{"id":"https://openalex.org/W4295127637","doi":"https://doi.org/10.1142/s0218194022500565","title":"Return Instruction Classification in Binary Code Using Machine Learning","display_name":"Return Instruction Classification in Binary Code Using Machine Learning","publication_year":2022,"publication_date":"2022-09-01","ids":{"openalex":"https://openalex.org/W4295127637","doi":"https://doi.org/10.1142/s0218194022500565"},"language":"en","primary_location":{"id":"doi:10.1142/s0218194022500565","is_oa":false,"landing_page_url":"https://doi.org/10.1142/s0218194022500565","pdf_url":null,"source":{"id":"https://openalex.org/S131442419","display_name":"International Journal of Software Engineering and Knowledge Engineering","issn_l":"0218-1940","issn":["0218-1940","1793-6403"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310319815","host_organization_name":"World Scientific","host_organization_lineage":["https://openalex.org/P4310319815"],"host_organization_lineage_names":["World Scientific"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"International Journal of Software Engineering and Knowledge Engineering","raw_type":"journal-article"},"type":"article","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5091678223","display_name":"Jing Qiu","orcid":"https://orcid.org/0000-0003-3264-1681"},"institutions":[{"id":"https://openalex.org/I1284762954","display_name":"Zhejiang A & F University","ror":"https://ror.org/02vj4rn06","country_code":"CN","type":"education","lineage":["https://openalex.org/I1284762954"]}],"countries":["CN"],"is_corresponding":true,"raw_author_name":"Jing Qiu","raw_affiliation_strings":["Zhejiang A&F University, Hangzhou 311300, P.\u00a0R.\u00a0China"],"raw_orcid":"https://orcid.org/0000-0003-3264-1681","affiliations":[{"raw_affiliation_string":"Zhejiang A&F University, Hangzhou 311300, P.\u00a0R.\u00a0China","institution_ids":["https://openalex.org/I1284762954"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5086183535","display_name":"Xiaoxu Geng","orcid":null},"institutions":[{"id":"https://openalex.org/I100188998","display_name":"Harbin University of Science and Technology","ror":"https://ror.org/04e6y1282","country_code":"CN","type":"education","lineage":["https://openalex.org/I100188998"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Xiaoxu Geng","raw_affiliation_strings":["Harbin University of Science and Technology, Harbin 1500010, P.\u00a0R.\u00a0China"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Harbin University of Science and Technology, Harbin 1500010, P.\u00a0R.\u00a0China","institution_ids":["https://openalex.org/I100188998"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5027381129","display_name":"Dong Feng","orcid":"https://orcid.org/0000-0002-7612-8823"},"institutions":[{"id":"https://openalex.org/I100188998","display_name":"Harbin University of Science and Technology","ror":"https://ror.org/04e6y1282","country_code":"CN","type":"education","lineage":["https://openalex.org/I100188998"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Feng Dong","raw_affiliation_strings":["Harbin University of Science and Technology, Harbin 1500010, P.\u00a0R.\u00a0China"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Harbin University of Science and Technology, Harbin 1500010, P.\u00a0R.\u00a0China","institution_ids":["https://openalex.org/I100188998"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":2,"corresponding_author_ids":["https://openalex.org/A5091678223"],"corresponding_institution_ids":["https://openalex.org/I1284762954"],"apc_list":null,"apc_paid":null,"fwci":0.0,"has_fulltext":false,"cited_by_count":0,"citation_normalized_percentile":{"value":0.09864365,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":null,"biblio":{"volume":"32","issue":"09","first_page":"1419","last_page":"1452"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":1.0,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":1.0,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10260","display_name":"Software Engineering Research","score":0.9994999766349792,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10743","display_name":"Software Testing and Debugging Techniques","score":0.9980000257492065,"subfield":{"id":"https://openalex.org/subfields/1712","display_name":"Software"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.8089601993560791},{"id":"https://openalex.org/keywords/artificial-intelligence","display_name":"Artificial intelligence","score":0.6260563135147095},{"id":"https://openalex.org/keywords/machine-learning","display_name":"Machine