{"id":"https://openalex.org/W2602815560","doi":"https://doi.org/10.1145/3052973.3052995","title":"Extracting Conditional Formulas for Cross-Platform Bug Search","display_name":"Extracting Conditional Formulas for Cross-Platform Bug Search","publication_year":2017,"publication_date":"2017-03-31","ids":{"openalex":"https://openalex.org/W2602815560","doi":"https://doi.org/10.1145/3052973.3052995","mag":"2602815560"},"language":"en","primary_location":{"id":"doi:10.1145/3052973.3052995","is_oa":false,"landing_page_url":"https://doi.org/10.1145/3052973.3052995","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the 2017 ACM on Asia Conference on Computer and Communications Security","raw_type":"proceedings-article"},"type":"article","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5102893279","display_name":"Feng Qian","orcid":"https://orcid.org/0000-0003-2145-6683"},"institutions":[{"id":"https://openalex.org/I70983195","display_name":"Syracuse University","ror":"https://ror.org/025r5qe02","country_code":"US","type":"education","lineage":["https://openalex.org/I70983195"]}],"countries":["US"],"is_corresponding":true,"raw_author_name":"Qian Feng","raw_affiliation_strings":["Syracuse University, Syracuse, NY, USA"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Syracuse University, Syracuse, NY, USA","institution_ids":["https://openalex.org/I70983195"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5100325515","display_name":"Minghua Wang","orcid":"https://orcid.org/0000-0001-5715-130X"},"institutions":[{"id":"https://openalex.org/I98301712","display_name":"Baidu (China)","ror":"https://ror.org/03vs3wt56","country_code":"CN","type":"company","lineage":["https://openalex.org/I98301712"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Minghua Wang","raw_affiliation_strings":["BaiDu X-Lab, Beijing, China"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"BaiDu X-Lab, Beijing, China","institution_ids":["https://openalex.org/I98301712"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5100695047","display_name":"Mu Zhang","orcid":"https://orcid.org/0000-0001-5905-9515"},"institutions":[{"id":"https://openalex.org/I20089843","display_name":"Princeton University","ror":"https://ror.org/00hx57361","country_code":"US","type":"education","lineage":["https://openalex.org/I20089843"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Mu Zhang","raw_affiliation_strings":["NEC Laboratories America, Princeton, NJ, USA"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"NEC Laboratories America, Princeton, NJ, USA","institution_ids":["https://openalex.org/I20089843"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5074296321","display_name":"Rundong Zhou","orcid":"https://orcid.org/0009-0000-8996-2852"},"institutions":[{"id":"https://openalex.org/I70983195","display_name":"Syracuse University","ror":"https://ror.org/025r5qe02","country_code":"US","type":"education","lineage":["https://openalex.org/I70983195"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Rundong Zhou","raw_affiliation_strings":["Syracuse University, Syracuse, NY, USA"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Syracuse University, Syracuse, NY, USA","institution_ids":["https://openalex.org/I70983195"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5032634880","display_name":"Andrew Henderson","orcid":null},"institutions":[{"id":"https://openalex.org/I70983195","display_name":"Syracuse University","ror":"https://ror.org/025r5qe02","country_code":"US","type":"education","lineage":["https://openalex.org/I70983195"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Andrew Henderson","raw_affiliation_strings":["Syracuse University, Syracuse, NY, USA"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Syracuse University, Syracuse, NY, USA","institution_ids":["https://openalex.org/I70983195"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5073376805","display_name":"Heng Yin","orcid":"https://orcid.org/0000-0002-8942-7742"},"institutions":[{"id":"https://openalex.org/I103635307","display_name":"University