{"id":"https://openalex.org/W2114193033","doi":"https://doi.org/10.1145/1706356.1706381","title":"Context-sensitive analysis of obfuscated x86 executables","display_name":"Context-sensitive analysis of obfuscated x86 executables","publication_year":2010,"publication_date":"2010-01-18","ids":{"openalex":"https://openalex.org/W2114193033","doi":"https://doi.org/10.1145/1706356.1706381","mag":"2114193033"},"language":"en","primary_location":{"id":"doi:10.1145/1706356.1706381","is_oa":false,"landing_page_url":"https://doi.org/10.1145/1706356.1706381","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the 2010 ACM SIGPLAN workshop on Partial evaluation and program manipulation","raw_type":"proceedings-article"},"type":"conference-paper","indexed_in":["crossref"],"open_access":{"is_oa":true,"oa_status":"green","oa_url":"http://hdl.handle.net/11449/71657","any_repository_has_fulltext":true},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5005097571","display_name":"Arun Lakhotia","orcid":"https://orcid.org/0000-0001-9943-7795"},"institutions":[{"id":"https://openalex.org/I79516672","display_name":"University of Louisiana at Lafayette","ror":"https://ror.org/01x8rc503","country_code":"US","type":"education","lineage":["https://openalex.org/I2799628689","https://openalex.org/I79516672"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Arun Lakhotia","raw_affiliation_strings":["University of Louisiana at Lafayette, Lafayette, LA, USA"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"University of Louisiana at Lafayette, Lafayette, LA, USA","institution_ids":["https://openalex.org/I79516672"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5038742950","display_name":"Davidson R. Boccardo","orcid":null},"institutions":[{"id":"https://openalex.org/I4210111188","display_name":"Universidade Paulista","ror":"https://ror.org/020v13m88","country_code":"BR","type":"education","lineage":["https://openalex.org/I4210111188"]},{"id":"https://openalex.org/I879563668","display_name":"Universidade Estadual Paulista (Unesp)","ror":"https://ror.org/00987cb86","country_code":"BR","type":"education","lineage":["https://openalex.org/I879563668"]}],"countries":["BR"],"is_corresponding":false,"raw_author_name":"Davidson R. Boccardo","raw_affiliation_strings":["Paulista State University (UNESP), S\u00e3o Jos\u00e9 do Rio Preto, Brazil"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Paulista State University (UNESP), S\u00e3o Jos\u00e9 do Rio Preto, Brazil","institution_ids":["https://openalex.org/I4210111188","https://openalex.org/I879563668"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5003052622","display_name":"Anshuman Singh","orcid":"https://orcid.org/0000-0003-2705-6453"},"institutions":[{"id":"https://openalex.org/I79516672","display_name":"University of Louisiana at Lafayette","ror":"https://ror.org/01x8rc503","country_code":"US","type":"education","lineage":["https://openalex.org/I2799628689","https://openalex.org/I79516672"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Anshuman Singh","raw_affiliation_strings":["University of Louisiana at Lafayette, Lafayette, LA, USA"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"University of Louisiana at Lafayette, Lafayette, LA, USA","institution_ids":["https://openalex.org/I79516672"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5036998229","display_name":"Aleardo Manacero","orcid":"https://orcid.org/0000-0002-4581-7482"},"institutions":[{"id":"https://openalex.org/I4210111188","display_name":"Universidade Paulista","ror":"https://ror.org/020v13m88","country_code":"BR","type":"education","lineage":["https://openalex.org/I4210111188"]},{"id":"https://openalex.org/I879563668","display_name":"Universidade Estadual Paulista (Unesp)","ror":"https://ror.org/00987cb86","country_code":"BR","type":"education","lineage":["https://openalex.org/I879563668"]}],"countries":["BR"],"is_corresponding":false,"raw_author_name":"Aleardo Manacero","raw_affiliation_strings":["Paulista