{"id":"https://openalex.org/W4416965653","doi":"https://doi.org/10.1109/tdsc.2025.3639708","title":"LibPass: An Entropy-Guided Black-Box Adversarial Attack Against Third-Party Library Detection Tools in the Wild","display_name":"LibPass: An Entropy-Guided Black-Box Adversarial Attack Against Third-Party Library Detection Tools in the Wild","publication_year":2025,"publication_date":"2025-12-03","ids":{"openalex":"https://openalex.org/W4416965653","doi":"https://doi.org/10.1109/tdsc.2025.3639708"},"language":null,"primary_location":{"id":"doi:10.1109/tdsc.2025.3639708","is_oa":false,"landing_page_url":"https://doi.org/10.1109/tdsc.2025.3639708","pdf_url":null,"source":{"id":"https://openalex.org/S133795288","display_name":"IEEE Transactions on Dependable and Secure Computing","issn_l":"1545-5971","issn":["1545-5971","1941-0018","2160-9209"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310320439","host_organization_name":"IEEE Computer Society","host_organization_lineage":["https://openalex.org/P4310320439","https://openalex.org/P4310319808"],"host_organization_lineage_names":["IEEE Computer Society","Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Transactions on Dependable and Secure Computing","raw_type":"journal-article"},"type":"article","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":null,"display_name":"Bolin Zhou","orcid":"https://orcid.org/0009-0009-9246-6468"},"institutions":[{"id":"https://openalex.org/I19820366","display_name":"Chinese Academy of Sciences","ror":"https://ror.org/034t30j35","country_code":"CN","type":"government","lineage":["https://openalex.org/I19820366"]},{"id":"https://openalex.org/I4210128818","display_name":"Institute of Software","ror":"https://ror.org/033dfsn42","country_code":"CN","type":"facility","lineage":["https://openalex.org/I19820366","https://openalex.org/I4210128818"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Bolin Zhou","raw_affiliation_strings":["Institute of Software, Chinese Academy of Sciences, Beijing, China"],"raw_orcid":"https://orcid.org/0009-0009-9246-6468","affiliations":[{"raw_affiliation_string":"Institute of Software, Chinese Academy of Sciences, Beijing, China","institution_ids":["https://openalex.org/I4210128818","https://openalex.org/I19820366"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5101024367","display_name":"Jingzheng Wu","orcid":"https://orcid.org/0000-0001-5561-9829"},"institutions":[{"id":"https://openalex.org/I19820366","display_name":"Chinese Academy of Sciences","ror":"https://ror.org/034t30j35","country_code":"CN","type":"government","lineage":["https://openalex.org/I19820366"]},{"id":"https://openalex.org/I4210128818","display_name":"Institute of Software","ror":"https://ror.org/033dfsn42","country_code":"CN","type":"facility","lineage":["https://openalex.org/I19820366","https://openalex.org/I4210128818"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Jingzheng Wu","raw_affiliation_strings":["Institute of Software, Chinese Academy of Sciences, Beijing, China"],"raw_orcid":"https://orcid.org/0000-0001-5561-9829","affiliations":[{"raw_affiliation_string":"Institute of Software, Chinese Academy of Sciences, Beijing, China","institution_ids":["https://openalex.org/I4210128818","https://openalex.org/I19820366"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5101416036","display_name":"Xiang Ling","orcid":"https://orcid.org/0000-0002-7377-7844"},"institutions":[{"id":"https://openalex.org/I19820366","display_name":"Chinese Academy of Sciences","ror":"https://ror.org/034t30j35","country_code":"CN","type":"government","lineage":["https://openalex.org/I19820366"]},{"id":"https://openalex.org/I4210128818","display_name":"Institute of Software","ror":"https://ror.org/033dfsn42","country_code":"CN","type":"facility","lineage":["https://openalex.org/I19820366","https://openalex.org/I4210128818"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Xiang Ling","raw_affiliation_strings":["Institute of Software, Chinese Academy of Sciences, Beijing, China"],"raw_orcid":"https://orcid.org/0000-0002-7377-7844","affiliations":[{"raw_affiliation_string":"Institute of Software, Chinese Academy of Sciences, Beijing, China","institution_ids":["https://openalex.org/I4210128818","https://openalex.org/I19820366"]}]},{"author_position":"middle","author":{"id":null,"display_name":"Jingkun Zhang","orcid":"https://orcid.org/0009-0002-8129-0582"},"institutions":[{"id":"https://openalex.org/I19820366","display_name":"Chinese