{"id":"https://openalex.org/W2085416455","doi":"https://doi.org/10.1145/2508859.2516664","title":"Obfuscation resilient binary code reuse through trace-oriented programming","display_name":"Obfuscation resilient binary code reuse through trace-oriented programming","publication_year":2013,"publication_date":"2013-01-01","ids":{"openalex":"https://openalex.org/W2085416455","doi":"https://doi.org/10.1145/2508859.2516664","mag":"2085416455"},"language":"en","primary_location":{"id":"doi:10.1145/2508859.2516664","is_oa":false,"landing_page_url":"https://doi.org/10.1145/2508859.2516664","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the 2013 ACM SIGSAC conference on Computer & communications security - CCS '13","raw_type":"proceedings-article"},"type":"article","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5069622674","display_name":"Junyuan Zeng","orcid":"https://orcid.org/0000-0002-2413-3065"},"institutions":[{"id":"https://openalex.org/I162577319","display_name":"The University of Texas at Dallas","ror":"https://ror.org/049emcs32","country_code":"US","type":"education","lineage":["https://openalex.org/I162577319"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Junyuan Zeng","raw_affiliation_strings":["The University of Texas at Dallas, Richardson, TX, USA","The University of Texas at Dallas,Richardson,TX,USA"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"The University of Texas at Dallas, Richardson, TX, USA","institution_ids":["https://openalex.org/I162577319"]},{"raw_affiliation_string":"The University of Texas at Dallas,Richardson,TX,USA","institution_ids":["https://openalex.org/I162577319"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5059583347","display_name":"Yangchun Fu","orcid":null},"institutions":[{"id":"https://openalex.org/I162577319","display_name":"The University of Texas at Dallas","ror":"https://ror.org/049emcs32","country_code":"US","type":"education","lineage":["https://openalex.org/I162577319"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Yangchun Fu","raw_affiliation_strings":["The University of Texas at Dallas, Richardson, TX, USA","The University of Texas at Dallas,Richardson,TX,USA"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"The University of Texas at Dallas, Richardson, TX, USA","institution_ids":["https://openalex.org/I162577319"]},{"raw_affiliation_string":"The University of Texas at Dallas,Richardson,TX,USA","institution_ids":["https://openalex.org/I162577319"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5108321396","display_name":"K.A. Miller","orcid":null},"institutions":[{"id":"https://openalex.org/I162577319","display_name":"The University of Texas at Dallas","ror":"https://ror.org/049emcs32","country_code":"US","type":"education","lineage":["https://openalex.org/I162577319"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Kenneth A. Miller","raw_affiliation_strings":["The University of Texas at Dallas, Richardson, TX, USA","The University of Texas at Dallas,Richardson,TX,USA"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"The University of Texas at Dallas, Richardson, TX, USA","institution_ids":["https://openalex.org/I162577319"]},{"raw_affiliation_string":"The University of Texas at Dallas,Richardson,TX,USA","institution_ids":["https://openalex.org/I162577319"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5026864098","display_name":"Zhiqiang Lin","orcid":"https://orcid.org/0000-0001-6527-5994"},"institutions":[{"id":"https://openalex.org/I162577319","display_name":"The University of Texas at Dallas","ror":"https://ror.org/049emcs32","country_code":"US","type":"education","lineage":["https://openalex.org/I162577319"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Zhiqiang Lin","raw_affiliation_strings":["The University of Texas at Dallas, Richardson, TX, USA","The