{"id":"https://openalex.org/W2985391551","doi":"https://doi.org/10.1145/3338503.3357719","title":"Defeating Opaque Predicates Statically through Machine Learning and Binary Analysis","display_name":"Defeating Opaque Predicates Statically through Machine Learning and Binary Analysis","publication_year":2019,"publication_date":"2019-11-07","ids":{"openalex":"https://openalex.org/W2985391551","doi":"https://doi.org/10.1145/3338503.3357719","mag":"2985391551"},"language":"en","primary_location":{"id":"doi:10.1145/3338503.3357719","is_oa":false,"landing_page_url":"https://doi.org/10.1145/3338503.3357719","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the 3rd ACM Workshop on Software Protection","raw_type":"proceedings-article"},"type":"conference-paper","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5069589305","display_name":"Ramtine Tofighi-Shirazi","orcid":null},"institutions":[{"id":"https://openalex.org/I1294671590","display_name":"Centre National de la Recherche Scientifique","ror":"https://ror.org/02feahw73","country_code":"FR","type":"government","lineage":["https://openalex.org/I1294671590"]},{"id":"https://openalex.org/I4210140930","display_name":"Thales (France)","ror":"https://ror.org/04emwm605","country_code":"FR","type":"company","lineage":["https://openalex.org/I4210140930"]},{"id":"https://openalex.org/I4210166226","display_name":"Institut Fourier","ror":"https://ror.org/05rwrfh97","country_code":"FR","type":"facility","lineage":["https://openalex.org/I1294671590","https://openalex.org/I1294671590","https://openalex.org/I4210141950","https://openalex.org/I4210166226","https://openalex.org/I899635006"]},{"id":"https://openalex.org/I899635006","display_name":"Universit\u00e9 Grenoble Alpes","ror":"https://ror.org/02rx3b187","country_code":"FR","type":"education","lineage":["https://openalex.org/I899635006"]}],"countries":["FR"],"is_corresponding":false,"raw_author_name":"Ramtine Tofighi-Shirazi","raw_affiliation_strings":["Univ. Grenoble Alpes, CNRS, Institut Fourier Trusted Labs, Thales Group, Meudon, France"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Univ. Grenoble Alpes, CNRS, Institut Fourier Trusted Labs, Thales Group, Meudon, France","institution_ids":["https://openalex.org/I1294671590","https://openalex.org/I4210140930","https://openalex.org/I4210166226","https://openalex.org/I899635006"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5028839476","display_name":"Irina-Mariuca Asavoae","orcid":null},"institutions":[{"id":"https://openalex.org/I4210140930","display_name":"Thales (France)","ror":"https://ror.org/04emwm605","country_code":"FR","type":"company","lineage":["https://openalex.org/I4210140930"]}],"countries":["FR"],"is_corresponding":false,"raw_author_name":"Irina-Mariuca Asavoae","raw_affiliation_strings":["Trusted Labs, Thales Group, Meudon, France"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Trusted Labs, Thales Group, Meudon, France","institution_ids":["https://openalex.org/I4210140930"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5026018888","display_name":"Philippe Elbaz\u2013Vincent","orcid":"https://orcid.org/0000-0002-8629-3021"},"institutions":[{"id":"https://openalex.org/I1294671590","display_name":"Centre National de la Recherche Scientifique","ror":"https://ror.org/02feahw73","country_code":"FR","type":"government","lineage":["https://openalex.org/I1294671590"]},{"id":"https://openalex.org/I4210166226","display_name":"Institut Fourier","ror":"https://ror.org/05rwrfh97","country_code":"FR","type":"facility","lineage":["https://openalex.org/I1294671590","https://openalex.org/I1294671590","https://openalex.org/I4210141950","https://openalex.org/I4210166226","https://openalex.org/I899635006"]},{"id":"https://openalex.org/I899635006","display_name":"Universit\u00e9 Grenoble