{"id":"https://openalex.org/W1966973702","doi":"https://doi.org/10.1145/2610384.2610407","title":"Make it work, make it right, make it fast: building a platform-neutral whole-system dynamic binary analysis platform","display_name":"Make it work, make it right, make it fast: building a platform-neutral whole-system dynamic binary analysis platform","publication_year":2014,"publication_date":"2014-07-11","ids":{"openalex":"https://openalex.org/W1966973702","doi":"https://doi.org/10.1145/2610384.2610407","mag":"1966973702"},"language":"en","primary_location":{"id":"doi:10.1145/2610384.2610407","is_oa":false,"landing_page_url":"https://doi.org/10.1145/2610384.2610407","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the 2014 International Symposium on Software Testing and Analysis","raw_type":"proceedings-article"},"type":"article","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5032634880","display_name":"Andrew Henderson","orcid":null},"institutions":[{"id":"https://openalex.org/I70983195","display_name":"Syracuse University","ror":"https://ror.org/025r5qe02","country_code":"US","type":"education","lineage":["https://openalex.org/I70983195"]}],"countries":["US"],"is_corresponding":true,"raw_author_name":"Andrew Henderson","raw_affiliation_strings":["Syracuse University, USA"],"affiliations":[{"raw_affiliation_string":"Syracuse University, USA","institution_ids":["https://openalex.org/I70983195"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5110290219","display_name":"Aravind Prakash","orcid":"https://orcid.org/0000-0002-2994-0480"},"institutions":[{"id":"https://openalex.org/I70983195","display_name":"Syracuse University","ror":"https://ror.org/025r5qe02","country_code":"US","type":"education","lineage":["https://openalex.org/I70983195"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Aravind Prakash","raw_affiliation_strings":["Syracuse University, USA"],"affiliations":[{"raw_affiliation_string":"Syracuse University, USA","institution_ids":["https://openalex.org/I70983195"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5061647216","display_name":"Lok Kwong Yan","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Lok Kwong Yan","raw_affiliation_strings":["Rome Laboratory, USA"],"affiliations":[{"raw_affiliation_string":"Rome Laboratory, USA","institution_ids":[]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5101086869","display_name":"Xunchao Hu","orcid":null},"institutions":[{"id":"https://openalex.org/I70983195","display_name":"Syracuse University","ror":"https://ror.org/025r5qe02","country_code":"US","type":"education","lineage":["https://openalex.org/I70983195"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Xunchao Hu","raw_affiliation_strings":["Syracuse University, USA"],"affiliations":[{"raw_affiliation_string":"Syracuse University, USA","institution_ids":["https://openalex.org/I70983195"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5083201800","display_name":"Xujiewen Wang","orcid":null},"institutions":[{"id":"https://openalex.org/I70983195","display_name":"Syracuse University","ror":"https://ror.org/025r5qe02","country_code":"US","type":"education","lineage":["https://openalex.org/I70983195"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Xujiewen Wang","raw_affiliation_strings":["Syracuse University, USA"],"affiliations":[{"raw_affiliation_string":"Syracuse University, USA","institution_ids":["https://openalex.org/I70983195"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5074296321","display_name":"Rundong Zhou","orcid":"https://orcid.org/0009-0000-8996-2852"},"institutions":[{"id":"https://openalex.org/I70983195","display_name":"Syracuse University","ror":"https://ror.org/025r5qe02","country_code":"US","type":"education","lineage":["https://openalex.org/I70983195"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Rundong Zhou","raw_affiliation_strings":["Syracuse