{"id":"https://openalex.org/W2971372952","doi":"https://doi.org/10.1145/3338503.3357721","title":"SATURN - Software Deobfuscation Framework Based On LLVM","display_name":"SATURN - Software Deobfuscation Framework Based On LLVM","publication_year":2019,"publication_date":"2019-11-07","ids":{"openalex":"https://openalex.org/W2971372952","doi":"https://doi.org/10.1145/3338503.3357721","mag":"2971372952"},"language":"en","primary_location":{"id":"doi:10.1145/3338503.3357721","is_oa":false,"landing_page_url":"https://doi.org/10.1145/3338503.3357721","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the 3rd ACM Workshop on Software Protection","raw_type":"proceedings-article"},"type":"conference-paper","indexed_in":["arxiv","crossref","datacite"],"open_access":{"is_oa":true,"oa_status":"green","oa_url":"https://arxiv.org/pdf/1909.01752","any_repository_has_fulltext":true},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5033880488","display_name":"Peter Garba","orcid":null},"institutions":[{"id":"https://openalex.org/I1283236314","display_name":"Thales (Portugal)","ror":"https://ror.org/051w1mx35","country_code":"PT","type":"company","lineage":["https://openalex.org/I1283236314","https://openalex.org/I4210140930"]},{"id":"https://openalex.org/I4210123028","display_name":"Thales (Germany)","ror":"https://ror.org/031xjr712","country_code":"DE","type":"company","lineage":["https://openalex.org/I4210123028","https://openalex.org/I4210140930"]}],"countries":["DE","PT"],"is_corresponding":false,"raw_author_name":"Peter Garba","raw_affiliation_strings":["Thales, DIS - Cybersecurity, Munich, Germany","Thales Group#TAB#"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Thales, DIS - Cybersecurity, Munich, Germany","institution_ids":["https://openalex.org/I4210123028"]},{"raw_affiliation_string":"Thales Group#TAB#","institution_ids":["https://openalex.org/I1283236314"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5062441923","display_name":"Matteo Favaro","orcid":"https://orcid.org/0000-0003-1810-4820"},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Matteo Favaro","raw_affiliation_strings":["Zimperium, Mobile Security, Noale, Italy"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Zimperium, Mobile Security, Noale, Italy","institution_ids":[]}]}],"institutions":[],"countries_distinct_count":2,"institutions_distinct_count":2,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":0.1917,"has_fulltext":true,"cited_by_count":1,"citation_normalized_percentile":{"value":0.36038217,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":{"min":89,"max":93},"biblio":{"volume":null,"issue":null,"first_page":"27","last_page":"38"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":0.9998000264167786,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":0.9998000264167786,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10743","display_name":"Software Testing and Debugging Techniques","score":0.9984999895095825,"subfield":{"id":"https://openalex.org/subfields/1712","display_name":"Software"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11424","display_name":"Security and Verification in Computing","score":0.9948999881744385,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/obfuscation","display_name":"Obfuscation","score":0.9002491235733032},{"id":"https://openalex.org/keywords/compiler","display_name":"Compiler","score":0.8871701955795288},{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.8831081986427307},{"id":"https://openalex.org/keywords/control-flow-graph","display_name":"Control flow graph","score":0.6516008377075195},{"id":"https://openalex.org/keywords/optimizing-compiler","display_name":"Optimizing compiler","score":0.5758405327796936},{"id":"https://openalex.org/keywords/programming-language","display_name":"Programming language","score":0.5617877244949341},{"id":"https://openalex.org/keywords/control-flow","display_name":"Control flow","score":0.5275698900222778},{"id":"https://openalex.org/keywords/graph","display_name":"Graph","score":0.46971362829208374},{"id":"https://openalex.org/keywords/binary-number","display_name":"Binary number","score":0.46709272265434265},{"id":"https://openalex.org/keywords/machine-code","display_name":"Machine code","score":0.45949652791023254},{"id":"https://openalex.org/keywords/assembly-language","display_name":"Assembly language","score":0.4540409445762634},{"id":"https://openalex.org/keywords/software","display_name":"Software","score":0.43673068284988403},{"id":"https://openalex.org/keywords/parallel-computing","display_name":"Parallel