{"id":"https://openalex.org/W3021360663","doi":"https://doi.org/10.1145/3368089.3409694","title":"Efficient binary-level coverage analysis","display_name":"Efficient binary-level coverage analysis","publication_year":2020,"publication_date":"2020-11-08","ids":{"openalex":"https://openalex.org/W3021360663","doi":"https://doi.org/10.1145/3368089.3409694","mag":"3021360663"},"language":"en","primary_location":{"id":"doi:10.1145/3368089.3409694","is_oa":false,"landing_page_url":"https://doi.org/10.1145/3368089.3409694","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the 28th ACM Joint Meeting on European Software Engineering Conference and Symposium on the Foundations of Software Engineering","raw_type":"proceedings-article"},"type":"preprint","indexed_in":["arxiv","crossref","datacite"],"open_access":{"is_oa":true,"oa_status":"green","oa_url":"https://arxiv.org/pdf/2004.14191","any_repository_has_fulltext":true},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5046615364","display_name":"M. Ammar Ben Khadra","orcid":null},"institutions":[{"id":"https://openalex.org/I153267046","display_name":"University of Kaiserslautern","ror":"https://ror.org/04zrf7b53","country_code":"DE","type":"education","lineage":["https://openalex.org/I153267046"]}],"countries":["DE"],"is_corresponding":true,"raw_author_name":"M. Ammar Ben Khadra","raw_affiliation_strings":["TU Kaiserslautern, Germany","TU Kaiserslautern; Germany"],"affiliations":[{"raw_affiliation_string":"TU Kaiserslautern, Germany","institution_ids":["https://openalex.org/I153267046"]},{"raw_affiliation_string":"TU Kaiserslautern; Germany","institution_ids":["https://openalex.org/I153267046"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5047920654","display_name":"Dominik Stoffel","orcid":"https://orcid.org/0000-0002-8180-9738"},"institutions":[{"id":"https://openalex.org/I153267046","display_name":"University of Kaiserslautern","ror":"https://ror.org/04zrf7b53","country_code":"DE","type":"education","lineage":["https://openalex.org/I153267046"]}],"countries":["DE"],"is_corresponding":false,"raw_author_name":"Dominik Stoffel","raw_affiliation_strings":["TU Kaiserslautern, Germany","TU Kaiserslautern; Germany"],"affiliations":[{"raw_affiliation_string":"TU Kaiserslautern, Germany","institution_ids":["https://openalex.org/I153267046"]},{"raw_affiliation_string":"TU Kaiserslautern; Germany","institution_ids":["https://openalex.org/I153267046"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5066184879","display_name":"Wolfgang Kunz","orcid":"https://orcid.org/0000-0002-6612-2946"},"institutions":[{"id":"https://openalex.org/I153267046","display_name":"University of Kaiserslautern","ror":"https://ror.org/04zrf7b53","country_code":"DE","type":"education","lineage":["https://openalex.org/I153267046"]}],"countries":["DE"],"is_corresponding":false,"raw_author_name":"Wolfgang Kunz","raw_affiliation_strings":["TU Kaiserslautern, Germany","TU Kaiserslautern; Germany"],"affiliations":[{"raw_affiliation_string":"TU Kaiserslautern, Germany","institution_ids":["https://openalex.org/I153267046"]},{"raw_affiliation_string":"TU Kaiserslautern; Germany","institution_ids":["https://openalex.org/I153267046"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":3,"corresponding_author_ids":["https://openalex.org/A5046615364"],"corresponding_institution_ids":["https://openalex.org/I153267046"],"apc_list":null,"apc_paid":null,"fwci":0.0,"has_fulltext":true,"cited_by_count":0,"citation_normalized_percentile":{"value":0.07435397,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":null,"biblio":{"volume":null,"issue":null,"first_page":"1153","last_page":"1164"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10743","display_name":"Software Testing and Debugging Techniques","score":1.0,"subfield":{"id":"https://openalex.org/subfields/1712","display_name":"Software"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T10743","display_name":"Software Testing and Debugging