State University (UNESP), S\u00e3o Jos\u00e9 do Rio Preto, Brazil"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Paulista State University (UNESP), S\u00e3o Jos\u00e9 do Rio Preto, Brazil","institution_ids":["https://openalex.org/I4210111188","https://openalex.org/I879563668"]}]}],"institutions":[],"countries_distinct_count":2,"institutions_distinct_count":3,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":2.561,"has_fulltext":false,"cited_by_count":12,"citation_normalized_percentile":{"value":0.91155141,"is_in_top_1_percent":false,"is_in_top_10_percent":true},"cited_by_percentile_year":{"min":89,"max":98},"biblio":{"volume":null,"issue":null,"first_page":"131","last_page":"140"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":0.9998999834060669,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":0.9998999834060669,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11424","display_name":"Security and Verification in Computing","score":0.9998000264167786,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10743","display_name":"Software Testing and Debugging Techniques","score":0.9962000250816345,"subfield":{"id":"https://openalex.org/subfields/1712","display_name":"Software"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.8279056549072266},{"id":"https://openalex.org/keywords/executable","display_name":"Executable","score":0.7175920009613037},{"id":"https://openalex.org/keywords/call-graph","display_name":"Call graph","score":0.6762412190437317},{"id":"https://openalex.org/keywords/context","display_name":"Context (archaeology)","score":0.6630513668060303},{"id":"https://openalex.org/keywords/programming-language","display_name":"Programming language","score":0.5713688731193542},{"id":"https://openalex.org/keywords/abstract-interpretation","display_name":"Abstract interpretation","score":0.5612664818763733},{"id":"https://openalex.org/keywords/semantics","display_name":"Semantics (computer science)","score":0.4588592052459717},{"id":"https://openalex.org/keywords/theoretical-computer-science","display_name":"Theoretical computer science","score":0.45361849665641785},{"id":"https://openalex.org/keywords/call-stack","display_name":"Call stack","score":0.42921626567840576},{"id":"https://openalex.org/keywords/x86","display_name":"x86","score":0.4188452363014221},{"id":"https://openalex.org/keywords/algorithm","display_name":"Algorithm","score":0.3359403610229492},{"id":"https://openalex.org/keywords/stack","display_name":"Stack (abstract data type)","score":0.28681159019470215},{"id":"https://openalex.org/keywords/software","display_name":"Software","score":0.09908139705657959}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.8279056549072266},{"id":"https://openalex.org/C160145156","wikidata":"https://www.wikidata.org/wiki/Q778586","display_name":"Executable","level":2,"score":0.7175920009613037},{"id":"https://openalex.org/C102379954","wikidata":"https://www.wikidata.org/wiki/Q2589940","display_name":"Call graph","level":2,"score":0.6762412190437317},{"id":"https://openalex.org/C2779343474","wikidata":"https://www.wikidata.org/wiki/Q3109175","display_name":"Context (archaeology)","level":2,"score":0.6630513668060303},{"id":"https://openalex.org/C199360897","wikidata":"https://www.wikidata.org/wiki/Q9143","display_name":"Programming language","level":1,"score":0.5713688731193542},{"id":"https://openalex.org/C2780654840","wikidata":"https://www.wikidata.org/wiki/Q333341","display_name":"Abstract interpretation","level":2,"score":0.5612664818763733},{"id":"https://openalex.org/C184337299","wikidata":"https://www.wikidata.org/wiki/Q1437428","display_name":"Semantics (computer science)","level":2,"score":0.4588592052459717},{"id":"https://openalex.org/C80444323","wikidata":"https://www.wikidata.org/wiki/Q2878974","display_name":"Theoretical computer science","level":1,"score":0.45361849665641785},{"id":"https://openalex.org/C119024030","wikidata":"https://www.wikidata.org/wiki/Q759899","display_name":"Call