Alpes","ror":"https://ror.org/02rx3b187","country_code":"FR","type":"education","lineage":["https://openalex.org/I899635006"]}],"countries":["FR"],"is_corresponding":false,"raw_author_name":"Philippe Elbaz-Vincent","raw_affiliation_strings":["Univ. Grenoble Alpes, CNRS, Institut Fourier, Grenoble, France"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Univ. Grenoble Alpes, CNRS, Institut Fourier, Grenoble, France","institution_ids":["https://openalex.org/I1294671590","https://openalex.org/I4210166226","https://openalex.org/I899635006"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5113788877","display_name":"Thanh\u2010Ha Le","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Thanh-Ha Le","raw_affiliation_strings":["Trusted Labs, Meudon, France"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Trusted Labs, Meudon, France","institution_ids":[]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":4,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":2.4925,"has_fulltext":false,"cited_by_count":29,"citation_normalized_percentile":{"value":0.90547771,"is_in_top_1_percent":false,"is_in_top_10_percent":true},"cited_by_percentile_year":{"min":93,"max":99},"biblio":{"volume":null,"issue":null,"first_page":"3","last_page":"14"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":0.9997000098228455,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":0.9997000098228455,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10260","display_name":"Software Engineering Research","score":0.9955999851226807,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10743","display_name":"Software Testing and Debugging Techniques","score":0.9950000047683716,"subfield":{"id":"https://openalex.org/subfields/1712","display_name":"Software"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.8088606595993042},{"id":"https://openalex.org/keywords/static-analysis","display_name":"Static analysis","score":0.690112829208374},{"id":"https://openalex.org/keywords/opacity","display_name":"Opacity","score":0.6595640778541565},{"id":"https://openalex.org/keywords/symbolic-execution","display_name":"Symbolic execution","score":0.5758451819419861},{"id":"https://openalex.org/keywords/scalability","display_name":"Scalability","score":0.5597415566444397},{"id":"https://openalex.org/keywords/obfuscation","display_name":"Obfuscation","score":0.5471091866493225},{"id":"https://openalex.org/keywords/binary-number","display_name":"Binary number","score":0.5448096394538879},{"id":"https://openalex.org/keywords/programming-language","display_name":"Programming language","score":0.5325918197631836},{"id":"https://openalex.org/keywords/program-analysis","display_name":"Program analysis","score":0.4883413016796112},{"id":"https://openalex.org/keywords/state","display_name":"State (computer science)","score":0.4462505578994751},{"id":"https://openalex.org/keywords/artificial-intelligence","display_name":"Artificial intelligence","score":0.42513319849967957},{"id":"https://openalex.org/keywords/enhanced-data-rates-for-gsm-evolution","display_name":"Enhanced Data Rates for GSM Evolution","score":0.42306065559387207},{"id":"https://openalex.org/keywords/theoretical-computer-science","display_name":"Theoretical computer science","score":0.4217439293861389},{"id":"https://openalex.org/keywords/software","display_name":"Software","score":0.12972870469093323},{"id":"https://openalex.org/keywords/mathematics","display_name":"Mathematics","score":0.08838793635368347},{"id":"https://openalex.org/keywords/arithmetic","display_name":"Arithmetic","score":0.07857447862625122}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.8088606595993042},{"id":"https://openalex.org/C97686452","wikidata":"https://www.wikidata.org/wiki/Q7604153","display_name":"Static