{"id":"https://openalex.org/W3111931266","doi":"https://doi.org/10.1145/3427228.3427265","title":"Probabilistic Naming of Functions in Stripped Binaries","display_name":"Probabilistic Naming of Functions in Stripped Binaries","publication_year":2020,"publication_date":"2020-12-07","ids":{"openalex":"https://openalex.org/W3111931266","doi":"https://doi.org/10.1145/3427228.3427265","mag":"3111931266"},"language":"en","primary_location":{"id":"doi:10.1145/3427228.3427265","is_oa":false,"landing_page_url":"https://doi.org/10.1145/3427228.3427265","pdf_url":null,"source":{"id":"https://openalex.org/S4306417673","display_name":"Annual Computer Security Applications Conference","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":null,"host_organization_name":null,"host_organization_lineage":[],"host_organization_lineage_names":[],"type":"conference"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Annual Computer Security Applications Conference","raw_type":"proceedings-article"},"type":"article","indexed_in":["crossref"],"open_access":{"is_oa":true,"oa_status":"green","oa_url":"https://discovery.ucl.ac.uk/10133168/1/Cavallaro_acsac20-punstrip.pdf","any_repository_has_fulltext":true},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5050164540","display_name":"James Patrick-Evans","orcid":null},"institutions":[{"id":"https://openalex.org/I184558857","display_name":"Royal Holloway University of London","ror":"https://ror.org/04g2vpn86","country_code":"GB","type":"education","lineage":["https://openalex.org/I124357947","https://openalex.org/I184558857"]}],"countries":["GB"],"is_corresponding":true,"raw_author_name":"James Patrick-Evans","raw_affiliation_strings":["Royal Holloway University of London"],"affiliations":[{"raw_affiliation_string":"Royal Holloway University of London","institution_ids":["https://openalex.org/I184558857"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5036908366","display_name":"Lorenzo Cavallaro","orcid":"https://orcid.org/0000-0002-3878-2680"},"institutions":[{"id":"https://openalex.org/I183935753","display_name":"King's College London","ror":"https://ror.org/0220mzb33","country_code":"GB","type":"education","lineage":["https://openalex.org/I124357947","https://openalex.org/I183935753"]}],"countries":["GB"],"is_corresponding":false,"raw_author_name":"Lorenzo Cavallaro","raw_affiliation_strings":["King's College London, United Kingdom"],"affiliations":[{"raw_affiliation_string":"King's College London, United Kingdom","institution_ids":["https://openalex.org/I183935753"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5044468650","display_name":"Johannes Kinder","orcid":"https://orcid.org/0000-0002-8594-7839"},"institutions":[{"id":"https://openalex.org/I40527276","display_name":"Universit\u00e4t der Bundeswehr M\u00fcnchen","ror":"https://ror.org/05kkv3f82","country_code":"DE","type":"education","lineage":["https://openalex.org/I1315109972","https://openalex.org/I40527276","https://openalex.org/I4387152969"]}],"countries":["DE"],"is_corresponding":false,"raw_author_name":"Johannes Kinder","raw_affiliation_strings":["Bundeswehr University Munich, Germany"],"affiliations":[{"raw_affiliation_string":"Bundeswehr University Munich, Germany","institution_ids":["https://openalex.org/I40527276"]}]}],"institutions":[],"countries_distinct_count":2,"institutions_distinct_count":3,"corresponding_author_ids":["https://openalex.org/A5050164540"],"corresponding_institution_ids":["https://openalex.org/I184558857"],"apc_list":null,"apc_paid":null,"fwci":3.962,"has_fulltext":true,"cited_by_count":24,"citation_normalized_percentile":{"value":0.94138454,"is_in_top_1_percent":false,"is_in_top_10_percent":true},"cited_by_percentile_year":{"min":89,"max":99},"biblio":{"volume":null,"issue":null,"first_page":"373","last_page":"385"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10260","display_name":"Software Engineering Research","score":1.0,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T10260","display_name":"Software Engineering Research","score":1.0,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":0.9987000226974487,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10743","display_name":"Software Testing and Debugging Techniques","score":0.9980999827384949,"subfield":{"id":"https://openalex.org/subfields/1712","display_name":"Software"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.8188246488571167},{"id":"https://openalex.org/keywords/probabilistic-logic","display_name":"Probabilistic logic","score":0.6863409280776978},{"id":"https://openalex.org/keywords/executable","display_name":"Executable","score":0.6667494177818298},{"id":"https://openalex.org/keywords/programming-language","display_name":"Programming language","score":0.5547962784767151},{"id":"https://openalex.org/keywords/binary-number","display_name":"Binary