University of Texas at Dallas,Richardson,TX,USA"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"The University of Texas at Dallas, Richardson, TX, USA","institution_ids":["https://openalex.org/I162577319"]},{"raw_affiliation_string":"The University of Texas at Dallas,Richardson,TX,USA","institution_ids":["https://openalex.org/I162577319"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5107249133","display_name":"Xiangyu Zhang","orcid":"https://orcid.org/0000-0002-9544-2500"},"institutions":[{"id":"https://openalex.org/I219193219","display_name":"Purdue University West Lafayette","ror":"https://ror.org/02dqehb95","country_code":"US","type":"education","lineage":["https://openalex.org/I219193219"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Xiangyu Zhang","raw_affiliation_strings":["Purdue University, West Lafayette, IN, USA","Purdue University West Lafayette IN USA"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Purdue University, West Lafayette, IN, USA","institution_ids":["https://openalex.org/I219193219"]},{"raw_affiliation_string":"Purdue University West Lafayette IN USA","institution_ids":["https://openalex.org/I219193219"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5108280598","display_name":"Dongyan Xu","orcid":null},"institutions":[{"id":"https://openalex.org/I219193219","display_name":"Purdue University West Lafayette","ror":"https://ror.org/02dqehb95","country_code":"US","type":"education","lineage":["https://openalex.org/I219193219"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Dongyan Xu","raw_affiliation_strings":["Purdue University, West Lafayette, IN, USA","Purdue University West Lafayette IN USA"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Purdue University, West Lafayette, IN, USA","institution_ids":["https://openalex.org/I219193219"]},{"raw_affiliation_string":"Purdue University West Lafayette IN USA","institution_ids":["https://openalex.org/I219193219"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":6,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":5.4753,"has_fulltext":false,"cited_by_count":56,"citation_normalized_percentile":{"value":0.96287529,"is_in_top_1_percent":false,"is_in_top_10_percent":true},"cited_by_percentile_year":{"min":90,"max":99},"biblio":{"volume":null,"issue":null,"first_page":"487","last_page":"498"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":1.0,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":1.0,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11424","display_name":"Security and Verification in Computing","score":0.9991000294685364,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10743","display_name":"Software Testing and Debugging Techniques","score":0.9986000061035156,"subfield":{"id":"https://openalex.org/subfields/1712","display_name":"Software"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.8483136892318726},{"id":"https://openalex.org/keywords/obfuscation","display_name":"Obfuscation","score":0.7839810252189636},{"id":"https://openalex.org/keywords/malware","display_name":"Malware","score":0.7185226678848267},{"id":"https://openalex.org/keywords/dead-code","display_name":"Dead code","score":0.652292013168335},{"id":"https://openalex.org/keywords/code-reuse","display_name":"Code reuse","score":0.5700868368148804},{"id":"https://openalex.org/keywords/binary-code","display_name":"Binary code","score":0.5463252067565918},{"id":"https://openalex.org/keywords/static-program-analysis","display_name":"Static program analysis","score":0.5387737154960632},{"id":"https://openalex.org/keywords/static-analysis","display_name":"Static analysis","score":0.5263544321060181},{"id":"https://openalex.org/keywords/reuse","display_name":"Reuse","score":0.5127543210983276},{"id":"https://openalex.org/keywords/reverse-engineering","display_name":"Reverse