learning","score":0.6074469089508057},{"id":"https://openalex.org/keywords/perceptron","display_name":"Perceptron","score":0.6065598726272583},{"id":"https://openalex.org/keywords/support-vector-machine","display_name":"Support vector machine","score":0.5899943709373474},{"id":"https://openalex.org/keywords/artificial-neural-network","display_name":"Artificial neural network","score":0.47242271900177},{"id":"https://openalex.org/keywords/identification","display_name":"Identification (biology)","score":0.46333304047584534},{"id":"https://openalex.org/keywords/multilayer-perceptron","display_name":"Multilayer perceptron","score":0.4502427577972412},{"id":"https://openalex.org/keywords/binary-classification","display_name":"Binary classification","score":0.4401002824306488},{"id":"https://openalex.org/keywords/layer","display_name":"Layer (electronics)","score":0.43374115228652954},{"id":"https://openalex.org/keywords/decision-tree","display_name":"Decision tree","score":0.42454245686531067},{"id":"https://openalex.org/keywords/code","display_name":"Code (set theory)","score":0.41616347432136536},{"id":"https://openalex.org/keywords/data-mining","display_name":"Data mining","score":0.4032822549343109},{"id":"https://openalex.org/keywords/set","display_name":"Set (abstract data type)","score":0.40261781215667725},{"id":"https://openalex.org/keywords/programming-language","display_name":"Programming language","score":0.08085110783576965}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.8089601993560791},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.6260563135147095},{"id":"https://openalex.org/C119857082","wikidata":"https://www.wikidata.org/wiki/Q2539","display_name":"Machine learning","level":1,"score":0.6074469089508057},{"id":"https://openalex.org/C60908668","wikidata":"https://www.wikidata.org/wiki/Q690207","display_name":"Perceptron","level":3,"score":0.6065598726272583},{"id":"https://openalex.org/C12267149","wikidata":"https://www.wikidata.org/wiki/Q282453","display_name":"Support vector machine","level":2,"score":0.5899943709373474},{"id":"https://openalex.org/C50644808","wikidata":"https://www.wikidata.org/wiki/Q192776","display_name":"Artificial neural network","level":2,"score":0.47242271900177},{"id":"https://openalex.org/C116834253","wikidata":"https://www.wikidata.org/wiki/Q2039217","display_name":"Identification (biology)","level":2,"score":0.46333304047584534},{"id":"https://openalex.org/C179717631","wikidata":"https://www.wikidata.org/wiki/Q2991667","display_name":"Multilayer perceptron","level":3,"score":0.4502427577972412},{"id":"https://openalex.org/C66905080","wikidata":"https://www.wikidata.org/wiki/Q17005494","display_name":"Binary classification","level":3,"score":0.4401002824306488},{"id":"https://openalex.org/C2779227376","wikidata":"https://www.wikidata.org/wiki/Q6505497","display_name":"Layer (electronics)","level":2,"score":0.43374115228652954},{"id":"https://openalex.org/C84525736","wikidata":"https://www.wikidata.org/wiki/Q831366","display_name":"Decision tree","level":2,"score":0.42454245686531067},{"id":"https://openalex.org/C2776760102","wikidata":"https://www.wikidata.org/wiki/Q5139990","display_name":"Code (set theory)","level":3,"score":0.41616347432136536},{"id":"https://openalex.org/C124101348","wikidata":"https://www.wikidata.org/wiki/Q172491","display_name":"Data mining","level":1,"score":0.4032822549343109},{"id":"https://openalex.org/C177264268","wikidata":"https://www.wikidata.org/wiki/Q1514741","display_name":"Set (abstract data type)","level":2,"score":0.40261781215667725},{"id":"https://openalex.org/C199360897","wikidata":"https://www.wikidata.org/wiki/Q9143","display_name":"Programming language","level":1,"score":0.08085110783576965},{"id":"https://openalex.org/C178790620","wikidata":"https://www.wikidata.org/wiki/Q11351","display_name":"Organic chemistry","level":1,"score":0.0},{"id":"https://openalex.org/C86803240","wikidata":"https://www.wikidata.org/wiki/Q420","display_name":"Biology","level":0,"score":0.0},{"id":"https://openalex.org/C185592680","wikidata":"https://www.wikidata.org/wiki/Q2329","display_name":"Chemistry","level":0,"score":0.0},{"id":"https://openalex.org/C59822182","wikidata":"https://www.wikidata.org/wiki/Q441","display_name":"Botany","level":1,"score":0.0}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1142/s0218194022500565","is_oa":false,"landing_page_url":"https://doi.org/10.1142/s0218194022500565","pdf_url":null,"source":{"id":"https://openalex.org/S131442419","display_name":"International Journal of Software Engineering and Knowledge Engineering","issn_l":"0218-1940","issn":["0218-1940","1793-6403"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310319815","host_organization_name":"World