University, USA"],"affiliations":[{"raw_affiliation_string":"Syracuse University, USA","institution_ids":["https://openalex.org/I70983195"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5073376805","display_name":"Heng Yin","orcid":"https://orcid.org/0000-0002-8942-7742"},"institutions":[{"id":"https://openalex.org/I70983195","display_name":"Syracuse University","ror":"https://ror.org/025r5qe02","country_code":"US","type":"education","lineage":["https://openalex.org/I70983195"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Heng Yin","raw_affiliation_strings":["Syracuse University, USA"],"affiliations":[{"raw_affiliation_string":"Syracuse University, USA","institution_ids":["https://openalex.org/I70983195"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":7,"corresponding_author_ids":["https://openalex.org/A5032634880"],"corresponding_institution_ids":["https://openalex.org/I70983195"],"apc_list":null,"apc_paid":null,"fwci":19.80222312,"has_fulltext":false,"cited_by_count":97,"citation_normalized_percentile":{"value":0.99229252,"is_in_top_1_percent":true,"is_in_top_10_percent":true},"cited_by_percentile_year":{"min":96,"max":100},"biblio":{"volume":null,"issue":null,"first_page":"248","last_page":"258"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11424","display_name":"Security and Verification in Computing","score":0.9998000264167786,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11424","display_name":"Security and Verification in Computing","score":0.9998000264167786,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10054","display_name":"Parallel Computing and Optimization Techniques","score":0.9987000226974487,"subfield":{"id":"https://openalex.org/subfields/1708","display_name":"Hardware and Architecture"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":0.9987000226974487,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.8205632567405701},{"id":"https://openalex.org/keywords/binary-translation","display_name":"Binary translation","score":0.6245174407958984},{"id":"https://openalex.org/keywords/virtual-machine","display_name":"Virtual machine","score":0.5676131844520569},{"id":"https://openalex.org/keywords/machine-code","display_name":"Machine code","score":0.5321587324142456},{"id":"https://openalex.org/keywords/static-analysis","display_name":"Static analysis","score":0.48939910531044006},{"id":"https://openalex.org/keywords/dynamic-program-analysis","display_name":"Dynamic program analysis","score":0.48399993777275085},{"id":"https://openalex.org/keywords/binary-code","display_name":"Binary code","score":0.47332248091697693},{"id":"https://openalex.org/keywords/spec#","display_name":"Spec#","score":0.4550912380218506},{"id":"https://openalex.org/keywords/operating-system","display_name":"Operating system","score":0.45379388332366943},{"id":"https://openalex.org/keywords/code","display_name":"Code (set theory)","score":0.4429266154766083},{"id":"https://openalex.org/keywords/binary-number","display_name":"Binary number","score":0.44147923588752747},{"id":"https://openalex.org/keywords/plug-in","display_name":"Plug-in","score":0.4239533543586731},{"id":"https://openalex.org/keywords/instruction-set","display_name":"Instruction set","score":0.4218027591705322},{"id":"https://openalex.org/keywords/granularity","display_name":"Granularity","score":0.41726869344711304},{"id":"https://openalex.org/keywords/embedded-system","display_name":"Embedded system","score":0.41460371017456055},{"id":"https://openalex.org/keywords/software","display_name":"Software","score":0.270263671875},{"id":"https://openalex.org/keywords/parallel-computing","display_name":"Parallel computing","score":0.2326875925064087},{"id":"https://openalex.org/keywords/programming-language","display_name":"Programming