engineering","score":0.4985167980194092},{"id":"https://openalex.org/keywords/trace","display_name":"TRACE (psycholinguistics)","score":0.47370144724845886},{"id":"https://openalex.org/keywords/programming-language","display_name":"Programming language","score":0.4581436812877655},{"id":"https://openalex.org/keywords/software","display_name":"Software","score":0.45125991106033325},{"id":"https://openalex.org/keywords/redundant-code","display_name":"Redundant code","score":0.4338390529155731},{"id":"https://openalex.org/keywords/machine-code","display_name":"Machine code","score":0.42897260189056396},{"id":"https://openalex.org/keywords/cryptovirology","display_name":"Cryptovirology","score":0.42631086707115173},{"id":"https://openalex.org/keywords/binary-number","display_name":"Binary number","score":0.42439988255500793},{"id":"https://openalex.org/keywords/theoretical-computer-science","display_name":"Theoretical computer science","score":0.4153721332550049},{"id":"https://openalex.org/keywords/software-development","display_name":"Software development","score":0.2725975215435028},{"id":"https://openalex.org/keywords/operating-system","display_name":"Operating system","score":0.2228756844997406},{"id":"https://openalex.org/keywords/computer-security","display_name":"Computer security","score":0.2144487500190735},{"id":"https://openalex.org/keywords/code-generation","display_name":"Code generation","score":0.2003265619277954}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.8483136892318726},{"id":"https://openalex.org/C40305131","wikidata":"https://www.wikidata.org/wiki/Q2616305","display_name":"Obfuscation","level":2,"score":0.7839810252189636},{"id":"https://openalex.org/C541664917","wikidata":"https://www.wikidata.org/wiki/Q14001","display_name":"Malware","level":2,"score":0.7185226678848267},{"id":"https://openalex.org/C47434764","wikidata":"https://www.wikidata.org/wiki/Q1770035","display_name":"Dead code","level":5,"score":0.652292013168335},{"id":"https://openalex.org/C2778583558","wikidata":"https://www.wikidata.org/wiki/Q771245","display_name":"Code reuse","level":3,"score":0.5700868368148804},{"id":"https://openalex.org/C63435697","wikidata":"https://www.wikidata.org/wiki/Q864135","display_name":"Binary code","level":3,"score":0.5463252067565918},{"id":"https://openalex.org/C137287247","wikidata":"https://www.wikidata.org/wiki/Q1329550","display_name":"Static program analysis","level":4,"score":0.5387737154960632},{"id":"https://openalex.org/C97686452","wikidata":"https://www.wikidata.org/wiki/Q7604153","display_name":"Static analysis","level":2,"score":0.5263544321060181},{"id":"https://openalex.org/C206588197","wikidata":"https://www.wikidata.org/wiki/Q846574","display_name":"Reuse","level":2,"score":0.5127543210983276},{"id":"https://openalex.org/C207850805","wikidata":"https://www.wikidata.org/wiki/Q269608","display_name":"Reverse engineering","level":2,"score":0.4985167980194092},{"id":"https://openalex.org/C75291252","wikidata":"https://www.wikidata.org/wiki/Q1315756","display_name":"TRACE (psycholinguistics)","level":2,"score":0.47370144724845886},{"id":"https://openalex.org/C199360897","wikidata":"https://www.wikidata.org/wiki/Q9143","display_name":"Programming language","level":1,"score":0.4581436812877655},{"id":"https://openalex.org/C2777904410","wikidata":"https://www.wikidata.org/wiki/Q7397","display_name":"Software","level":2,"score":0.45125991106033325},{"id":"https://openalex.org/C151578736","wikidata":"https://www.wikidata.org/wiki/Q1251793","display_name":"Redundant code","level":4,"score":0.4338390529155731},{"id":"https://openalex.org/C115168132","wikidata":"https://www.wikidata.org/wiki/Q55813","display_name":"Machine