Techniques","score":1.0,"subfield":{"id":"https://openalex.org/subfields/1712","display_name":"Software"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10260","display_name":"Software Engineering Research","score":0.9976999759674072,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T12423","display_name":"Software Reliability and Analysis Research","score":0.9976999759674072,"subfield":{"id":"https://openalex.org/subfields/1712","display_name":"Software"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.8265712857246399},{"id":"https://openalex.org/keywords/x86","display_name":"x86","score":0.6035802364349365},{"id":"https://openalex.org/keywords/leverage","display_name":"Leverage (statistics)","score":0.5695739984512329},{"id":"https://openalex.org/keywords/compiler","display_name":"Compiler","score":0.5484245419502258},{"id":"https://openalex.org/keywords/instrumentation","display_name":"Instrumentation (computer programming)","score":0.5411703586578369},{"id":"https://openalex.org/keywords/software","display_name":"Software","score":0.5306745171546936},{"id":"https://openalex.org/keywords/fuzz-testing","display_name":"Fuzz testing","score":0.5007150173187256},{"id":"https://openalex.org/keywords/exploit","display_name":"Exploit","score":0.48827123641967773},{"id":"https://openalex.org/keywords/binary-number","display_name":"Binary number","score":0.48599299788475037},{"id":"https://openalex.org/keywords/byte","display_name":"Byte","score":0.48014920949935913},{"id":"https://openalex.org/keywords/overhead","display_name":"Overhead (engineering)","score":0.46328917145729065},{"id":"https://openalex.org/keywords/binary-translation","display_name":"Binary translation","score":0.44998666644096375},{"id":"https://openalex.org/keywords/source-code","display_name":"Source code","score":0.4456600546836853},{"id":"https://openalex.org/keywords/operating-system","display_name":"Operating system","score":0.4375308156013489},{"id":"https://openalex.org/keywords/computer-engineering","display_name":"Computer engineering","score":0.3711177110671997},{"id":"https://openalex.org/keywords/artificial-intelligence","display_name":"Artificial intelligence","score":0.1862058937549591},{"id":"https://openalex.org/keywords/computer-security","display_name":"Computer security","score":0.10421320796012878},{"id":"https://openalex.org/keywords/arithmetic","display_name":"Arithmetic","score":0.10312357544898987}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.8265712857246399},{"id":"https://openalex.org/C170723468","wikidata":"https://www.wikidata.org/wiki/Q182933","display_name":"x86","level":3,"score":0.6035802364349365},{"id":"https://openalex.org/C153083717","wikidata":"https://www.wikidata.org/wiki/Q6535263","display_name":"Leverage (statistics)","level":2,"score":0.5695739984512329},{"id":"https://openalex.org/C169590947","wikidata":"https://www.wikidata.org/wiki/Q47506","display_name":"Compiler","level":2,"score":0.5484245419502258},{"id":"https://openalex.org/C118530786","wikidata":"https://www.wikidata.org/wiki/Q1134732","display_name":"Instrumentation (computer programming)","level":2,"score":0.5411703586578369},{"id":"https://openalex.org/C2777904410","wikidata":"https://www.wikidata.org/wiki/Q7397","display_name":"Software","level":2,"score":0.5306745171546936},{"id":"https://openalex.org/C111065885","wikidata":"https://www.wikidata.org/wiki/Q1189053","display_name":"Fuzz testing","level":3,"score":0.5007150173187256},{"id":"https://openalex.org/C165696696","wikidata":"https://www.wikidata.org/wiki/Q11287","display_name":"Exploit","level":2,"score":0.48827123641967773},{"id":"https://openalex.org/C48372109","wikidata":"https://www.wikidata.org/wiki/Q3913","display_name":"Binary number","level":2,"score":0.48599299788475037},{"id":"https://openalex.org/C43364308","wikidata":"https://www.wikidata.org/wiki/Q8799","display_name":"Byte","level":2,"score":0.48014920949935913},{"id":"https://openalex.org/C2779960059","wikidata":"https://www.wikidata.org/wiki/Q7113681","display_name":"Overhead (engineering)","level":2,"score":0.46328917145729065},{"id":"https://openalex.org/C2778971978","wikidata":"https://www.wikidata.org/wiki/Q2287075","display_name":"Binary translation","level":3,"score":0.44998666644096375},{"id":"https://openalex.org/C43126263","wikidata":"https://www.wikidata.org/wiki/Q128751","display_name":"Source code","level":2,"score":0.4456600546836853},{"id":"https://openalex.org/C111919701","wikidata":"https://www.wikidata.org/wiki/Q9135","display_name":"Operating system","level":1,"score":0.4375308156013489},{"id":"https://openalex.org/C113775141","wikidata":"https://www.wikidata.org/wiki/Q428691","display_name":"Computer engineering","level":1,"score":0.3711177110671997},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.1862058937549591},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.10421320796012878},{"id":"https://openalex.org/C94375191","wikidata":"https://www.wikidata.org/wiki/Q11205","display_name":"Arithmetic","level":1,"score":0.10312357544898987},{"id":"https://openalex.org/C33923547","wikidata":"https://www.wikidata.org/wiki/Q395","display_name":"Mathematics","level":0,"score":0.0}],"mesh":[],"locations_count":4,"locations":[{"id":"doi:10.1145/3368089.3409694","is_oa":false,"landing_page_url":"https://doi.org/10.1145/3368089.3409694","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the 28th ACM Joint Meeting on European Software Engineering Conference and Symposium on the Foundations of Software Engineering","raw_type":"proceedings-article"},{"id":"pmh:oai:arXiv.org:2004.14191","is_oa":true,"landing_page_url":"http://arxiv.org/abs/2004.14191","pdf_url":"https://arxiv.org/pdf/2004.14191","source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":null,"issn":null,"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":"","raw_type":"text"},{"id":"mag:3021360663","is_oa":true,"landing_page_url":"https://arxiv.org/pdf/2004.14191.pdf","pdf_url":null,"source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":null,"issn":null,"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":"arXiv (Cornell University)","raw_type":null},{"id":"doi:10.48550/arxiv.2004.14191","is_oa":true,"landing_page_url":"https://doi.org/10.48550/arxiv.2004.14191","pdf_url":null,"source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":null,"issn":null,"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":null,"is_accepted":false,"is_published":null,"raw_source_name":null,"raw_type":"article"}],"best_oa_location":{"id":"pmh:oai:arXiv.org:2004.14191","is_oa":true,"landing_page_url":"http://arxiv.org/abs/2004.14191","pdf_url":"https://arxiv.org/pdf/2004.14191","source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":null,"issn":null,"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":"","raw_type":"text"},"sustainable_development_goals":[],"awards":[],"funders":[],"has_content":{"grobid_xml":true,"pdf":true},"content_urls":{"pdf":"https://content.openalex.org/works/W3021360663.pdf","grobid_xml":"https://content.openalex.org/works/W3021360663.grobid-xml"},"referenced_works_count":34,"referenced_works":["https://openalex.org/W17195072","https://openalex.org/W646354405","https://openalex.org/W1486172410","https://openalex.org/W1941166084","https://openalex.org/W1979345446","https://openalex.org/W1994742583","https://openalex.org/W2014515160","https://openalex.org/W2052897520","https://openalex.org/W2063068372","https://openalex.org/W2106072155","https://openalex.org/W2107667898","https://openalex.org/W2160504889","https://openalex.org/W2170737051","https://openalex.org/W2221403685","https://openalex.org/W2296467253","https://openalex.org/W2466114212","https://openalex.org/W2496999134","https://openalex.org/W2514974017","https://openalex.org/W2531090983","https://openalex.org/W2535617737","https://openalex.org/W2613534458","https://openalex.org/W2620081107","https://openalex.org/W2625806818","https