Academy of Sciences","ror":"https://ror.org/034t30j35","country_code":"CN","type":"government","lineage":["https://openalex.org/I19820366"]},{"id":"https://openalex.org/I4210128818","display_name":"Institute of Software","ror":"https://ror.org/033dfsn42","country_code":"CN","type":"facility","lineage":["https://openalex.org/I19820366","https://openalex.org/I4210128818"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Jingkun Zhang","raw_affiliation_strings":["Institute of Software, Chinese Academy of Sciences, Beijing, China"],"raw_orcid":"https://orcid.org/0009-0002-8129-0582","affiliations":[{"raw_affiliation_string":"Institute of Software, Chinese Academy of Sciences, Beijing, China","institution_ids":["https://openalex.org/I4210128818","https://openalex.org/I19820366"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5099127898","display_name":"Tianyue Luo","orcid":"https://orcid.org/0000-0001-7407-8255"},"institutions":[{"id":"https://openalex.org/I19820366","display_name":"Chinese Academy of Sciences","ror":"https://ror.org/034t30j35","country_code":"CN","type":"government","lineage":["https://openalex.org/I19820366"]},{"id":"https://openalex.org/I4210128818","display_name":"Institute of Software","ror":"https://ror.org/033dfsn42","country_code":"CN","type":"facility","lineage":["https://openalex.org/I19820366","https://openalex.org/I4210128818"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Tianyue Luo","raw_affiliation_strings":["Institute of Software, Chinese Academy of Sciences, Beijing, China"],"raw_orcid":"https://orcid.org/0000-0001-7407-8255","affiliations":[{"raw_affiliation_string":"Institute of Software, Chinese Academy of Sciences, Beijing, China","institution_ids":["https://openalex.org/I4210128818","https://openalex.org/I19820366"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":5,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":0.0,"has_fulltext":false,"cited_by_count":0,"citation_normalized_percentile":{"value":0.404638,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":null,"biblio":{"volume":"23","issue":"2","first_page":"3708","last_page":"3722"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":0.9664000272750854,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":0.9664000272750854,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11424","display_name":"Security and Verification in Computing","score":0.015300000086426735,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T12034","display_name":"Digital and Cyber Forensics","score":0.0038999998942017555,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/adversarial-system","display_name":"Adversarial system","score":0.7656000256538391},{"id":"https://openalex.org/keywords/robustness","display_name":"Robustness (evolution)","score":0.5110999941825867},{"id":"https://openalex.org/keywords/software","display_name":"Software","score":0.44040000438690186},{"id":"https://openalex.org/keywords/malware","display_name":"Malware","score":0.4375999867916107},{"id":"https://openalex.org/keywords/android","display_name":"Android (operating system)","score":0.4327999949455261},{"id":"https://openalex.org/keywords/threat-model","display_name":"Threat model","score":0.41370001435279846},{"id":"https://openalex.org/keywords/obfuscation","display_name":"Obfuscation","score":0.37770000100135803},{"id":"https://openalex.org/keywords/bottleneck","display_name":"Bottleneck","score":0.35010001063346863}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.8093000054359436},{"id":"https://openalex.org/C37736160","wikidata":"https://www.wikidata.org/wiki/Q1801315","display_name":"Adversarial system","level":2,"score":0.7656000256538391},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.5526000261306763},{"id":"https://openalex.org/C63479239","wikidata":"https://www.wikidata.org/wiki/Q7353546","display_name":"Robustness (evolution)","level":3,"score":0.5110999941825867},{"id":"https://openalex.org/C2777904410","wikidata":"https://www.wikidata.org/wiki/Q7397","display_name":"Software","level":2,"score":0.44040000438690186},{"id":"https://openalex.org/C541664917","wikidata":"https://www.wikidata.org/wiki/Q14001","display_name":"Malware","level":2,"score":0.4375999867916107},{"id":"https://openalex.org/C557433098","wikidata":"https://www.wikidata.org/wiki/Q94","display_name":"Android (operating