code","level":3,"score":0.42897260189056396},{"id":"https://openalex.org/C84525096","wikidata":"https://www.wikidata.org/wiki/Q3506050","display_name":"Cryptovirology","level":3,"score":0.42631086707115173},{"id":"https://openalex.org/C48372109","wikidata":"https://www.wikidata.org/wiki/Q3913","display_name":"Binary number","level":2,"score":0.42439988255500793},{"id":"https://openalex.org/C80444323","wikidata":"https://www.wikidata.org/wiki/Q2878974","display_name":"Theoretical computer science","level":1,"score":0.4153721332550049},{"id":"https://openalex.org/C529173508","wikidata":"https://www.wikidata.org/wiki/Q638608","display_name":"Software development","level":3,"score":0.2725975215435028},{"id":"https://openalex.org/C111919701","wikidata":"https://www.wikidata.org/wiki/Q9135","display_name":"Operating system","level":1,"score":0.2228756844997406},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.2144487500190735},{"id":"https://openalex.org/C133162039","wikidata":"https://www.wikidata.org/wiki/Q1061077","display_name":"Code generation","level":3,"score":0.2003265619277954},{"id":"https://openalex.org/C86803240","wikidata":"https://www.wikidata.org/wiki/Q420","display_name":"Biology","level":0,"score":0.0},{"id":"https://openalex.org/C94375191","wikidata":"https://www.wikidata.org/wiki/Q11205","display_name":"Arithmetic","level":1,"score":0.0},{"id":"https://openalex.org/C26517878","wikidata":"https://www.wikidata.org/wiki/Q228039","display_name":"Key (lock)","level":2,"score":0.0},{"id":"https://openalex.org/C169590947","wikidata":"https://www.wikidata.org/wiki/Q47506","display_name":"Compiler","level":2,"score":0.0},{"id":"https://openalex.org/C18903297","wikidata":"https://www.wikidata.org/wiki/Q7150","display_name":"Ecology","level":1,"score":0.0},{"id":"https://openalex.org/C138885662","wikidata":"https://www.wikidata.org/wiki/Q5891","display_name":"Philosophy","level":0,"score":0.0},{"id":"https://openalex.org/C33923547","wikidata":"https://www.wikidata.org/wiki/Q395","display_name":"Mathematics","level":0,"score":0.0},{"id":"https://openalex.org/C41895202","wikidata":"https://www.wikidata.org/wiki/Q8162","display_name":"Linguistics","level":1,"score":0.0}],"mesh":[],"locations_count":3,"locations":[{"id":"doi:10.1145/2508859.2516664","is_oa":false,"landing_page_url":"https://doi.org/10.1145/2508859.2516664","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the 2013 ACM SIGSAC conference on Computer & communications security - CCS '13","raw_type":"proceedings-article"},{"id":"pmh:oai:CiteSeerX.psu:10.1.1.675.8166","is_oa":false,"landing_page_url":"http://citeseerx.ist.psu.edu/viewdoc/summary?doi=10.1.1.675.8166","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":"http://www.utdallas.edu/%7Ezxl111930/file/CCS13.pdf","raw_type":"text"},{"id":"pmh:oai:CiteSeerX.psu:10.1.1.720.7126","is_oa":false,"landing_page_url":"http://citeseerx.ist.psu.edu/viewdoc/summary?doi=10.1.1.720.7126","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":"https://www.cs.purdue.edu/homes/dxu/pubs/CCS13_TOP.pdf","raw_type":"text"}],"best_oa_location":null,"sustainable_development_goals":[],"awards":[],"funders":[{"id":"https://openalex.org/F4320306078","display_name":"U.S. Department of Defense","ror":"https://ror.org/0447fe631"},{"id":"https://openalex.org/F4320332180","display_name":"Defense Advanced Research Projects