://openalex.org/W2708310301","https://openalex.org/W2751862727","https://openalex.org/W2767373589","https://openalex.org/W2888875512","https://openalex.org/W2914503388","https://openalex.org/W2966980041","https://openalex.org/W2997653900","https://openalex.org/W3015291177","https://openalex.org/W4246661111","https://openalex.org/W4247801242","https://openalex.org/W4298110250"],"related_works":["https://openalex.org/W3105035158","https://openalex.org/W596492259","https://openalex.org/W3162657045","https://openalex.org/W1579969383","https://openalex.org/W2768013588","https://openalex.org/W3155424504","https://openalex.org/W3090949727","https://openalex.org/W3210173828","https://openalex.org/W2602804099","https://openalex.org/W3166956180","https://openalex.org/W2971822346","https://openalex.org/W3045789879","https://openalex.org/W2114402335","https://openalex.org/W2369067107","https://openalex.org/W2979393298","https://openalex.org/W2111825754","https://openalex.org/W1644099564","https://openalex.org/W2785881534","https://openalex.org/W131579739","https://openalex.org/W2066535672"],"abstract_inverted_index":{"Code":[0],"coverage":[1,18,38,201],"analysis":[2,95,215],"plays":[3],"an":[4,206],"important":[5],"role":[6],"in":[7,25,46,111,132,169],"the":[8,14,47],"software":[9],"testing":[10],"process.":[11],"More":[12],"recently,":[13],"remarkable":[15],"effectiveness":[16],"of":[17,142,186,209,220],"feedback":[19],"has":[20,180],"triggered":[21],"a":[22,34,89,114,140],"broad":[23],"interest":[24],"feedback-guided":[26],"fuzzing.":[27],"In":[28],"this":[29,121,170],"work,":[30],"we":[31,67,85,123],"introduce":[32,86,195],"bcov,":[33],"tool":[35,41],"for":[36,92,116],"binary-level":[37,74],"analysis.":[39],"Our":[40,177],"statically":[42],"instruments":[43],"x86-64":[44,112],"binaries":[45,144,192,225],"ELF":[48],"format":[49],"without":[50],"compiler":[51],"support.":[52],"We":[53,136],"implement":[54],"several":[55],"techniques":[56],"to":[57,62,73,81,103,165,218],"improve":[58],"efficiency":[59],"and":[60,76,100,128,149,154,183,188,226],"scale":[61],"large":[63],"real-world":[64],"software.":[65],"First,":[66],"bring":[68],"Agrawal's":[69],"probe":[70],"pruning":[71],"technique":[72,91],"instrumentation":[75,157],"effectively":[77],"leverage":[78],"its":[79],"superblocks":[80],"reduce":[82],"overhead.":[83],"Second,":[84],"sliced":[87],"microexecution,":[88],"robust":[90],"jump":[93,105,213],"table":[94,106,214],"which":[96],"improves":[97],"CFG":[98],"precision":[99],"enables":[101],"us":[102],"instrument":[104],"entries.":[107],"Additionally,":[108],"smaller":[109],"instructions":[110],"pose":[113],"challenge":[115],"inserting":[117],"detours.":[118],"To":[119],"address":[120],"challenge,":[122],"aggressively":[124],"exploit":[125],"padding":[126],"bytes":[127],"systematically":[129],"host":[130],"detours":[131],"neighboring":[133],"basic":[134],"blocks.":[135],"evaluate":[137],"bcov":[138],"on":[139,223,229],"corpus":[141,171],"95":[143],"compiled":[145],"from":[146],"eight":[147],"popular":[148],"well-tested":[150],"packages":[151],"like":[152],"FFmpeg":[153],"LLVM.":[155],"Two":[156],"policies,":[158],"with":[159,205],"different":[160],"edge-level":[161],"precision,":[162],"are":[163],"used":[164],"patch":[166],"all":[167],"functions":[168],"-":[172],"over":[173],"1.6":[174],"million":[175],"functions.":[176],"precise":[178],"policy":[179],"average":[181,207],"performance":[182],"memory":[184],"overheads":[185],"14%":[187],"22%":[189],"respectively.":[190],"Instrumented":[191],"do":[193],"not":[194],"any":[196],"test":[197],"regressions.":[198],"The":[199],"reported":[200],"is":[202,216],"highly":[203],"accurate":[204],"F-score":[208],"99.86%.":[210],"Finally,":[211],"our":[212],"comparable":[217],"that":[219],"IDA":[221],"Pro":[222],"gcc":[224],"outperforms":[227],"it":[228],"clang":[230],"binaries.":[231]},"counts_by_year":[],"updated_date":"2026-02-09T09:26:11.010843","created_date":"2025-10-10T00:00:00"}