of California, Riverside","ror":"https://ror.org/03nawhv43","country_code":"US","type":"education","lineage":["https://openalex.org/I103635307"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Heng Yin","raw_affiliation_strings":["University of California, Riverside, Riverside, CA, USA"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"University of California, Riverside, Riverside, CA, USA","institution_ids":["https://openalex.org/I103635307"]}]}],"institutions":[],"countries_distinct_count":2,"institutions_distinct_count":6,"corresponding_author_ids":["https://openalex.org/A5102893279"],"corresponding_institution_ids":["https://openalex.org/I70983195"],"apc_list":null,"apc_paid":null,"fwci":8.1005,"has_fulltext":false,"cited_by_count":65,"citation_normalized_percentile":{"value":0.97453892,"is_in_top_1_percent":false,"is_in_top_10_percent":true},"cited_by_percentile_year":{"min":94,"max":100},"biblio":{"volume":null,"issue":null,"first_page":"346","last_page":"359"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10260","display_name":"Software Engineering Research","score":0.9998999834060669,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T10260","display_name":"Software Engineering Research","score":0.9998999834060669,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10743","display_name":"Software Testing and Debugging Techniques","score":0.9998000264167786,"subfield":{"id":"https://openalex.org/subfields/1712","display_name":"Software"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T12423","display_name":"Software Reliability and Analysis Research","score":0.9995999932289124,"subfield":{"id":"https://openalex.org/subfields/1712","display_name":"Software"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.7907102704048157},{"id":"https://openalex.org/keywords/executable","display_name":"Executable","score":0.7888854146003723},{"id":"https://openalex.org/keywords/false-positive-paradox","display_name":"False positive paradox","score":0.7705413103103638},{"id":"https://openalex.org/keywords/debugging","display_name":"Debugging","score":0.5593591332435608},{"id":"https://openalex.org/keywords/code","display_name":"Code (set theory)","score":0.5592343211174011},{"id":"https://openalex.org/keywords/domain","display_name":"Domain (mathematical analysis)","score":0.5235854387283325},{"id":"https://openalex.org/keywords/binary-number","display_name":"Binary number","score":0.5150454044342041},{"id":"https://openalex.org/keywords/software-bug","display_name":"Software bug","score":0.5136579871177673},{"id":"https://openalex.org/keywords/data-mining","display_name":"Data mining","score":0.5065439939498901},{"id":"https://openalex.org/keywords/software","display_name":"Software","score":0.4184328019618988},{"id":"https://openalex.org/keywords/binary-search-algorithm","display_name":"Binary search algorithm","score":0.41836920380592346},{"id":"https://openalex.org/keywords/programming-language","display_name":"Programming language","score":0.36698025465011597},{"id":"https://openalex.org/keywords/theoretical-computer-science","display_name":"Theoretical computer science","score":0.329559862613678},{"id":"https://openalex.org/keywords/information-retrieval","display_name":"Information retrieval","score":0.3280855119228363},{"id":"https://openalex.org/keywords/search-algorithm","display_name":"Search algorithm","score":0.3134704828262329},{"id":"https://openalex.org/keywords/machine-learning","display_name":"Machine learning","score":0.28462204337120056},{"id":"https://openalex.org/keywords/mathematics","display_name":"Mathematics","score":0.07930952310562134},{"id":"https://openalex.org/keywords/set","display_name":"Set (abstract data type)","score":0.07641315460205078}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.7907102704048157},{"id":"https://openalex.org/C160145156","wikidata":"https://www.wikidata.org/wiki/Q778586","display_name":"Executable","level":2,"score":0.7888854146003723},{"id":"https://openalex.org/C64869954","wikidata":"https://www.wikidata.org/wiki/Q1859747","display_name":"False