language","score":0.16159716248512268},{"id":"https://openalex.org/keywords/compiler","display_name":"Compiler","score":0.1562846601009369}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.8205632567405701},{"id":"https://openalex.org/C2778971978","wikidata":"https://www.wikidata.org/wiki/Q2287075","display_name":"Binary translation","level":3,"score":0.6245174407958984},{"id":"https://openalex.org/C25344961","wikidata":"https://www.wikidata.org/wiki/Q192726","display_name":"Virtual machine","level":2,"score":0.5676131844520569},{"id":"https://openalex.org/C115168132","wikidata":"https://www.wikidata.org/wiki/Q55813","display_name":"Machine code","level":3,"score":0.5321587324142456},{"id":"https://openalex.org/C97686452","wikidata":"https://www.wikidata.org/wiki/Q7604153","display_name":"Static analysis","level":2,"score":0.48939910531044006},{"id":"https://openalex.org/C140006998","wikidata":"https://www.wikidata.org/wiki/Q2499307","display_name":"Dynamic program analysis","level":3,"score":0.48399993777275085},{"id":"https://openalex.org/C63435697","wikidata":"https://www.wikidata.org/wiki/Q864135","display_name":"Binary code","level":3,"score":0.47332248091697693},{"id":"https://openalex.org/C2778565505","wikidata":"https://www.wikidata.org/wiki/Q2207566","display_name":"Spec#","level":2,"score":0.4550912380218506},{"id":"https://openalex.org/C111919701","wikidata":"https://www.wikidata.org/wiki/Q9135","display_name":"Operating system","level":1,"score":0.45379388332366943},{"id":"https://openalex.org/C2776760102","wikidata":"https://www.wikidata.org/wiki/Q5139990","display_name":"Code (set theory)","level":3,"score":0.4429266154766083},{"id":"https://openalex.org/C48372109","wikidata":"https://www.wikidata.org/wiki/Q3913","display_name":"Binary number","level":2,"score":0.44147923588752747},{"id":"https://openalex.org/C4924752","wikidata":"https://www.wikidata.org/wiki/Q184148","display_name":"Plug-in","level":2,"score":0.4239533543586731},{"id":"https://openalex.org/C202491316","wikidata":"https://www.wikidata.org/wiki/Q272683","display_name":"Instruction set","level":2,"score":0.4218027591705322},{"id":"https://openalex.org/C177774035","wikidata":"https://www.wikidata.org/wiki/Q1246948","display_name":"Granularity","level":2,"score":0.41726869344711304},{"id":"https://openalex.org/C149635348","wikidata":"https://www.wikidata.org/wiki/Q193040","display_name":"Embedded system","level":1,"score":0.41460371017456055},{"id":"https://openalex.org/C2777904410","wikidata":"https://www.wikidata.org/wiki/Q7397","display_name":"Software","level":2,"score":0.270263671875},{"id":"https://openalex.org/C173608175","wikidata":"https://www.wikidata.org/wiki/Q232661","display_name":"Parallel computing","level":1,"score":0.2326875925064087},{"id":"https://openalex.org/C199360897","wikidata":"https://www.wikidata.org/wiki/Q9143","display_name":"Programming language","level":1,"score":0.16159716248512268},{"id":"https://openalex.org/C169590947","wikidata":"https://www.wikidata.org/wiki/Q47506","display_name":"Compiler","level":2,"score":0.1562846601009369},{"id":"https://openalex.org/C33923547","wikidata":"https://www.wikidata.org/wiki/Q395","display_name":"Mathematics","level":0,"score":0.0},{"id":"https://openalex.org/C94375191","wikidata":"https://www.wikidata.org/wiki/Q11205","display_name":"Arithmetic","level":1,"score":0.0},{"id":"https://openalex.org/C177264268","wikidata":"https://www.wikidata.org/wiki/Q1514741","display_name":"Set (abstract data type)","level":2,"score":0.0}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1145/2610384.2610407","is_oa":false,"landing_page_url":"https://doi.org/10.1145/2610384.2610407","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the 2014 International Symposium on Software Testing and Analysis","raw_type":"proceedings-article"}],"best_oa_location":null,"sustainable_development_goals":[{"id":"https://metadata.un.org/sdg/4","score":0.4099999964237213,"display_name":"Quality