analysis","level":2,"score":0.690112829208374},{"id":"https://openalex.org/C60056205","wikidata":"https://www.wikidata.org/wiki/Q691914","display_name":"Opacity","level":2,"score":0.6595640778541565},{"id":"https://openalex.org/C2779639559","wikidata":"https://www.wikidata.org/wiki/Q7661178","display_name":"Symbolic execution","level":3,"score":0.5758451819419861},{"id":"https://openalex.org/C48044578","wikidata":"https://www.wikidata.org/wiki/Q727490","display_name":"Scalability","level":2,"score":0.5597415566444397},{"id":"https://openalex.org/C40305131","wikidata":"https://www.wikidata.org/wiki/Q2616305","display_name":"Obfuscation","level":2,"score":0.5471091866493225},{"id":"https://openalex.org/C48372109","wikidata":"https://www.wikidata.org/wiki/Q3913","display_name":"Binary number","level":2,"score":0.5448096394538879},{"id":"https://openalex.org/C199360897","wikidata":"https://www.wikidata.org/wiki/Q9143","display_name":"Programming language","level":1,"score":0.5325918197631836},{"id":"https://openalex.org/C98183937","wikidata":"https://www.wikidata.org/wiki/Q2112188","display_name":"Program analysis","level":2,"score":0.4883413016796112},{"id":"https://openalex.org/C48103436","wikidata":"https://www.wikidata.org/wiki/Q599031","display_name":"State (computer science)","level":2,"score":0.4462505578994751},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.42513319849967957},{"id":"https://openalex.org/C162307627","wikidata":"https://www.wikidata.org/wiki/Q204833","display_name":"Enhanced Data Rates for GSM Evolution","level":2,"score":0.42306065559387207},{"id":"https://openalex.org/C80444323","wikidata":"https://www.wikidata.org/wiki/Q2878974","display_name":"Theoretical computer science","level":1,"score":0.4217439293861389},{"id":"https://openalex.org/C2777904410","wikidata":"https://www.wikidata.org/wiki/Q7397","display_name":"Software","level":2,"score":0.12972870469093323},{"id":"https://openalex.org/C33923547","wikidata":"https://www.wikidata.org/wiki/Q395","display_name":"Mathematics","level":0,"score":0.08838793635368347},{"id":"https://openalex.org/C94375191","wikidata":"https://www.wikidata.org/wiki/Q11205","display_name":"Arithmetic","level":1,"score":0.07857447862625122},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.0},{"id":"https://openalex.org/C77088390","wikidata":"https://www.wikidata.org/wiki/Q8513","display_name":"Database","level":1,"score":0.0},{"id":"https://openalex.org/C121332964","wikidata":"https://www.wikidata.org/wiki/Q413","display_name":"Physics","level":0,"score":0.0},{"id":"https://openalex.org/C120665830","wikidata":"https://www.wikidata.org/wiki/Q14620","display_name":"Optics","level":1,"score":0.0}],"mesh":[],"locations_count":2,"locations":[{"id":"doi:10.1145/3338503.3357719","is_oa":false,"landing_page_url":"https://doi.org/10.1145/3338503.3357719","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the 3rd ACM Workshop on Software Protection","raw_type":"proceedings-article"},{"id":"pmh:oai:HAL:hal-04134856v1","is_oa":false,"landing_page_url":"https://hal.science/hal-04134856","pdf_url":null,"source":{"id":"https://openalex.org/S4306402512","display_name":"HAL (Le Centre pour la Communication Scientifique Directe)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I1294671590","host_organization_name":"Centre National de la Recherche Scientifique","host_organization_lineage":["https://openalex.org/I1294671590"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":"Inria Nancy - Grand Est. 2020","raw_type":"info:eu-repo/semantics/report"}],"best_oa_location":null,"sustainable_development_goals":[],"awards":[{"id":"https://openalex.org/G5867641771","display_name":"IDEX UGA","funder_award_id":"ANR-15-IDEX-0002","funder_id":"https://openalex.org/F4320320883","funder_display_name":"Agence Nationale de la Recherche"},{"id":"https://openalex.org/G7281448862","display_name":"Randomized Arithmetics","funder_award_id":"ANR-15-CE39-0002","funder_id":"https://openalex.org/F4320320883","funder_display_name":"Agence