computing","score":0.397357314825058},{"id":"https://openalex.org/keywords/theoretical-computer-science","display_name":"Theoretical computer science","score":0.3558177351951599},{"id":"https://openalex.org/keywords/arithmetic","display_name":"Arithmetic","score":0.1316411793231964},{"id":"https://openalex.org/keywords/computer-security","display_name":"Computer security","score":0.07629808783531189}],"concepts":[{"id":"https://openalex.org/C40305131","wikidata":"https://www.wikidata.org/wiki/Q2616305","display_name":"Obfuscation","level":2,"score":0.9002491235733032},{"id":"https://openalex.org/C169590947","wikidata":"https://www.wikidata.org/wiki/Q47506","display_name":"Compiler","level":2,"score":0.8871701955795288},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.8831081986427307},{"id":"https://openalex.org/C27458966","wikidata":"https://www.wikidata.org/wiki/Q1187693","display_name":"Control flow graph","level":2,"score":0.6516008377075195},{"id":"https://openalex.org/C190902152","wikidata":"https://www.wikidata.org/wiki/Q1325106","display_name":"Optimizing compiler","level":3,"score":0.5758405327796936},{"id":"https://openalex.org/C199360897","wikidata":"https://www.wikidata.org/wiki/Q9143","display_name":"Programming language","level":1,"score":0.5617877244949341},{"id":"https://openalex.org/C160191386","wikidata":"https://www.wikidata.org/wiki/Q868299","display_name":"Control flow","level":2,"score":0.5275698900222778},{"id":"https://openalex.org/C132525143","wikidata":"https://www.wikidata.org/wiki/Q141488","display_name":"Graph","level":2,"score":0.46971362829208374},{"id":"https://openalex.org/C48372109","wikidata":"https://www.wikidata.org/wiki/Q3913","display_name":"Binary number","level":2,"score":0.46709272265434265},{"id":"https://openalex.org/C115168132","wikidata":"https://www.wikidata.org/wiki/Q55813","display_name":"Machine code","level":3,"score":0.45949652791023254},{"id":"https://openalex.org/C50831359","wikidata":"https://www.wikidata.org/wiki/Q165436","display_name":"Assembly language","level":3,"score":0.4540409445762634},{"id":"https://openalex.org/C2777904410","wikidata":"https://www.wikidata.org/wiki/Q7397","display_name":"Software","level":2,"score":0.43673068284988403},{"id":"https://openalex.org/C173608175","wikidata":"https://www.wikidata.org/wiki/Q232661","display_name":"Parallel computing","level":1,"score":0.397357314825058},{"id":"https://openalex.org/C80444323","wikidata":"https://www.wikidata.org/wiki/Q2878974","display_name":"Theoretical computer science","level":1,"score":0.3558177351951599},{"id":"https://openalex.org/C94375191","wikidata":"https://www.wikidata.org/wiki/Q11205","display_name":"Arithmetic","level":1,"score":0.1316411793231964},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.07629808783531189},{"id":"https://openalex.org/C33923547","wikidata":"https://www.wikidata.org/wiki/Q395","display_name":"Mathematics","level":0,"score":0.0}],"mesh":[],"locations_count":4,"locations":[{"id":"doi:10.1145/3338503.3357721","is_oa":false,"landing_page_url":"https://doi.org/10.1145/3338503.3357721","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the 3rd ACM Workshop on Software Protection","raw_type":"proceedings-article"},{"id":"pmh:oai:arXiv.org:1909.01752","is_oa":true,"landing_page_url":"http://arxiv.org/abs/1909.01752","pdf_url":"https://arxiv.org/pdf/1909.01752","source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":"2331-8422","issn":["2331-8422"],"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"text"},{"id":"mag:2971372952","is_oa":true,"landing_page_url":"https://arxiv.org/abs/1909.01752","pdf_url":null,"source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":"2331-8422","issn":["2331-8422"],"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":"arXiv (Cornell University)","raw_type":null},{"id":"doi:10.48550/arxiv.1909.01752","is_oa":true,"landing_page_url":"https://doi.org/10.48550/arxiv.1909.01752","pdf_url":null,"source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":"2331-8422","issn":["2331-8422"],"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":null,"is_accepted":false,"is_published":null,"raw_source_name":null,"raw_type":"article-journal"}],"best_oa_location":{"id":"pmh:oai:arXiv.org:1909.01752","is_oa":true,"landing_page_url":"http://arxiv.org/abs/1909.01752","pdf_url":"https://arxiv.org/pdf/1909.01752","source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":"2331-8422","issn":["2331-8422"],"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"text"},"sustainable_development_goals":[{"score":0.5600000023841858,"display_name":"Industry, innovation