number","score":0.5459995269775391},{"id":"https://openalex.org/keywords/debugging","display_name":"Debugging","score":0.5410692691802979},{"id":"https://openalex.org/keywords/compiler","display_name":"Compiler","score":0.528053343296051},{"id":"https://openalex.org/keywords/theoretical-computer-science","display_name":"Theoretical computer science","score":0.4917586147785187},{"id":"https://openalex.org/keywords/function","display_name":"Function (biology)","score":0.4659987688064575},{"id":"https://openalex.org/keywords/embedding","display_name":"Embedding","score":0.45550301671028137},{"id":"https://openalex.org/keywords/artificial-intelligence","display_name":"Artificial intelligence","score":0.23676639795303345},{"id":"https://openalex.org/keywords/arithmetic","display_name":"Arithmetic","score":0.11424991488456726}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.8188246488571167},{"id":"https://openalex.org/C49937458","wikidata":"https://www.wikidata.org/wiki/Q2599292","display_name":"Probabilistic logic","level":2,"score":0.6863409280776978},{"id":"https://openalex.org/C160145156","wikidata":"https://www.wikidata.org/wiki/Q778586","display_name":"Executable","level":2,"score":0.6667494177818298},{"id":"https://openalex.org/C199360897","wikidata":"https://www.wikidata.org/wiki/Q9143","display_name":"Programming language","level":1,"score":0.5547962784767151},{"id":"https://openalex.org/C48372109","wikidata":"https://www.wikidata.org/wiki/Q3913","display_name":"Binary number","level":2,"score":0.5459995269775391},{"id":"https://openalex.org/C168065819","wikidata":"https://www.wikidata.org/wiki/Q845566","display_name":"Debugging","level":2,"score":0.5410692691802979},{"id":"https://openalex.org/C169590947","wikidata":"https://www.wikidata.org/wiki/Q47506","display_name":"Compiler","level":2,"score":0.528053343296051},{"id":"https://openalex.org/C80444323","wikidata":"https://www.wikidata.org/wiki/Q2878974","display_name":"Theoretical computer science","level":1,"score":0.4917586147785187},{"id":"https://openalex.org/C14036430","wikidata":"https://www.wikidata.org/wiki/Q3736076","display_name":"Function (biology)","level":2,"score":0.4659987688064575},{"id":"https://openalex.org/C41608201","wikidata":"https://www.wikidata.org/wiki/Q980509","display_name":"Embedding","level":2,"score":0.45550301671028137},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.23676639795303345},{"id":"https://openalex.org/C94375191","wikidata":"https://www.wikidata.org/wiki/Q11205","display_name":"Arithmetic","level":1,"score":0.11424991488456726},{"id":"https://openalex.org/C33923547","wikidata":"https://www.wikidata.org/wiki/Q395","display_name":"Mathematics","level":0,"score":0.0},{"id":"https://openalex.org/C78458016","wikidata":"https://www.wikidata.org/wiki/Q840400","display_name":"Evolutionary biology","level":1,"score":0.0},{"id":"https://openalex.org/C86803240","wikidata":"https://www.wikidata.org/wiki/Q420","display_name":"Biology","level":0,"score":0.0}],"mesh":[],"locations_count":2,"locations":[{"id":"doi:10.1145/3427228.3427265","is_oa":false,"landing_page_url":"https://doi.org/10.1145/3427228.3427265","pdf_url":null,"source":{"id":"https://openalex.org/S4306417673","display_name":"Annual Computer Security Applications Conference","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":null,"host_organization_name":null,"host_organization_lineage":[],"host_organization_lineage_names":[],"type":"conference"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Annual Computer Security Applications Conference","raw_type":"proceedings-article"},{"id":"pmh:oai:eprints.ucl.ac.uk.OAI2:10133168","is_oa":true,"landing_page_url":"https://discovery.ucl.ac.uk/id/eprint/10133168/","pdf_url":"https://discovery.ucl.ac.uk/10133168/1/Cavallaro_acsac20-punstrip.pdf","source":{"id":"https://openalex.org/S4306400024","display_name":"UCL Discovery (University College London)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I45129253","host_organization_name":"University College London","host_organization_lineage":["https://openalex.org/I45129253"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":"     In:  ACSAC '20: Annual Computer Security Applications Conference.  (pp. pp. 373-385).  ACM (2020)     ","raw_type":"Proceedings paper"}],"best_oa_location":{"id":"pmh:oai:eprints.ucl.ac.uk.OAI2:10133168","is_oa":true,"landing_page_url":"https://discovery.ucl.ac.uk/id/eprint/10133168/","pdf_url":"https://discovery.ucl.ac.uk/10133168/1/Cavallaro_acsac20-punstrip.pdf","source":{"id":"https://openalex.org/S4306400024","display_name":"UCL Discovery (University College London)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I45129253","host_organization_name":"University College London","host_organization_lineage":["https://openalex.org/I45129253"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":"     In:  ACSAC '20: Annual Computer Security Applications Conference.  (pp. pp. 373-385).  