Nationale de la Recherche"}],"funders":[{"id":"https://openalex.org/F4320320883","display_name":"Agence Nationale de la Recherche","ror":"https://ror.org/00rbzpz17"}],"has_content":{"pdf":false,"grobid_xml":false},"content_urls":null,"referenced_works_count":43,"referenced_works":["https://openalex.org/W10589072","https://openalex.org/W87810382","https://openalex.org/W1514687127","https://openalex.org/W1534474245","https://openalex.org/W1545142063","https://openalex.org/W1567046609","https://openalex.org/W1573286687","https://openalex.org/W1680392829","https://openalex.org/W1851403712","https://openalex.org/W1873332500","https://openalex.org/W2008453980","https://openalex.org/W2013640190","https://openalex.org/W2061948404","https://openalex.org/W2082594235","https://openalex.org/W2101234009","https://openalex.org/W2126851641","https://openalex.org/W2132886902","https://openalex.org/W2142368292","https://openalex.org/W2144211451","https://openalex.org/W2159595840","https://openalex.org/W2178906754","https://openalex.org/W2242464395","https://openalex.org/W2314464932","https://openalex.org/W2514974017","https://openalex.org/W2532550198","https://openalex.org/W2538979179","https://openalex.org/W2539401099","https://openalex.org/W2560204201","https://openalex.org/W2560252021","https://openalex.org/W2595408825","https://openalex.org/W2610602442","https://openalex.org/W2620363344","https://openalex.org/W2708742135","https://openalex.org/W2752859356","https://openalex.org/W2884512978","https://openalex.org/W2902122820","https://openalex.org/W2963723316","https://openalex.org/W2997591727","https://openalex.org/W3020570927","https://openalex.org/W3090556797","https://openalex.org/W4248294582","https://openalex.org/W4300128105","https://openalex.org/W4323966310"],"related_works":["https://openalex.org/W4213243744","https://openalex.org/W1970932400","https://openalex.org/W4245197793","https://openalex.org/W1566618018","https://openalex.org/W1994915990","https://openalex.org/W2751940653","https://openalex.org/W2914996832","https://openalex.org/W3003055204","https://openalex.org/W2545238856","https://openalex.org/W2891085887"],"abstract_inverted_index":{"We":[0,32],"present":[1],"a":[2,19,37,115],"new":[3],"approach":[4,102],"that":[5],"bridges":[6],"binary":[7],"analysis":[8,109],"techniques":[9,113],"with":[10],"machine":[11,111],"learning":[12,112],"classification":[13],"for":[14,25,114],"the":[15,44,73,88,93,104],"purpose":[16],"of":[17,29,95,97,106],"providing":[18],"static":[20,38,116],"and":[21,65,92,110,117],"generic":[22,118],"evaluation":[23],"technique":[24,35],"opaque":[26,45,68],"predicates,":[27],"regardless":[28],"their":[30],"constructions.":[31],"use":[33],"this":[34],"as":[36],"automated":[39],"deobfuscation":[40,76,119],"tool":[41],"to":[42,52,60,87],"remove":[43],"predicates":[46,69],"introduced":[47],"by":[48],"obfuscation":[49],"mechanisms.":[50],"According":[51],"our":[53,56],"experimental":[54],"results,":[55],"models":[57],"have":[58],"up":[59],"98%":[61],"accuracy":[62,84],"at":[63],"detecting":[64],"deobfuscating":[66],"state-of-the-art":[67],"patterns.":[70],"By":[71],"contrast,":[72],"leading":[74],"edge":[75],"methods":[77],"based":[78],"on":[79],"symbolic":[80,99,108],"execution":[81],"show":[82],"less":[83],"mostly":[85],"due":[86],"SMT":[89],"solvers":[90],"constraints":[91],"lack":[94],"scalability":[96],"dynamic":[98],"analyses.":[100],"Our":[101],"underlines":[103],"efficiency":[105],"hybrid":[107],"methodology.":[120]},"counts_by_year":[{"year":2026,"cited_by_count":3},{"year":2025,"cited_by_count":8},{"year":2024,"cited_by_count":3},{"year":2023,"cited_by_count":2},{"year":2022,"cited_by_count":5},{"year":2021,"cited_by_count":3},{"year":2020,"cited_by_count":3},{"year":2019,"cited_by_count":2}],"updated_date":"2026-08-26T07:47:46.906454","created_date":"2025-10-10T00:00:00"}