positive paradox","level":2,"score":0.7705413103103638},{"id":"https://openalex.org/C168065819","wikidata":"https://www.wikidata.org/wiki/Q845566","display_name":"Debugging","level":2,"score":0.5593591332435608},{"id":"https://openalex.org/C2776760102","wikidata":"https://www.wikidata.org/wiki/Q5139990","display_name":"Code (set theory)","level":3,"score":0.5592343211174011},{"id":"https://openalex.org/C36503486","wikidata":"https://www.wikidata.org/wiki/Q11235244","display_name":"Domain (mathematical analysis)","level":2,"score":0.5235854387283325},{"id":"https://openalex.org/C48372109","wikidata":"https://www.wikidata.org/wiki/Q3913","display_name":"Binary number","level":2,"score":0.5150454044342041},{"id":"https://openalex.org/C1009929","wikidata":"https://www.wikidata.org/wiki/Q179550","display_name":"Software bug","level":3,"score":0.5136579871177673},{"id":"https://openalex.org/C124101348","wikidata":"https://www.wikidata.org/wiki/Q172491","display_name":"Data mining","level":1,"score":0.5065439939498901},{"id":"https://openalex.org/C2777904410","wikidata":"https://www.wikidata.org/wiki/Q7397","display_name":"Software","level":2,"score":0.4184328019618988},{"id":"https://openalex.org/C121610932","wikidata":"https://www.wikidata.org/wiki/Q243754","display_name":"Binary search algorithm","level":3,"score":0.41836920380592346},{"id":"https://openalex.org/C199360897","wikidata":"https://www.wikidata.org/wiki/Q9143","display_name":"Programming language","level":1,"score":0.36698025465011597},{"id":"https://openalex.org/C80444323","wikidata":"https://www.wikidata.org/wiki/Q2878974","display_name":"Theoretical computer science","level":1,"score":0.329559862613678},{"id":"https://openalex.org/C23123220","wikidata":"https://www.wikidata.org/wiki/Q816826","display_name":"Information retrieval","level":1,"score":0.3280855119228363},{"id":"https://openalex.org/C125583679","wikidata":"https://www.wikidata.org/wiki/Q755673","display_name":"Search algorithm","level":2,"score":0.3134704828262329},{"id":"https://openalex.org/C119857082","wikidata":"https://www.wikidata.org/wiki/Q2539","display_name":"Machine learning","level":1,"score":0.28462204337120056},{"id":"https://openalex.org/C33923547","wikidata":"https://www.wikidata.org/wiki/Q395","display_name":"Mathematics","level":0,"score":0.07930952310562134},{"id":"https://openalex.org/C177264268","wikidata":"https://www.wikidata.org/wiki/Q1514741","display_name":"Set (abstract data type)","level":2,"score":0.07641315460205078},{"id":"https://openalex.org/C94375191","wikidata":"https://www.wikidata.org/wiki/Q11205","display_name":"Arithmetic","level":1,"score":0.0},{"id":"https://openalex.org/C134306372","wikidata":"https://www.wikidata.org/wiki/Q7754","display_name":"Mathematical analysis","level":1,"score":0.0}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1145/3052973.3052995","is_oa":false,"landing_page_url":"https://doi.org/10.1145/3052973.3052995","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the 2017 ACM on Asia Conference on Computer and Communications Security","raw_type":"proceedings-article"}],"best_oa_location":null,"sustainable_development_goals":[{"id":"https://metadata.un.org/sdg/16","display_name":"Peace, Justice and strong institutions","score":0.4099999964237213}],"awards":[],"funders":[],"has_content":{"grobid_xml":false,"pdf":false},"content_urls":null,"referenced_works_count":42,"referenced_works":["https://openalex.org/W17195072","https://openalex.org/W191489030","https://openalex.org/W200653874","https://openalex.org/W324032601","https://openalex.org/W596492259","https://openalex.org/W614438062","https://openalex.org/W1485714115","https://openalex.org/W1487048116","https://openalex.org/W1546956568","https://openalex.org/W1567790484","https://openalex.org/W1568194905","https://openalex.org/W1582456956","https://openalex.org/W1690253345","https://openalex.org/W1883498