{"id":"https://openalex.org/W2794682558","doi":"https://doi.org/10.1145/3180155.3180225","title":"UFO","display_name":"UFO","publication_year":2018,"publication_date":"2018-05-27","ids":{"openalex":"https://openalex.org/W2794682558","doi":"https://doi.org/10.1145/3180155.3180225","mag":"2794682558"},"language":"en","primary_location":{"id":"doi:10.1145/3180155.3180225","is_oa":true,"landing_page_url":"https://doi.org/10.1145/3180155.3180225","pdf_url":"https://dl.acm.org/doi/pdf/10.1145/3180155.3180225","source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the 40th International Conference on Software Engineering","raw_type":"proceedings-article"},"type":"article","indexed_in":["crossref"],"open_access":{"is_oa":true,"oa_status":"gold","oa_url":"https://dl.acm.org/doi/pdf/10.1145/3180155.3180225","any_repository_has_fulltext":null},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5103035835","display_name":"Jeff Huang","orcid":"https://orcid.org/0000-0003-1393-0752"},"institutions":[],"countries":[],"is_corresponding":true,"raw_author_name":"Jeff Huang","raw_affiliation_strings":["Texas A&M University"],"affiliations":[{"raw_affiliation_string":"Texas A&M University","institution_ids":[]}]}],"institutions":[],"countries_distinct_count":0,"institutions_distinct_count":1,"corresponding_author_ids":["https://openalex.org/A5103035835"],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":2.0309,"has_fulltext":true,"cited_by_count":31,"citation_normalized_percentile":{"value":0.89709024,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":{"min":89,"max":99},"biblio":{"volume":null,"issue":null,"first_page":"609","last_page":"619"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11424","display_name":"Security and Verification in Computing","score":0.9993000030517578,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11424","display_name":"Security and Verification in Computing","score":0.9993000030517578,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10933","display_name":"Real-Time Systems Scheduling","score":0.9983999729156494,"subfield":{"id":"https://openalex.org/subfields/1708","display_name":"Hardware and Architecture"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10054","display_name":"Parallel Computing and Optimization Techniques","score":0.998199999332428,"subfield":{"id":"https://openalex.org/subfields/1708","display_name":"Hardware and Architecture"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.7894403338432312},{"id":"https://openalex.org/keywords/thread","display_name":"Thread (computing)","score":0.6452312469482422},{"id":"https://openalex.org/keywords/concurrency","display_name":"Concurrency","score":0.576763391494751},{"id":"https://openalex.org/keywords/false-positive-paradox","display_name":"False positive paradox","score":0.4591587781906128},{"id":"https://openalex.org/keywords/distributed-computing","display_name":"Distributed computing","score":0.36722904443740845},{"id":"https://openalex.org/keywords/programming-language","display_name":"Programming language","score":0.2531912326812744},{"id":"https://openalex.org/keywords/artificial-intelligence","display_name":"Artificial intelligence","score":0.10923901200294495}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.7894403338432312},{"id":"https://openalex.org/C138101251","wikidata":"https://www.wikidata.org/wiki/Q213092","display_name":"Thread (computing)","level":2,"score":0.6452312469482422},{"id":"https://openalex.org/C193702766","wikidata":"https://www.wikidata.org/wiki/Q1414548","display_name":"Concurrency","level":2,"score":0.576763391494751},{"id":"https://openalex.org/C64869954","wikidata":"https://www.wikidata.org/wiki/Q1859747","display_name":"False positive paradox","level":2,"score":0.4591587781906128},{"id":"https://openalex.org/C120314980","wikidata":"https://www.wikidata.org/wiki/Q180634","display_name":"Distributed computing","level":1,"score":0.36722904443740845},{"id":"https://openalex.org/C199360897","wikidata":"https://www.wikidata.org/wiki/Q9143","display_name":"Programming language","level":1,"score":0.2531912326812744},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.10923901200294495}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1145/3180155.3180225","is_oa":true,"landing_page_url":"https://doi.org/10.1145/3180155.3180225","pdf_url":"https://dl.acm.org/doi/pdf/10.1145/3180155.3180225","source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the 40th International Conference on Software Engineering","raw_type":"proceedings-article"}],"best_oa_location":{"id":"doi:10.1145/3180155.3180225","is_oa":true,"landing_page_url":"https://doi.org/10.1145/3180155.3180225","pdf_url":"https://dl.acm.org/doi/pdf/10.1145/3180155.3180225","source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the 40th International Conference on Software Engineering","raw_type":"proceedings-article"},"sustainable_development_goals":[{"display_name":"Peace, Justice