Education"}],"awards":[],"funders":[],"has_content":{"pdf":false,"grobid_xml":false},"content_urls":null,"referenced_works_count":23,"referenced_works":["https://openalex.org/W1499241274","https://openalex.org/W1522250664","https://openalex.org/W1821004526","https://openalex.org/W1865564993","https://openalex.org/W2089560940","https://openalex.org/W2089745089","https://openalex.org/W2102970979","https://openalex.org/W2103919170","https://openalex.org/W2108747667","https://openalex.org/W2112731379","https://openalex.org/W2119251836","https://openalex.org/W2133217855","https://openalex.org/W2134633067","https://openalex.org/W2135162105","https://openalex.org/W2137530017","https://openalex.org/W2138580357","https://openalex.org/W2140807364","https://openalex.org/W2144789413","https://openalex.org/W2151135920","https://openalex.org/W2156858199","https://openalex.org/W2159702664","https://openalex.org/W2394543764","https://openalex.org/W4239813889"],"related_works":["https://openalex.org/W3152269949","https://openalex.org/W2377995053","https://openalex.org/W2045863886","https://openalex.org/W2912275093","https://openalex.org/W2073155186","https://openalex.org/W2303356221","https://openalex.org/W2093122758","https://openalex.org/W1638297612","https://openalex.org/W30346349","https://openalex.org/W1966973702"],"abstract_inverted_index":{"Dynamic":[0],"binary":[1,15,62],"analysis":[2,16,37,63,136],"is":[3],"a":[4,55,78,88],"prevalent":[5],"and":[6,18,39,118,127,134,148,154,162,172],"indispensable":[7],"technique":[8],"in":[9,131],"program":[10,41],"analysis.":[11],"While":[12],"several":[13],"dynamic":[14,61],"tools":[17],"frameworks":[19],"have":[20],"been":[21],"proposed,":[22],"all":[23],"suffer":[24],"from":[25],"one":[26],"or":[27],"more":[28],"of:":[29],"prohibitive":[30],"performance":[31],"degradation,":[32],"semantic":[33],"gap":[34],"between":[35],"the":[36,40,101,123],"code":[38,147,153],"being":[42,46],"analyzed,":[43],"architecture/OS":[44],"specificity,":[45],"user-mode":[47],"only,":[48],"lacking":[49],"APIs,":[50],"etc.":[51],"We":[52,108],"present":[53,109],"DECAF,":[54],"virtual":[56],"machine":[57],"based,":[58,90],"multi-target,":[59],"whole-system":[60],"framework":[64],"built":[65],"on":[66],"top":[67],"of":[68,125,129,139,142,145,151,166],"QEMU.":[69],"DECAF":[70,96,130,140,157],"provides":[71],"Just-In-Time":[72],"Virtual":[73],"Machine":[74],"Introspection":[75],"combined":[76],"with":[77],"novel":[79],"TCG":[80,102],"instruction-level":[81],"tainting":[82,171],"at":[83],"bit":[84],"granularity,":[85],"backed":[86],"by":[87],"plugin":[89],"simple-to-use":[91],"event":[92],"driven":[93],"programming":[94],"interface.":[95],"exercises":[97],"fine":[98],"control":[99],"over":[100],"instructions":[103],"to":[104,121],"accomplish":[105],"on-the-fly":[106],"optimizations.":[107],"3":[110],"platform-neutral":[111],"plugins":[112],"-":[113],"Instruction":[114],"Tracer,":[115,120],"Keylogger":[116],"Detector,":[117],"API":[119],"demonstrate":[122],"ease":[124],"use":[126],"effectiveness":[128],"writing":[132],"cross-platform":[133],"system-wide":[135],"tools.":[137],"Implementation":[138],"consists":[141],"9550":[143],"lines":[144,150],"C++":[146],"10270":[149],"C":[152],"we":[155],"evaluate":[156],"using":[158],"CPU2006":[159],"SPEC":[160],"benchmarks":[161],"show":[163],"average":[164],"overhead":[165],"605%":[167],"for":[168,174],"system":[169],"wide":[170],"12%":[173],"VMI.":[175]},"counts_by_year":[{"year":2025,"cited_by_count":3},{"year":2024,"cited_by_count":6},{"year":2023,"cited_by_count":7},{"year":2022,"cited_by_count":7},{"year":2021,"cited_by_count":8},{"year":2020,"cited_by_count":7},{"year":2019,"cited_by_count":4},{"year":2018,"cited_by_count":14},{"year":2017,"cited_by_count":10},{"year":2016,"cited_by_count":18},{"year":2015,"cited_by_count":9},{"year":2014,"cited_by_count":4}],"updated_date":"2026-02-20T08:17:22.645390","created_date":"2025-10-10T00:00:00"}