stack","level":3,"score":0.42921626567840576},{"id":"https://openalex.org/C170723468","wikidata":"https://www.wikidata.org/wiki/Q182933","display_name":"x86","level":3,"score":0.4188452363014221},{"id":"https://openalex.org/C11413529","wikidata":"https://www.wikidata.org/wiki/Q8366","display_name":"Algorithm","level":1,"score":0.3359403610229492},{"id":"https://openalex.org/C9395851","wikidata":"https://www.wikidata.org/wiki/Q177929","display_name":"Stack (abstract data type)","level":2,"score":0.28681159019470215},{"id":"https://openalex.org/C2777904410","wikidata":"https://www.wikidata.org/wiki/Q7397","display_name":"Software","level":2,"score":0.09908139705657959},{"id":"https://openalex.org/C151730666","wikidata":"https://www.wikidata.org/wiki/Q7205","display_name":"Paleontology","level":1,"score":0.0},{"id":"https://openalex.org/C86803240","wikidata":"https://www.wikidata.org/wiki/Q420","display_name":"Biology","level":0,"score":0.0}],"mesh":[],"locations_count":4,"locations":[{"id":"doi:10.1145/1706356.1706381","is_oa":false,"landing_page_url":"https://doi.org/10.1145/1706356.1706381","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the 2010 ACM SIGPLAN workshop on Partial evaluation and program manipulation","raw_type":"proceedings-article"},{"id":"pmh:oai:CiteSeerX.psu:10.1.1.309.9821","is_oa":false,"landing_page_url":"http://citeseerx.ist.psu.edu/viewdoc/summary?doi=10.1.1.309.9821","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":"http://www.cacs.louisiana.edu/labs/SRL/publications/2010-pepm-lakhotia-boccardo-singh-manacero.pdf","raw_type":"text"},{"id":"pmh:oai:acervodigital.unesp.br:11449/71657","is_oa":false,"landing_page_url":"http://acervodigital.unesp.br/handle/11449/71657","pdf_url":null,"source":{"id":"https://openalex.org/S4306400256","display_name":"Acervo Digital da Universidade Estadual Paulista (Universidade Estadual Paulista)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I4210115194","host_organization_name":"Funda\u00e7\u00e3o para o Desenvolvimento da UNESP","host_organization_lineage":["https://openalex.org/I4210115194"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":"","raw_type":"outro"},{"id":"pmh:oai:repositorio.unesp.br:11449/71657","is_oa":true,"landing_page_url":"http://hdl.handle.net/11449/71657","pdf_url":null,"source":{"id":"https://openalex.org/S4377196277","display_name":"UNESP Institutional Repository (S\u00e3o Paulo State University)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I879563668","host_organization_name":"Universidade Estadual Paulista (Unesp)","host_organization_lineage":["https://openalex.org/I879563668"],"host_organization_lineage_names":[],"type":"repository"},"license":"other-oa","license_id":"https://openalex.org/licenses/other-oa","version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":"","raw_type":"info:eu-repo/semantics/conferencePaper"}],"best_oa_location":{"id":"pmh:oai:repositorio.unesp.br:11449/71657","is_oa":true,"landing_page_url":"http://hdl.handle.net/11449/71657","pdf_url":null,"source":{"id":"https://openalex.org/S4377196277","display_name":"UNESP Institutional Repository (S\u00e3o Paulo State University)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I879563668","host_organization_name":"Universidade Estadual Paulista (Unesp)","host_organization_lineage":["https://openalex.org/I879563668"],"host_organization_lineage_names":[],"type":"repository"},"license":"other-oa","license_id":"https://openalex.org/licenses/other-oa","version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":"","raw_type":"info:eu-repo/semantics/conferencePaper"},"sustainable_development_goals":[],"awards":[],"funders":[],"has_content":{"grobid_xml":false,"pdf":false},"content_urls":null,"referenced_works_count":38,"referenced_works":["https://openalex.org/W22973579","https://openalex.org/W148396834","https://openalex.org/W175051244","https://openalex.org/W563453116","https://openalex.org/W1505705820","https://openalex.org/W1524758670","https://openalex.org/W1544837488","https://openalex.org/W1557543533","https://openalex.org/W1560986578","https://openalex.org/W1565879960","https://openalex.org/W1591136029","https://openalex.org/W1820253543","https://openalex.org/W1994020507","https://openalex.org/W2004633100","https://openalex.org/W2014764321","https://openalex.org/W2030906223","https://openalex.org/W2042708654","https://openalex.org/W2043100293","https://openalex.org/W2078739669","https://openalex.org/W2099107163","https://openalex.org/W2122471594","https://openalex.org/W2127929122","https://openalex.org/W2130838933","https://openalex.org/W2141097255","https://openalex.org/W2142368292","https://openalex.org/W2146567535","https://openalex.org/W2151360539","https://openalex.org/W2158600037","https://openalex.org/W2166462894","https://openalex.org/W2170267084","https://openalex.org/W2770491639","https://openalex.org/W3006548028","https://openalex.org/W3139953989","https://openalex.org/W4238295473","https://openalex.org/W4244831445","https://openalex.org/W4255249960","https://openalex.org/W4285719527","https://openalex.org/W6608490707"],"related_works":["https://openalex.org/W2110615297","https://openalex.org/W2527376031","https://openalex.org/W1972429847","https://openalex.org/W1487950530","https://openalex.org/W2383362428","https://openalex.org/W4302013158","https://openalex.org/W2993890883","https://openalex.org/W2052026825","https://openalex.org/W1520511168","https://openalex.org/W2030906223"],"abstract_inverted_index":{"A":[0,81],"method":[1,161],"for":[2,45,71,154,175],"context-sensitive":[3,46,156,168,184],"analysis":[4,47,157],"of":[5,28,41,84,94,108,117,131,150,170,186],"binaries":[6,19],"that":[7,88,182],"may":[8,20],"have":[9,48],"obfuscated":[10,177],"procedure":[11,59],"call":[12,31,60],"and":[13,32,43,61,110,146,193],"return":[14,62],"operations":[15,77],"is":[16,86,89,128,140,163,194],"presented.":[17],"Such":[18],"use":[21],"operators":[22],"to":[23,35,58,142,147,165],"directly":[24],"manipulate":[25],"stack":[26,96],"instead":[27],"using":[29,158],"native":[30],"ret":[33],"instructions":[34],"achieve":[36],"equivalent":[37],"behavior.":[38],"Since":[39],"definition":[40],"context-sensitivity":[42,85],"algorithms":[44],"thus":[49],"far":[50],"been":[51],"based":[52,90,138,152],"on":[53,91],"the":[54,92,95,126,155,183,187],"specific":[55],"semantics":[56],"associated":[57,105],"operations,":[63],"classic":[64],"interprocedural":[65,121],"analyses":[66],"cannot":[67,78],"be":[68,79,113],"used":[69,164],"reliably":[70],"analyzing":[72],"programs":[73],"in":[74,102,115,119,133],"which":[75],"these":[76],"discerned.":[80],"new":[82],"notion":[83],"introduced":[87],"state":[93],"at":[97],"any":[98],"instruction.":[99],"While":[100],"changes":[101,132],"`calling'-context":[103],"are":[104],"with":[106],"transfer":[107],"control,":[109],"hence":[111],"can":[112],"reasoned":[114],"terms":[116],"paths":[118],"an":[120],"control":[122],"flow":[123],"graph":[124],"(ICFG),":[125],"same":[127],"not":[129],"true":[130],"'stack'-context.":[134],"An":[135],"abstract":[136],"interpretation":[137],"framework":[139],"developed":[141],"reason":[143],"about":[144],"stack-contexts":[145],"derive":[148],"analogues":[149],"call-strings":[151],"methods":[153],"stack-context.":[159],"The":[160],"presented":[162],"create":[166],"a":[167],"version":[169,185],"Venable":[171],"et":[172],"al.'s":[173],"algorithm":[174,188],"detecting":[176],"calls.":[178],"Experimental":[179],"results":[180,192],"show":[181],"generates":[189],"more":[190,197],"precise":[191],"also":[195],"computationally":[196],"efficient":[198],"than":[199],"its":[200],"context-insensitive":[201],"counterpart.":[202]},"counts_by_year":[{"year":2016,"cited_by_count":2},{"year":2015,"cited_by_count":1},{"year":2014,"cited_by_count":1},{"year":2013,"cited_by_count":4},{"year":2012,"cited_by_count":4}],"updated_date":"2026-07-29T14:22:42.915294","created_date":"2025-10-10T00:00:00"}