ACM (2020)     ","raw_type":"Proceedings paper"},"sustainable_development_goals":[],"awards":[],"funders":[],"has_content":{"grobid_xml":true,"pdf":true},"content_urls":{"pdf":"https://content.openalex.org/works/W3111931266.pdf","grobid_xml":"https://content.openalex.org/works/W3111931266.grobid-xml"},"referenced_works_count":51,"referenced_works":["https://openalex.org/W17195072","https://openalex.org/W596492259","https://openalex.org/W646354405","https://openalex.org/W1412775481","https://openalex.org/W1511986666","https://openalex.org/W1560512119","https://openalex.org/W1604459715","https://openalex.org/W1824228869","https://openalex.org/W1942295288","https://openalex.org/W1972429847","https://openalex.org/W1974527629","https://openalex.org/W1984978725","https://openalex.org/W2000359198","https://openalex.org/W2029491280","https://openalex.org/W2059048359","https://openalex.org/W2081580037","https://openalex.org/W2107697055","https://openalex.org/W2113709047","https://openalex.org/W2121402967","https://openalex.org/W2129999749","https://openalex.org/W2138385884","https://openalex.org/W2138756793","https://openalex.org/W2140792139","https://openalex.org/W2142498761","https://openalex.org/W2156279557","https://openalex.org/W2156590219","https://openalex.org/W2156981320","https://openalex.org/W2161563510","https://openalex.org/W2402144811","https://openalex.org/W2514974017","https://openalex.org/W2516577067","https://openalex.org/W2532962075","https://openalex.org/W2533383364","https://openalex.org/W2547625248","https://openalex.org/W2577142429","https://openalex.org/W2620895032","https://openalex.org/W2625806818","https://openalex.org/W2737925311","https://openalex.org/W2749008552","https://openalex.org/W2767373589","https://openalex.org/W2892187814","https://openalex.org/W2898811429","https://openalex.org/W2926178846","https://openalex.org/W2950133940","https://openalex.org/W2950191616","https://openalex.org/W2950577311","https://openalex.org/W2962688040","https://openalex.org/W2997591727","https://openalex.org/W3105926539","https://openalex.org/W4247950230","https://openalex.org/W4250347244"],"related_works":["https://openalex.org/W4321442002","https://openalex.org/W2015265939","https://openalex.org/W2350278424","https://openalex.org/W2284072287","https://openalex.org/W2611067230","https://openalex.org/W2480201319","https://openalex.org/W2387706296","https://openalex.org/W2155788121","https://openalex.org/W3030873103","https://openalex.org/W2357088637"],"abstract_inverted_index":{"Debugging":[0],"symbols":[1],"in":[2],"binary":[3,48],"executables":[4],"carry":[5],"the":[6,18,34,61,86,94,178,185,188],"names":[7,65,127,163],"of":[8,20,38,47,105,116,125,132,187],"functions":[9,78,145],"and":[10,36,66,75,119,150,153,182],"global":[11],"variables.":[12],"When":[13],"present,":[14],"they":[15,24,92],"greatly":[16],"simplify":[17],"process":[19],"reverse":[21],"engineering,":[22],"but":[23],"are":[25,71],"almost":[26],"always":[27],"removed":[28],"(stripped)":[29],"for":[30],"deployment.":[31],"We":[32,98,136,168],"present":[33],"design":[35],"implementation":[37],"punstrip,":[39],"a":[40,44,55,122],"tool":[41],"which":[42],"combines":[43],"probabilistic":[45,56],"fingerprint":[46],"code":[49,166],"based":[50,111,128,164],"on":[51,112,129,165],"high-level":[52],"features":[53],"with":[54],"graphical":[57],"model":[58],"to":[59,143],"learn":[60],"relationship":[62],"between":[63],"function":[64,126,133,162],"program":[67],"structure.":[68,167],"As":[69],"there":[70],"many":[72],"naming":[73],"conventions":[74],"developer":[76],"styles,":[77],"from":[79,177],"different":[80,148],"applications":[81],"do":[82],"not":[83],"necessarily":[84],"have":[85],"exact":[87,95],"same":[88,96],"name,":[89],"even":[90],"if":[91],"implement":[93],"functionality.":[97],"therefore":[99],"evaluate":[100,169],"punstrip":[101,157],"across":[102,147],"three":[103],"levels":[104,152],"name":[106,117],"matching:":[107],"exact;":[108],"an":[109],"approach":[110,140,171],"natural":[113],"language":[114],"processing":[115],"components;":[118],"using":[120],"Symbol2Vec,":[121],"new":[123],"embedding":[124],"random":[130],"walks":[131],"call":[134],"graphs.":[135],"show":[137],"that":[138,156],"our":[139,170],"is":[141],"able":[142],"recognize":[144],"compiled":[146],"compilers":[149],"optimization":[151],"then":[154],"demonstrate":[155],"can":[158],"predict":[159],"semantically":[160],"similar":[161],"over":[172],"open":[173],"source":[174],"C":[175],"binaries":[176],"Debian":[179],"Linux":[180],"distribution":[181],"compare":[183],"against":[184],"state":[186],"art.":[189]},"counts_by_year":[{"year":2025,"cited_by_count":5},{"year":2024,"cited_by_count":7},{"year":2023,"cited_by_count":3},{"year":2022,"cited_by_count":3},{"year":2021,"cited_by_count":5},{"year":2020,"cited_by_count":1}],"updated_date":"2026-04-04T16:13:02.066488","created_date":"2025-10-10T00:00:00"}