{"id":"https://openalex.org/W2043746023","doi":"https://doi.org/10.1109/wcre.2013.6671279","title":"Reconstructing program memory state from multi-gigabyte instruction traces to support interactive analysis","display_name":"Reconstructing program memory state from multi-gigabyte instruction traces to support interactive analysis","publication_year":2013,"publication_date":"2013-10-01","ids":{"openalex":"https://openalex.org/W2043746023","doi":"https://doi.org/10.1109/wcre.2013.6671279","mag":"2043746023"},"language":"en","primary_location":{"id":"doi:10.1109/wcre.2013.6671279","is_oa":false,"landing_page_url":"https://doi.org/10.1109/wcre.2013.6671279","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"2013 20th Working Conference on Reverse Engineering (WCRE)","raw_type":"proceedings-article"},"type":"article","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5024838711","display_name":"Brendan Cleary","orcid":null},"institutions":[{"id":"https://openalex.org/I212119943","display_name":"University of Victoria","ror":"https://ror.org/04s5mat29","country_code":"CA","type":"education","lineage":["https://openalex.org/I212119943"]}],"countries":["CA"],"is_corresponding":true,"raw_author_name":"Brendan Cleary","raw_affiliation_strings":["University of Victoria, Victoria, BC, Canada","University of Victoria , Victoria , BC, Canada#TAB#"],"affiliations":[{"raw_affiliation_string":"University of Victoria, Victoria, BC, Canada","institution_ids":["https://openalex.org/I212119943"]},{"raw_affiliation_string":"University of Victoria , Victoria , BC, Canada#TAB#","institution_ids":["https://openalex.org/I212119943"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5063667321","display_name":"Patrick Gorman","orcid":null},"institutions":[{"id":"https://openalex.org/I212119943","display_name":"University of Victoria","ror":"https://ror.org/04s5mat29","country_code":"CA","type":"education","lineage":["https://openalex.org/I212119943"]}],"countries":["CA"],"is_corresponding":false,"raw_author_name":"Patrick Gorman","raw_affiliation_strings":["University of Victoria, Victoria, BC, Canada","University of Victoria , Victoria , BC, Canada#TAB#"],"affiliations":[{"raw_affiliation_string":"University of Victoria, Victoria, BC, Canada","institution_ids":["https://openalex.org/I212119943"]},{"raw_affiliation_string":"University of Victoria , Victoria , BC, Canada#TAB#","institution_ids":["https://openalex.org/I212119943"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5042548153","display_name":"Eric Verbeek","orcid":null},"institutions":[{"id":"https://openalex.org/I212119943","display_name":"University of Victoria","ror":"https://ror.org/04s5mat29","country_code":"CA","type":"education","lineage":["https://openalex.org/I212119943"]}],"countries":["CA"],"is_corresponding":false,"raw_author_name":"Eric Verbeek","raw_affiliation_strings":["University of Victoria, Victoria, BC, Canada","University of Victoria , Victoria , BC, Canada#TAB#"],"affiliations":[{"raw_affiliation_string":"University of Victoria, Victoria, BC, Canada","institution_ids":["https://openalex.org/I212119943"]},{"raw_affiliation_string":"University of Victoria , Victoria , BC, Canada#TAB#","institution_ids":["https://openalex.org/I212119943"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5038905934","display_name":"Margaret\u2010Anne Storey","orcid":"https://orcid.org/0000-0003-2278-2536"},"institutions":[{"id":"https://openalex.org/I212119943","display_name":"University of Victoria","ror":"https://ror.org/04s5mat29","country_code":"CA","type":"education","lineage":["https://openalex.org/I212119943"]}],"countries":["CA"],"is_corresponding":false,"raw_author_name":"Margaret-Anne Storey","raw_affiliation_strings":["University of Victoria, Victoria, BC, Canada","University of Victoria , Victoria , BC, Canada#TAB#"],"affiliations":[{"raw_affiliation_string":"University of Victoria, Victoria, BC, Canada","institution_ids":["https://openalex.org/I212119943"]},{"raw_affiliation_string":"University of Victoria , Victoria , BC, Canada#TAB#","institution_ids":["https://openalex.org/I212119943"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5084619590","display_name":"Martin Salois","orcid":null},"institutions":[{"id":"https://openalex.org/I1297460800","display_name":"Defence Research and Development