Scientific","host_organization_lineage":["https://openalex.org/P4310319815"],"host_organization_lineage_names":["World Scientific"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"International Journal of Software Engineering and Knowledge Engineering","raw_type":"journal-article"}],"best_oa_location":null,"sustainable_development_goals":[],"awards":[{"id":"https://openalex.org/G3743582880","display_name":null,"funder_award_id":"F2018017","funder_id":"https://openalex.org/F4320323085","funder_display_name":"Natural Science Foundation of Heilongjiang Province"},{"id":"https://openalex.org/G4850363419","display_name":null,"funder_award_id":"61702140","funder_id":"https://openalex.org/F4320321001","funder_display_name":"National Natural Science Foundation of China"}],"funders":[{"id":"https://openalex.org/F4320321001","display_name":"National Natural Science Foundation of China","ror":"https://ror.org/01h0zpd94"},{"id":"https://openalex.org/F4320323085","display_name":"Natural Science Foundation of Heilongjiang Province","ror":null}],"has_content":{"grobid_xml":false,"pdf":false},"content_urls":null,"referenced_works_count":16,"referenced_works":["https://openalex.org/W1892671163","https://openalex.org/W1974527629","https://openalex.org/W2005708641","https://openalex.org/W2048693719","https://openalex.org/W2144499799","https://openalex.org/W2620895032","https://openalex.org/W2625806818","https://openalex.org/W2767350860","https://openalex.org/W2885426851","https://openalex.org/W2891413988","https://openalex.org/W2991853196","https://openalex.org/W3012412103","https://openalex.org/W3015184307","https://openalex.org/W3021525272","https://openalex.org/W3153398259","https://openalex.org/W3156018547"],"related_works":["https://openalex.org/W4328134586","https://openalex.org/W4320802194","https://openalex.org/W4361795583","https://openalex.org/W3168994312","https://openalex.org/W4231994957","https://openalex.org/W3185179407","https://openalex.org/W3097220695","https://openalex.org/W4282977429","https://openalex.org/W4285741730","https://openalex.org/W2940336242"],"abstract_inverted_index":{"Binary":[0],"code":[1,7],"analysis":[2,13],"is":[3,53,72,91,104,138,199],"vital":[4],"in":[5,206],"source":[6],"unavailable":[8],"cases,":[9],"such":[10],"as":[11],"malware":[12],"and":[14,59,76,96,125,176],"software":[15],"vulnerability":[16],"mining.":[17],"Its":[18],"first":[19,58],"step":[20],"could":[21],"be":[22],"function":[23,26,32,119],"identification.":[24],"Most":[25],"identification":[27],"methods":[28],"are":[29,181],"based":[30],"on":[31,140,183],"prologs/epilogs.":[33,40],"However,":[34],"functions":[35],"may":[36],"not":[37,121],"have":[38],"standard":[39],"To":[41],"identify":[42,55,61,75],"these":[43],"functions,":[44],"we":[45],"need":[46],"to":[47,54,74,93],"use":[48],"other":[49,204],"methods.":[50],"One":[51],"approach":[52,90],"return":[56,79,102,111,115,128],"instructions":[57],"then":[60],"the":[62,68,122,131,184,207,210],"start":[63],"of":[64,133,196,203],"a":[65,78,82,88,101,118,134],"function.":[66,135],"Currently,":[67],"multi-layer":[69],"perceptron":[70],"model":[71],"exploited":[73],"validate":[77],"instruction":[80,103,116,129],"at":[81,130],"specific":[83],"location.":[84],"On":[85],"this":[86],"basis,":[87],"new":[89],"proposed":[92],"improve":[94],"accuracy":[95,195],"provide":[97],"more":[98],"details.":[99],"Specifically,":[100],"classified":[105],"into":[106],"three":[107],"classes:":[108],"(1)":[109],"false":[110],"instruction,":[112,124],"(2)":[113],"true":[114,127],"inner":[117],"but":[120],"last":[123],"(3)":[126],"end":[132],"The":[136,188],"evaluation":[137],"performed":[139],"5782":[141],"real-world":[142],"binaries.":[143],"Meanwhile,":[144],"common":[145],"classifiers":[146,205],"including":[147,209],"fully":[148],"connected":[149],"neural":[150],"network,":[151],"Two-layer":[152,158,164],"Bidirectional":[153,159,165],"Recurrent":[154,161],"Neural":[155],"Network":[156,169],"(TBRNN),":[157],"Gate":[160],"Unit":[162],"(TBGRU),":[163],"Long":[166],"Short-term":[167],"Memory":[168],"(TBLSTM),":[170],"Decision":[171],"Tree,":[172],"Random":[173],"Forest,":[174],"XGBoost,":[175],"Support":[177],"Vector":[178],"Machine":[179],"(SVM)":[180],"evaluated":[182],"same":[185],"data":[186],"set.":[187],"result":[189],"shows":[190],"that":[191,202],"TBLSTM":[192],"achieves":[193],"an":[194],"99.78%,":[197],"which":[198],"higher":[200],"than":[201],"evaluation,":[208],"state-of-the-art":[211],"tool":[212],"IDA":[213],"Pro":[214],"7.7.":[215]},"counts_by_year":[],"updated_date":"2026-05-21T06:26:12.895304","created_date":"2025-10-10T00:00:00"}