and infrastructure","id":"https://metadata.un.org/sdg/9"}],"awards":[],"funders":[],"has_content":{"grobid_xml":true,"pdf":true},"content_urls":{"pdf":"https://content.openalex.org/works/W2971372952.pdf","grobid_xml":"https://content.openalex.org/works/W2971372952.grobid-xml"},"referenced_works_count":27,"referenced_works":["https://openalex.org/W71443740","https://openalex.org/W174339829","https://openalex.org/W621040983","https://openalex.org/W1480909796","https://openalex.org/W1522250664","https://openalex.org/W1538186256","https://openalex.org/W1544225867","https://openalex.org/W1567046609","https://openalex.org/W1594784410","https://openalex.org/W1710734607","https://openalex.org/W1982205631","https://openalex.org/W2008453980","https://openalex.org/W2082594235","https://openalex.org/W2148576197","https://openalex.org/W2150990339","https://openalex.org/W2153185479","https://openalex.org/W2314464932","https://openalex.org/W2331229340","https://openalex.org/W2461805967","https://openalex.org/W2620363344","https://openalex.org/W2770644362","https://openalex.org/W2914503388","https://openalex.org/W2921993268","https://openalex.org/W2954698171","https://openalex.org/W2955626199","https://openalex.org/W2985391551","https://openalex.org/W2990227674"],"related_works":["https://openalex.org/W2983318410","https://openalex.org/W2905207892","https://openalex.org/W3155297957","https://openalex.org/W1538186256","https://openalex.org/W2166616871","https://openalex.org/W2021080349","https://openalex.org/W2132114837","https://openalex.org/W2797618589","https://openalex.org/W2613598047","https://openalex.org/W2604573359","https://openalex.org/W2784629571","https://openalex.org/W3009071074","https://openalex.org/W2100450618","https://openalex.org/W2001723134","https://openalex.org/W2770644362","https://openalex.org/W3107362213","https://openalex.org/W2558313636","https://openalex.org/W2961710371","https://openalex.org/W3009395978","https://openalex.org/W2948481461"],"abstract_inverted_index":{"The":[0,176,209],"strength":[1],"of":[2,30,51,84,204],"obfuscated":[3,52,86,116],"software":[4],"has":[5,14],"increased":[6],"over":[7],"the":[8,16,21,36,56,70,80,115,133,150,192,196,205],"recent":[9,24],"years.":[10],"Compiler":[11],"based":[12,54,97],"obfuscation":[13,31,152,198],"become":[15],"de":[17],"facto":[18],"standard":[19],"in":[20,125,171,214],"industry":[22],"and":[23,49,75,101,127,173],"papers":[25],"also":[26],"show":[27,61,138],"that":[28,139,187],"injection":[29],"techniques":[32,153,199],"is":[33,212],"done":[34],"at":[35,191],"compiler":[37,57,71,99,122],"level.":[38],"In":[39],"this":[40,140],"paper":[41],"we":[42,78],"discuss":[43],"a":[44,215],"generic":[45],"approach":[46,108,141],"for":[47],"deobfuscation":[48,185,216],"recompilation":[50],"code":[53,64,162],"on":[55,98],"framework":[58],"LLVM.":[59],"We":[60],"how":[62,77],"binary":[63,87],"can":[65,142,179],"be":[66,143,180],"lifted":[67],"back":[68],"into":[69],"intermediate":[72],"language":[73],"LLVM-IR":[74,178],"explain":[76],"recover":[79],"control":[81,92,165],"flow":[82,93,166],"graph":[83,94],"an":[85,90],"function":[88],"with":[89,202],"iterative":[91],"construction":[95],"algorithm":[96],"optimizations":[100,123],"satisfiability":[102],"modulo":[103],"theories":[104],"(SMT)":[105],"solving.":[106],"Our":[107,135],"does":[109],"not":[110],"make":[111],"any":[112],"assumptions":[113],"about":[114],"code,":[117],"but":[118],"instead":[119],"uses":[120],"strong":[121],"available":[124,206],"LLVM":[126,207],"Souper":[128],"Optimizer":[129],"to":[130,145],"simplify":[131],"away":[132],"obfuscation.":[134],"experimental":[136],"results":[137],"effective":[144],"weaken":[146],"or":[147,167,200],"even":[148],"remove":[149],"applied":[151,190],"like":[154],"constant":[155],"unfolding,":[156],"certain":[157],"arithmetic-based":[158],"opaque":[159],"expressions,":[160],"dead":[161],"insertions,":[163],"bogus":[164],"integer":[168],"encoding":[169],"found":[170],"public":[172],"commercial":[174],"obfuscators.":[175],"recovered":[177],"further":[181],"processed":[182],"by":[183],"custom":[184],"passes":[186],"are":[188],"now":[189],"same":[193],"level":[194],"as":[195],"injected":[197],"recompiled":[201],"one":[203],"backends.":[208],"presented":[210],"work":[211],"implemented":[213],"tool":[217],"called":[218],"SATURN.":[219]},"counts_by_year":[{"year":2020,"cited_by_count":1}],"updated_date":"2026-08-26T07:47:46.906454","created_date":"2025-10-10T00:00:00"}