Canada","ror":"https://ror.org/00hgy8d33","country_code":"CA","type":"funder","lineage":["https://openalex.org/I1297460800","https://openalex.org/I1336338359","https://openalex.org/I2802286613"]}],"countries":["CA"],"is_corresponding":false,"raw_author_name":"Martin Salois","raw_affiliation_strings":["Defence Research and Development Canada - Valcartier, Quebec, QC, Canada","Defence R&D Canada - Valcartier, Valcartier, QC, Canada"],"affiliations":[{"raw_affiliation_string":"Defence Research and Development Canada - Valcartier, Quebec, QC, Canada","institution_ids":["https://openalex.org/I1297460800"]},{"raw_affiliation_string":"Defence R&D Canada - Valcartier, Valcartier, QC, Canada","institution_ids":["https://openalex.org/I1297460800"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5003770542","display_name":"Fr\u00e9d\u00e9ric Painchaud","orcid":null},"institutions":[{"id":"https://openalex.org/I1297460800","display_name":"Defence Research and Development Canada","ror":"https://ror.org/00hgy8d33","country_code":"CA","type":"funder","lineage":["https://openalex.org/I1297460800","https://openalex.org/I1336338359","https://openalex.org/I2802286613"]}],"countries":["CA"],"is_corresponding":false,"raw_author_name":"Frederic Painchaud","raw_affiliation_strings":["Defence Research and Development Canada - Valcartier, Quebec, QC, Canada","Defence R&D Canada - Valcartier, Valcartier, QC, Canada"],"affiliations":[{"raw_affiliation_string":"Defence Research and Development Canada - Valcartier, Quebec, QC, Canada","institution_ids":["https://openalex.org/I1297460800"]},{"raw_affiliation_string":"Defence R&D Canada - Valcartier, Valcartier, QC, Canada","institution_ids":["https://openalex.org/I1297460800"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":6,"corresponding_author_ids":["https://openalex.org/A5024838711"],"corresponding_institution_ids":["https://openalex.org/I212119943"],"apc_list":null,"apc_paid":null,"fwci":0.0,"has_fulltext":false,"cited_by_count":1,"citation_normalized_percentile":{"value":0.08975691,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":{"min":90,"max":94},"biblio":{"volume":"0","issue":null,"first_page":"42","last_page":"51"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11424","display_name":"Security and Verification in Computing","score":0.9994999766349792,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11424","display_name":"Security and Verification in Computing","score":0.9994999766349792,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11005","display_name":"Radiation Effects in Electronics","score":0.9951000213623047,"subfield":{"id":"https://openalex.org/subfields/2208","display_name":"Electrical and Electronic Engineering"},"field":{"id":"https://openalex.org/fields/22","display_name":"Engineering"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":0.9839000105857849,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.8775688409805298},{"id":"https://openalex.org/keywords/trace","display_name":"TRACE (psycholinguistics)","score":0.8604340553283691},{"id":"https://openalex.org/keywords/crash","display_name":"Crash","score":0.6494444608688354},{"id":"https://openalex.org/keywords/tracing","display_name":"Tracing","score":0.6322943568229675},{"id":"https://openalex.org/keywords/benchmark","display_name":"Benchmark (surveying)","score":0.62096107006073},{"id":"https://openalex.org/keywords/fuzz-testing","display_name":"Fuzz testing","score":0.6131057739257812},{"id":"https://openalex.org/keywords/state","display_name":"State (computer science)","score":0.5711491107940674},{"id":"https://openalex.org/keywords/process","display_name":"Process (computing)","score":0.5478090047836304},{"id":"https://openalex.org/keywords/point","display_name":"Point (geometry)","score":0.4856094419956207},{"id":"https://openalex.org/keywords/memory-leak","display_name":"Memory leak","score":0.48069602251052856},{"id":"https://openalex.org/keywords/program-analysis","display_name":"Program analysis","score":0.47487708926200867},{"id":"https://openalex.org/keywords/static-analysis","display_name":"Static analysis","score":0.4221463203430176},{"id":"https://openalex.org/keywords/operating-system","display_name":"Operating system","score":0.35168975591659546},{"id":"https://openalex.org/keywords/memory-management","display_name":"Memory