Agency","ror":"https://ror.org/02caytj08"}],"has_content":{"pdf":false,"grobid_xml":false},"content_urls":null,"referenced_works_count":47,"referenced_works":["https://openalex.org/W157156687","https://openalex.org/W165688198","https://openalex.org/W324032601","https://openalex.org/W961099885","https://openalex.org/W1499241274","https://openalex.org/W1508225132","https://openalex.org/W1521580745","https://openalex.org/W1550112417","https://openalex.org/W1567046609","https://openalex.org/W1578878051","https://openalex.org/W1641762327","https://openalex.org/W1710734607","https://openalex.org/W1797940162","https://openalex.org/W1956767865","https://openalex.org/W1968061803","https://openalex.org/W1975514564","https://openalex.org/W2002934700","https://openalex.org/W2004633100","https://openalex.org/W2009489720","https://openalex.org/W2014589236","https://openalex.org/W2049867480","https://openalex.org/W2065948900","https://openalex.org/W2070251230","https://openalex.org/W2096449544","https://openalex.org/W2096921767","https://openalex.org/W2102970979","https://openalex.org/W2109903957","https://openalex.org/W2117030266","https://openalex.org/W2117470854","https://openalex.org/W2126734536","https://openalex.org/W2128389850","https://openalex.org/W2128832779","https://openalex.org/W2132897303","https://openalex.org/W2134312016","https://openalex.org/W2134633067","https://openalex.org/W2135162105","https://openalex.org/W2137530017","https://openalex.org/W2138580357","https://openalex.org/W2140839850","https://openalex.org/W2147118954","https://openalex.org/W2148755014","https://openalex.org/W2156453323","https://openalex.org/W2159702664","https://openalex.org/W2168468057","https://openalex.org/W2172163424","https://openalex.org/W2398729674","https://openalex.org/W2504609973"],"related_works":["https://openalex.org/W1555552217","https://openalex.org/W2091871187","https://openalex.org/W179346248","https://openalex.org/W3020408162","https://openalex.org/W1527771852","https://openalex.org/W4232768799","https://openalex.org/W181269922","https://openalex.org/W91735429","https://openalex.org/W1777501891","https://openalex.org/W2567138568"],"abstract_inverted_index":{"With":[0],"the":[1,71],"wide":[2],"existence":[3],"of":[4,100,123,132],"binary":[5,30,67,73,147,156],"code,":[6],"it":[7,12],"is":[8,140],"desirable":[9],"to":[10,75,142],"reuse":[11],"in":[13,150],"many":[14],"security":[15],"applications,":[16],"such":[17,93],"as":[18,94],"malware":[19,109,113,151],"analysis":[20,43,92,115,152],"and":[21,35,44,80,98,116,125,134,153,155],"software":[22,64,136],"patching.":[23],"While":[24],"prior":[25],"approaches":[26],"have":[27,119],"shown":[28],"that":[29,138],"code":[31,68,74,77,145],"can":[32,105],"be":[33,106],"extracted":[34],"reused,":[36],"they":[37],"are":[38],"often":[39],"based":[40],"on":[41],"static":[42],"face":[45],"challenges":[46],"when":[47],"coping":[48],"with":[49,78,129],"obfuscated":[50],"binaries.":[51],"This":[52],"paper":[53],"introduces":[54],"trace-oriented":[55],"programming":[56],"(TOP),":[57],"a":[58,121,130],"general":[59],"framework":[60],"for":[61,108,112],"generating":[62],"new":[63],"from":[65,84,90,146],"existing":[66,85],"by":[69],"elevating":[70],"low-level":[72],"C":[76],"templates":[79],"inlined":[81],"assembly.":[82],"Different":[83],"work,":[86],"TOP":[87,104,124,139],"gains":[88],"benefits":[89],"dynamic":[91],"resilience":[95],"against":[96],"obfuscation":[97],"avoidance":[99],"points-to":[101],"analysis.":[102],"Thus,":[103],"used":[107],"analysis,":[110],"especially":[111],"function":[114,157],"identification.":[117],"We":[118],"implemented":[120],"proof-of-concept":[122],"our":[126],"evaluation":[127],"results":[128],"range":[131],"benign":[133],"malicious":[135],"indicate":[137],"able":[141],"reconstruct":[143],"source":[144],"execution":[148],"traces":[149],"identification,":[154],"transplanting.":[158]},"counts_by_year":[{"year":2025,"cited_by_count":2},{"year":2024,"cited_by_count":3},{"year":2022,"cited_by_count":6},{"year":2021,"cited_by_count":2},{"year":2020,"cited_by_count":2},{"year":2019,"cited_by_count":10},{"year":2018,"cited_by_count":7},{"year":2017,"cited_by_count":7},{"year":2016,"cited_by_count":9},{"year":2015,"cited_by_count":6},{"year":2014,"cited_by_count":1},{"year":2013,"cited_by_count":1}],"updated_date":"2026-06-11T09:08:48.828518","created_date":"2025-10-10T00:00:00"}