system)","level":2,"score":0.4327999949455261},{"id":"https://openalex.org/C140547941","wikidata":"https://www.wikidata.org/wiki/Q7797194","display_name":"Threat model","level":2,"score":0.41370001435279846},{"id":"https://openalex.org/C40305131","wikidata":"https://www.wikidata.org/wiki/Q2616305","display_name":"Obfuscation","level":2,"score":0.37770000100135803},{"id":"https://openalex.org/C2780513914","wikidata":"https://www.wikidata.org/wiki/Q18210350","display_name":"Bottleneck","level":2,"score":0.35010001063346863},{"id":"https://openalex.org/C71901391","wikidata":"https://www.wikidata.org/wiki/Q7126699","display_name":"Upload","level":2,"score":0.33980000019073486},{"id":"https://openalex.org/C95713431","wikidata":"https://www.wikidata.org/wiki/Q631425","display_name":"Vulnerability (computing)","level":2,"score":0.3319000005722046},{"id":"https://openalex.org/C153083717","wikidata":"https://www.wikidata.org/wiki/Q6535263","display_name":"Leverage (statistics)","level":2,"score":0.3264999985694885},{"id":"https://openalex.org/C10144332","wikidata":"https://www.wikidata.org/wiki/Q14645","display_name":"Rootkit","level":3,"score":0.30489999055862427},{"id":"https://openalex.org/C2989133298","wikidata":"https://www.wikidata.org/wiki/Q94","display_name":"Android malware","level":3,"score":0.2980000078678131},{"id":"https://openalex.org/C2781045450","wikidata":"https://www.wikidata.org/wiki/Q254569","display_name":"Backdoor","level":2,"score":0.29679998755455017},{"id":"https://openalex.org/C35525427","wikidata":"https://www.wikidata.org/wiki/Q745881","display_name":"Intrusion detection system","level":2,"score":0.28380000591278076},{"id":"https://openalex.org/C164155591","wikidata":"https://www.wikidata.org/wiki/Q2067766","display_name":"Satisfiability modulo theories","level":2,"score":0.27469998598098755},{"id":"https://openalex.org/C2776973144","wikidata":"https://www.wikidata.org/wiki/Q6880649","display_name":"Misuse detection","level":4,"score":0.27000001072883606},{"id":"https://openalex.org/C43126263","wikidata":"https://www.wikidata.org/wiki/Q128751","display_name":"Source code","level":2,"score":0.2551000118255615},{"id":"https://openalex.org/C127705205","wikidata":"https://www.wikidata.org/wiki/Q5748245","display_name":"Heuristics","level":2,"score":0.2531999945640564},{"id":"https://openalex.org/C65856478","wikidata":"https://www.wikidata.org/wiki/Q3991682","display_name":"Attack model","level":2,"score":0.25200000405311584}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1109/tdsc.2025.3639708","is_oa":false,"landing_page_url":"https://doi.org/10.1109/tdsc.2025.3639708","pdf_url":null,"source":{"id":"https://openalex.org/S133795288","display_name":"IEEE Transactions on Dependable and Secure Computing","issn_l":"1545-5971","issn":["1545-5971","1941-0018","2160-9209"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310320439","host_organization_name":"IEEE Computer Society","host_organization_lineage":["https://openalex.org/P4310320439","https://openalex.org/P4310319808"],"host_organization_lineage_names":["IEEE Computer Society","Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Transactions on Dependable and Secure Computing","raw_type":"journal-article"}],"best_oa_location":null,"sustainable_development_goals":[],"awards":[{"id":"https://openalex.org/G3303400097","display_name":null,"funder_award_id":"62202457","funder_id":"https://openalex.org/F4320321001","funder_display_name":"National Natural Science Foundation of China"}],"funders":[{"id":"https://openalex.org/F4320321001","display_name":"National Natural Science Foundation of China","ror":"https://ror.org/01h0zpd94"}],"has_content":{"grobid_xml":false,"pdf":false},"content_urls":null,"referenced_works_count":46,"referenced_works":["https://openalex.org/W1965891547","https://openalex.org/W1972350641","https://openalex.org/W1987681444","https://openalex.org/W2012557827","https://openalex.org/W2024668293","https://openalex.org/W2029346397","https://openalex.org/W2049917012","https://openalex.org/W2060727319","https://openalex.org/W2186979752","https://openalex.org/W2289333180","https://openalex.org/W2400269587","https://openalex.org/W2510008933","https://openalex.org/W2532717356","https://openalex.org/W2533383364","https://openalex.org/W2573137292","https://openalex.org/W2614272834","https://openalex.org/W2618014206","https://openalex.org/W2730608559","https://openalex.org/W2765588462","https://openalex.org/