management","score":0.3420669734477997},{"id":"https://openalex.org/keywords/programming-language","display_name":"Programming language","score":0.3407454490661621},{"id":"https://openalex.org/keywords/software","display_name":"Software","score":0.14952760934829712}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.8775688409805298},{"id":"https://openalex.org/C75291252","wikidata":"https://www.wikidata.org/wiki/Q1315756","display_name":"TRACE (psycholinguistics)","level":2,"score":0.8604340553283691},{"id":"https://openalex.org/C183469790","wikidata":"https://www.wikidata.org/wiki/Q333501","display_name":"Crash","level":2,"score":0.6494444608688354},{"id":"https://openalex.org/C138673069","wikidata":"https://www.wikidata.org/wiki/Q322229","display_name":"Tracing","level":2,"score":0.6322943568229675},{"id":"https://openalex.org/C185798385","wikidata":"https://www.wikidata.org/wiki/Q1161707","display_name":"Benchmark (surveying)","level":2,"score":0.62096107006073},{"id":"https://openalex.org/C111065885","wikidata":"https://www.wikidata.org/wiki/Q1189053","display_name":"Fuzz testing","level":3,"score":0.6131057739257812},{"id":"https://openalex.org/C48103436","wikidata":"https://www.wikidata.org/wiki/Q599031","display_name":"State (computer science)","level":2,"score":0.5711491107940674},{"id":"https://openalex.org/C98045186","wikidata":"https://www.wikidata.org/wiki/Q205663","display_name":"Process (computing)","level":2,"score":0.5478090047836304},{"id":"https://openalex.org/C28719098","wikidata":"https://www.wikidata.org/wiki/Q44946","display_name":"Point (geometry)","level":2,"score":0.4856094419956207},{"id":"https://openalex.org/C156731835","wikidata":"https://www.wikidata.org/wiki/Q751740","display_name":"Memory leak","level":4,"score":0.48069602251052856},{"id":"https://openalex.org/C98183937","wikidata":"https://www.wikidata.org/wiki/Q2112188","display_name":"Program analysis","level":2,"score":0.47487708926200867},{"id":"https://openalex.org/C97686452","wikidata":"https://www.wikidata.org/wiki/Q7604153","display_name":"Static analysis","level":2,"score":0.4221463203430176},{"id":"https://openalex.org/C111919701","wikidata":"https://www.wikidata.org/wiki/Q9135","display_name":"Operating system","level":1,"score":0.35168975591659546},{"id":"https://openalex.org/C176649486","wikidata":"https://www.wikidata.org/wiki/Q2308807","display_name":"Memory management","level":3,"score":0.3420669734477997},{"id":"https://openalex.org/C199360897","wikidata":"https://www.wikidata.org/wiki/Q9143","display_name":"Programming language","level":1,"score":0.3407454490661621},{"id":"https://openalex.org/C2777904410","wikidata":"https://www.wikidata.org/wiki/Q7397","display_name":"Software","level":2,"score":0.14952760934829712},{"id":"https://openalex.org/C13280743","wikidata":"https://www.wikidata.org/wiki/Q131089","display_name":"Geodesy","level":1,"score":0.0},{"id":"https://openalex.org/C138885662","wikidata":"https://www.wikidata.org/wiki/Q5891","display_name":"Philosophy","level":0,"score":0.0},{"id":"https://openalex.org/C41895202","wikidata":"https://www.wikidata.org/wiki/Q8162","display_name":"Linguistics","level":1,"score":0.0},{"id":"https://openalex.org/C205649164","wikidata":"https://www.wikidata.org/wiki/Q1071","display_name":"Geography","level":0,"score":0.0},{"id":"https://openalex.org/C33923547","wikidata":"https://www.wikidata.org/wiki/Q395","display_name":"Mathematics","level":0,"score":0.0},{"id":"https://openalex.org/C136085584","wikidata":"https://www.wikidata.org/wiki/Q910289","display_name":"Overlay","level":2,"score":0.0},{"id":"https://openalex.org/C2524010","wikidata":"https://www.wikidata.org/wiki/Q8087","display_name":"Geometry","level":1,"score":0.0}],"mesh":[],"locations_count":2,"locations":[{"id":"doi:10.1109/wcre.2013.6671279","is_oa":false,"landing_page_url":"https://doi.org/10.1109/wcre.2013.6671279","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"2013 20th Working Conference on Reverse Engineering (WCRE)","raw_type":"proceedings-article"},{"id":"pmh:oai:CiteSeerX.psu:10.1.1.394.9715","is_oa":false,"landing_page_url":"http://citeseerx.ist.psu.edu/viewdoc/summary?doi=10.1.1.394.9715","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":"http://chiselgroup.files.wordpress.com/2013/09/wcre2013.pdf","raw_type":"text"}],"best_oa_location":null,"sustainable_development_goals":[{"id":"https://metadata.un.org/sdg/16","display_name":"Peace, Justice