007","https://openalex.org/W1942295288","https://openalex.org/W1990762361","https://openalex.org/W1997385049","https://openalex.org/W2012604743","https://openalex.org/W2048693719","https://openalex.org/W2051990174","https://openalex.org/W2091939272","https://openalex.org/W2095519872","https://openalex.org/W2100583963","https://openalex.org/W2103742248","https://openalex.org/W2112725702","https://openalex.org/W2119251836","https://openalex.org/W2138756793","https://openalex.org/W2139211712","https://openalex.org/W2145056020","https://openalex.org/W2147118954","https://openalex.org/W2156858199","https://openalex.org/W2222512263","https://openalex.org/W2295349525","https://openalex.org/W2405686381","https://openalex.org/W2532962075","https://openalex.org/W2574017551","https://openalex.org/W2576376563","https://openalex.org/W2577142429","https://openalex.org/W4212764898","https://openalex.org/W4241115820","https://openalex.org/W4242130683","https://openalex.org/W4252800047"],"related_works":["https://openalex.org/W2942625968","https://openalex.org/W2582091787","https://openalex.org/W2888962833","https://openalex.org/W2998661990","https://openalex.org/W2811435312","https://openalex.org/W4213195198","https://openalex.org/W843542728","https://openalex.org/W2354443135","https://openalex.org/W2019230987","https://openalex.org/W3009574019"],"abstract_inverted_index":{"With":[0],"the":[1,77,83,131,157],"recent":[2,170],"increase":[3],"in":[4,7,22,25,35,162],"security":[5],"breaches":[6],"embedded":[8],"systems":[9],"and":[10,48,101,121,140,148],"IoT":[11],"devices,":[12],"it":[13,142],"becomes":[14],"increasingly":[15],"important":[16],"to":[17,43,58,68,81,128,179],"search":[18,113,132,160],"for":[19,55,125,176],"vulnerabilities":[20],"directly":[21],"binary":[23,79,111],"executables":[24],"a":[26,95,109,137,182],"cross-platform":[27],"setting.":[28],"However,":[29],"very":[30],"little":[31],"has":[32,189],"been":[33,190],"explored":[34],"this":[36,64],"domain.":[37],"The":[38],"existing":[39,158],"efforts":[40],"are":[41],"prone":[42],"producing":[44],"considerable":[45],"false":[46,61],"positives,":[47],"their":[49],"results":[50,151],"cannot":[51],"provide":[52,122],"explainable":[53],"evidence":[54,124,175],"human":[56,126,177],"analysts":[57,127,178],"eliminate":[59],"these":[60],"positives.":[62],"In":[63],"paper,":[65],"we":[66],"propose":[67],"extract":[69],"conditional":[70,87,115],"formulas":[71,116],"as":[72],"higher-level":[73],"semantic":[74],"features":[75],"from":[76],"raw":[78],"code":[80,84,112],"conduct":[82],"search.":[85],"A":[86],"formula":[88],"explicitly":[89],"captures":[90],"two":[91],"cardinal":[92],"factors":[93],"of":[94,164],"bug:":[96],"1)":[97],"erroneous":[98],"data":[99],"dependencies":[100],"2)":[102],"missing":[103],"or":[104,188],"invalid":[105],"condition":[106],"checks.":[107],"As":[108],"result,":[110],"on":[114],"produces":[117],"significantly":[118],"higher":[119],"accuracy":[120],"meaningful":[123],"further":[129],"examine":[130],"results.":[133],"We":[134],"have":[135,152],"implemented":[136],"prototype,":[138],"XMATCH,":[139],"evaluated":[141],"using":[143],"well-known":[144],"software,":[145],"including":[146],"OpenSSL":[147],"BusyBox.":[149],"Experimental":[150],"shown":[153],"that":[154],"XMATCH":[155,172],"outperforms":[156],"bug":[159],"techniques":[161],"terms":[163],"accuracy.":[165],"Moreover,":[166],"by":[167],"evaluating":[168],"5":[169],"vulnerabilities,":[171],"provides":[173],"clear":[174],"determine":[180],"if":[181],"matched":[183],"candidate":[184],"is":[185],"indeed":[186],"vulnerable":[187],"patched.":[191]},"counts_by_year":[{"year":2026,"cited_by_count":1},{"year":2025,"cited_by_count":15},{"year":2024,"cited_by_count":9},{"year":2023,"cited_by_count":12},{"year":2022,"cited_by_count":5},{"year":2021,"cited_by_count":7},{"year":2020,"cited_by_count":2},{"year":2019,"cited_by_count":9},{"year":2018,"cited_by_count":5}],"updated_date":"2026-05-26T13:28:51.108037","created_date":"2025-10-10T00:00:00"}