W2765843494","https://openalex.org/W2796466931","https://openalex.org/W2883170413","https://openalex.org/W2964136807","https://openalex.org/W2995340752","https://openalex.org/W2999585024","https://openalex.org/W3005140940","https://openalex.org/W3031471692","https://openalex.org/W3094704314","https://openalex.org/W3113106364","https://openalex.org/W3161799213","https://openalex.org/W3177116043","https://openalex.org/W3187483004","https://openalex.org/W3200506265","https://openalex.org/W3206455012","https://openalex.org/W3212677680","https://openalex.org/W4226416841","https://openalex.org/W4283214123","https://openalex.org/W4284667406","https://openalex.org/W4312413350","https://openalex.org/W4383752048","https://openalex.org/W4386977908","https://openalex.org/W4388857307","https://openalex.org/W4394744751","https://openalex.org/W4398785927","https://openalex.org/W4403536022","https://openalex.org/W7117133158"],"related_works":[],"abstract_inverted_index":{"To":[0,130,198],"mitigate":[1],"the":[2,34,63,94,136,165,176,193,222,270],"security":[3],"and":[4,53,69,116,124,202,240],"compliance":[5,51],"risks":[6],"posed":[7],"by":[8,72,159,169],"Android":[9,26],"third-party":[10],"libraries":[11],"(TPLs),":[12],"researchers":[13],"have":[14],"proposed":[15],"many":[16],"automated":[17],"detection":[18,30,67,75,97,142,181,232,276],"tools":[19,233],"aimed":[20],"at":[21],"accurately":[22],"identifying":[23],"TPLs":[24,118],"within":[25,119],"applications":[27],"(apps).":[28],"The":[29,147],"results":[31,250],"serve":[32],"as":[33,41],"foundation":[35],"for":[36,215],"practical":[37],"downstream":[38],"tasks":[39],"such":[40],"software":[42,54],"bill":[43],"of":[44,66,83,96,150,179,195,224,237,262,267,273],"materials":[45],"(SBOM)":[46],"generation,":[47],"n-day":[48],"vulnerability":[49],"identification,":[50],"auditing,":[52],"supply":[55],"chain":[56],"risk":[57,95],"tracing,":[58],"among":[59],"others.":[60],"However,":[61],"despite":[62],"high":[64],"levels":[65],"accuracy":[68],"efficiency":[70],"achieved":[71],"state-of-the-art":[73,230],"TPL":[74,141,196,231,275],"tools,":[76,143,182],"existing":[77,180],"studies":[78],"lack":[79],"a":[80,92,265],"systematic":[81],"evaluation":[82],"these":[84],"tools'":[85],"robustness":[86,107,272],"against":[87,140,228,244],"potential":[88],"malicious":[89],"attacks.":[90],"As":[91],"result,":[93],"failure":[98],"in":[99],"real-world":[100],"scenarios":[101],"remains":[102],"unmanageable.":[103],"Tools":[104],"with":[105,264],"poor":[106],"may":[108],"be":[109],"rendered":[110],"ineffective":[111],"under":[112],"attack,":[113],"allowing":[114],"unsafe":[115],"non-compliant":[117],"apps":[120,158],"to":[121,155,187,213],"evade":[122],"scrutiny":[123],"analysis,":[125],"thereby":[126,191],"compromising":[127],"user":[128],"interests.":[129],"bridge":[131],"this":[132],"gap,":[133],"we":[134],"propose":[135],"first":[137],"adversarial":[138,157,173,217],"attack":[139,200,247,259],"<sc":[144,151,205,225,253],"xmlns:mml=\"http://www.w3.org/1998/Math/MathML\"":[145,152,206,226,254],"xmlns:xlink=\"http://www.w3.org/1999/xlink\">LibPass</small>.":[146],"core":[148],"idea":[149],"xmlns:xlink=\"http://www.w3.org/1999/xlink\">LibPass</small>":[153,207,227,255],"is":[154],"generate":[156],"crafting":[160],"perturbations":[161,174],"that":[162,252],"go":[163],"beyond":[164],"code":[166,189],"transformations":[167],"introduced":[168],"obfuscation":[170],"techniques.":[171],"These":[172],"hinder":[175],"generalization":[177],"capability":[178],"which":[183],"are":[184],"primarily":[185],"designed":[186],"counter":[188],"obfuscation,":[190],"enabling":[192],"evasion":[194],"detection.":[197],"minimize":[199],"overhead":[201],"enhance":[203],"stealthiness,":[204],"employs":[208],"an":[209,257],"improved":[210],"firefly":[211],"algorithm":[212],"search":[214],"optimal":[216],"apps.":[218],"This":[219],"work":[220],"evaluates":[221],"effectiveness":[223],"five":[229],"on":[234],"three":[235,245],"datasets":[236],"different":[238],"types":[239],"benchmarks":[241],"its":[242],"performance":[243],"baseline":[246],"methods.":[248],"Experimental":[249],"demonstrate":[251],"achieves":[256],"average":[258],"success":[260],"rate":[261],"61.33%,":[263],"peak":[266],"99.46%,":[268],"underscoring":[269],"insufficient":[271],"current":[274],"tools.":[277]},"counts_by_year":[],"updated_date":"2026-06-11T09:08:48.828518","created_date":"2025-12-03T00:00:00"}