and strong institutions","score":0.7799999713897705}],"awards":[],"funders":[{"id":"https://openalex.org/F4320313286","display_name":"Defence Research and Development Canada","ror":null},{"id":"https://openalex.org/F4320334593","display_name":"Natural Sciences and Engineering Research Council of Canada","ror":"https://ror.org/01h531d29"}],"has_content":{"pdf":false,"grobid_xml":false},"content_urls":null,"referenced_works_count":21,"referenced_works":["https://openalex.org/W17195072","https://openalex.org/W175708229","https://openalex.org/W1499241274","https://openalex.org/W1977857603","https://openalex.org/W1988524530","https://openalex.org/W2008848207","https://openalex.org/W2016050282","https://openalex.org/W2016779899","https://openalex.org/W2021385519","https://openalex.org/W2090299992","https://openalex.org/W2117562822","https://openalex.org/W2118558212","https://openalex.org/W2119251836","https://openalex.org/W2134573799","https://openalex.org/W2146710876","https://openalex.org/W2295492139","https://openalex.org/W2342091124","https://openalex.org/W3192384464","https://openalex.org/W4233397712","https://openalex.org/W4239720002","https://openalex.org/W6629716660"],"related_works":["https://openalex.org/W3089408602","https://openalex.org/W2888408058","https://openalex.org/W2867457158","https://openalex.org/W4297908618","https://openalex.org/W2765641823","https://openalex.org/W3111646971","https://openalex.org/W2895825088","https://openalex.org/W3186878187","https://openalex.org/W2985048382","https://openalex.org/W2914996832"],"abstract_inverted_index":{"Exploitability":[0],"analysis":[1,94,173],"is":[2,15,18,30,121,156],"the":[3,73,76,80,96,100,105,108,111,119,126,132,137,175,194,211],"process":[4,160],"of":[5,22,34,86,104,110,131,174,177,198,213,246],"attempting":[6],"to":[7,32,50,54,64,136,164,254],"determine":[8],"if":[9],"a":[10,13,19,28,45,68,84,142,157,189,199,219],"vulnerability":[11,47],"in":[12,26,118,218,233],"program":[14,29,36,42,74,106,144,200],"exploitable.":[16],"Fuzzing":[17],"popular":[20],"method":[21],"finding":[23],"such":[24],"vulnerabilities,":[25],"which":[27,152],"subjected":[31],"millions":[33],"generated":[35],"inputs":[37],"until":[38],"it":[39],"crashes.":[40],"Each":[41],"crash":[43,81],"indicates":[44],"potential":[46,56],"that":[48,78,134,205],"needs":[49],"be":[51,65],"prioritized":[52],"according":[53],"its":[55],"for":[57,124,192,250],"exploitation.":[58],"The":[59],"highest":[60],"priority":[61],"vulnerabilities":[62],"need":[63],"investigated":[66],"by":[67,71],"security":[69],"analyst":[70,127],"re-executing":[72],"with":[75,235],"input":[77],"caused":[79],"while":[82],"recording":[83],"trace":[85,149,204,251],"all":[87],"executed":[88],"assembly":[89],"instructions":[90],"and":[91,161,230,239],"then":[92],"performing":[93],"on":[95,188,210],"resulting":[97],"trace.":[98,222],"Recreating":[99],"entire":[101,195],"memory":[102,154,178,196,214,241],"state":[103,155,179,197,212,242],"at":[107,114,215],"time":[109],"crash,":[112],"or":[113],"any":[115,216],"other":[116],"point":[117,217],"trace,":[120],"very":[122,182],"important":[123],"helping":[125],"build":[128],"an":[129,172,202],"understanding":[130],"conditions":[133],"led":[135],"crash.":[138],"Unfortunately,":[139],"tracing":[140],"even":[141],"small":[143],"can":[145],"create":[146],"multimillion":[147],"line":[148,234],"files":[150,252],"from":[151,181,201],"reconstructing":[153,193],"computationally":[158],"intensive":[159],"virtually":[162],"impossible":[163],"do":[165],"manually.":[166],"In":[167],"this":[168],"paper":[169],"we":[170,224],"present":[171],"problem":[176],"reconstruction":[180],"large":[183],"execution":[184,203,221],"traces.":[185],"We":[186],"report":[187],"novel":[190],"approach":[191,227],"allows":[206],"near":[207],"realtime":[208],"queries":[209],"program's":[220],"Finally":[223],"benchmark":[225],"our":[226,236],"showing":[228],"storage":[229],"performance":[231],"results":[232],"theoretical":[237],"calculations":[238],"demonstrate":[240],"query":[243],"response":[244],"times":[245],"less":[247],"than":[248],"200ms":[249],"up":[253],"60":[255],"million":[256],"lines.":[257]},"counts_by_year":[{"year":2017,"cited_by_count":1}],"updated_date":"2026-04-05T17:49:38.594831","created_date":"2025-10-10T00:00:00"}