and strong institutions","id":"https://metadata.un.org/sdg/16","score":0.5899999737739563}],"awards":[{"id":"https://openalex.org/G2088791364","display_name":null,"funder_award_id":"1552935","funder_id":"https://openalex.org/F4320306076","funder_display_name":"National Science Foundation"},{"id":"https://openalex.org/G2907050114","display_name":null,"funder_award_id":"CCF-1552935","funder_id":"https://openalex.org/F4320306076","funder_display_name":"National Science Foundation"},{"id":"https://openalex.org/G4001619010","display_name":null,"funder_award_id":"CCF-1552935 and CNS-1617985","funder_id":"https://openalex.org/F4320306076","funder_display_name":"National Science Foundation"},{"id":"https://openalex.org/G7764151502","display_name":null,"funder_award_id":"1617985","funder_id":"https://openalex.org/F4320306076","funder_display_name":"National Science Foundation"}],"funders":[{"id":"https://openalex.org/F4320306076","display_name":"National Science Foundation","ror":"https://ror.org/021nxhr62"}],"has_content":{"grobid_xml":true,"pdf":true},"content_urls":{"pdf":"https://content.openalex.org/works/W2794682558.pdf","grobid_xml":"https://content.openalex.org/works/W2794682558.grobid-xml"},"referenced_works_count":19,"referenced_works":["https://openalex.org/W1480909796","https://openalex.org/W1984471991","https://openalex.org/W1997394198","https://openalex.org/W2046368282","https://openalex.org/W2059278087","https://openalex.org/W2084719450","https://openalex.org/W2089750484","https://openalex.org/W2111760587","https://openalex.org/W2120476011","https://openalex.org/W2144706305","https://openalex.org/W2156858199","https://openalex.org/W2157896026","https://openalex.org/W2170922286","https://openalex.org/W2255006515","https://openalex.org/W2534587298","https://openalex.org/W2606752733","https://openalex.org/W2751167560","https://openalex.org/W3137220996","https://openalex.org/W4236306709"],"related_works":["https://openalex.org/W4391375266","https://openalex.org/W2899084033","https://openalex.org/W2748952813","https://openalex.org/W1557094818","https://openalex.org/W2183246718","https://openalex.org/W2099261052","https://openalex.org/W3209204065","https://openalex.org/W2390279801","https://openalex.org/W4391913857","https://openalex.org/W2358668433"],"abstract_inverted_index":{"Use-After-Free":[0],"(UAF)":[1],"vulnerabilities":[2],"are":[3],"caused":[4],"by":[5],"the":[6,36,110],"program":[7],"operating":[8],"on":[9,76,157],"a":[10,52,66,77,83,122,132,142,185],"dangling":[11],"pointer":[12],"and":[13,166,182],"can":[14,71,118,140],"be":[15,119],"exploited":[16],"to":[17,28,45,170],"compromise":[18],"critical":[19],"software":[20],"systems.":[21],"While":[22],"there":[23],"have":[24,154],"been":[25],"many":[26],"tools":[27],"mitigate":[29],"UAF":[30,32,41,53,129],"vulnerabilities,":[31],"remains":[33],"one":[34],"of":[35,99,114,175,177,188],"most":[37],"common":[38],"attack":[39],"vectors.":[40],"is":[42,101],"particularly":[43],"difficult":[44],"detect":[46],"in":[47,50,179],"concurrent":[48],"programs,":[49],"which":[51],"may":[54],"only":[55],"occur":[56],"with":[57,82,91,173],"rare":[58],"thread":[59,105,145],"schedules.":[60],"In":[61],"this":[62,137],"paper,":[63],"we":[64,139],"present":[65],"novel":[67],"technique,":[68],"UFO,":[69],"that":[70,108,117],"precisely":[72],"predict":[73],"UAFs":[74],"based":[75,151],"single":[78],"observed":[79],"execution":[80,125,181],"trace":[81],"provably":[84],"higher":[85],"detection":[86,130],"capability":[87],"than":[88,148],"existing":[89],"techniques":[90],"no":[92],"false":[93],"positives.":[94],"The":[95],"key":[96],"technical":[97],"advancement":[98],"UFO":[100,156,168],"an":[102],"extended":[103],"maximal":[104],"causality":[106],"model":[107],"captures":[109],"largest":[111],"possible":[112],"set":[113],"feasible":[115],"traces":[116],"inferred":[120],"from":[121],"given":[123],"multithreaded":[124],"trace.":[126],"By":[127],"formulating":[128],"as":[131],"constraint":[133],"solving":[134],"problem":[135],"atop":[136],"model,":[138],"explore":[141],"much":[143],"larger":[144],"scheduling":[146],"space":[147],"classical":[149],"happens-before":[150],"techniques.":[152],"We":[153],"evaluated":[155],"several":[158],"real-world":[159,171],"large":[160,186],"complex":[161],"C/C++":[162],"programs":[163],"including":[164],"Chromium":[165],"FireFox.":[167],"scales":[169],"systems":[172],"hundreds":[174],"millions":[176],"events":[178],"their":[180],"has":[183],"detected":[184],"number":[187],"real":[189],"concurrency":[190],"UAFs.":[191]},"counts_by_year":[{"year":2025,"cited_by_count":2},{"year":2024,"cited_by_count":4},{"year":2023,"cited_by_count":6},{"year":2022,"cited_by_count":7},{"year":2021,"cited_by_count":7},{"year":2020,"cited_by_count":1},{"year":2019,"cited_by_count":4}],"updated_date":"2026-04-10T15:06:20.359241","created_date":"2018-04-06T00:00:00"}