213],"5":[214],"new":[215],"vulnerabilities":[216],"including":[217,249],"an":[218],"unknown":[219],"non-privileged":[223],"users":[224],"trigger":[226],"panic.":[229],"By":[230],"leveraging":[231],"capability":[234],"framework,":[237],"patched":[239],"all":[240],"upstream,":[248],"3":[250],"patches":[251],"were":[253],"selected":[254],"stable":[257],"release":[258],"back-ported":[263],"numerous":[265],"production":[266],"versions.":[268],"also":[270],"compare":[271],"prototype":[273],"kAFL,":[275],"state-of-the-art":[277],"fuzzer,":[279],"demonstrate":[281],"effectiveness":[283],"fuzzing":[288],"level.":[292]},"counts_by_year":[{"year":2024,"cited_by_count":3},{"year":2023,"cited_by_count":2},{"year":2022,"cited_by_count":2},{"year":2021,"cited_by_count":1},{"year":2020,"cited_by_count":1}],"updated_date":"2026-07-14T23:27:15.235271","created_date":"2025-10-10T00:00:00"}