{"id":"https://openalex.org/W3168574316","doi":"https://doi.org/10.1145/3433210.3453076","title":"Privilege-Escalation Vulnerability Discovery for Large-scale RPC Services","display_name":"Privilege-Escalation Vulnerability Discovery for Large-scale RPC Services","publication_year":2021,"publication_date":"2021-05-24","ids":{"openalex":"https://openalex.org/W3168574316","doi":"https://doi.org/10.1145/3433210.3453076","mag":"3168574316"},"language":"en","primary_location":{"id":"doi:10.1145/3433210.3453076","is_oa":false,"landing_page_url":"https://doi.org/10.1145/3433210.3453076","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the 2021 ACM Asia Conference on Computer and Communications Security","raw_type":"proceedings-article"},"type":"conference-paper","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5045206037","display_name":"Zhuotao Liu","orcid":"https://orcid.org/0000-0002-7532-0434"},"institutions":[{"id":"https://openalex.org/I99065089","display_name":"Tsinghua University","ror":"https://ror.org/03cve4549","country_code":"CN","type":"education","lineage":["https://openalex.org/I99065089"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Zhuotao Liu","raw_affiliation_strings":["Tsinghua University, Beijing, China"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Tsinghua University, Beijing, China","institution_ids":["https://openalex.org/I99065089"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5080880894","display_name":"Hao Zhao","orcid":"https://orcid.org/0009-0003-6290-3520"},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Hao Zhao","raw_affiliation_strings":["Ant Group, Hangzhou, China"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Ant Group, Hangzhou, China","institution_ids":[]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5104728630","display_name":"Sainan Li","orcid":"https://orcid.org/0009-0004-2636-1784"},"institutions":[{"id":"https://openalex.org/I99065089","display_name":"Tsinghua University","ror":"https://ror.org/03cve4549","country_code":"CN","type":"education","lineage":["https://openalex.org/I99065089"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Sainan Li","raw_affiliation_strings":["Tsinghua University, Beijing, China"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Tsinghua University, Beijing, China","institution_ids":["https://openalex.org/I99065089"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5100350165","display_name":"Qi Li","orcid":"https://orcid.org/0000-0001-8776-8730"},"institutions":[{"id":"https://openalex.org/I99065089","display_name":"Tsinghua University","ror":"https://ror.org/03cve4549","country_code":"CN","type":"education","lineage":["https://openalex.org/I99065089"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Qi Li","raw_affiliation_strings":["Tsinghua University, Beijing, China"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Tsinghua University, Beijing, China","institution_ids":["https://openalex.org/I99065089"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5102921233","display_name":"Tao Wei","orcid":"https://orcid.org/0000-0002-7086-8935"},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Tao Wei","raw_affiliation_strings":["Ant Group, Hangzhou, China"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Ant Group, Hangzhou, China","institution_ids":[]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5090481567","display_name":"Yu Wang","orcid":"https://orcid.org/0000-0003-4375-303X"},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Yu Wang","raw_affiliation_strings":["Ant Group, Hangzhou, China"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Ant Group, Hangzhou, China","institution_ids":[]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":1,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":null,"has_fulltext":false,"cited_by_count":5,"citation_normalized_percentile":null,"cited_by_percentile_year":null,"biblio":{"volume":null,"issue":null,"first_page":"565","last_page":"577"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T12479","display_name":"Web Application Security Vulnerabilities","score":0.9998000264167786,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T12479","display_name":"Web Application Security Vulnerabilities","score":0.9998000264167786,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":0.9993000030517578,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10734","display_name":"Information and Cyber Security","score":0.9991999864578247,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.7782807350158691},{"id":"https://openalex.org/keywords/computer-security","display_name":"Computer security","score":0.49114248156547546},{"id":"https://openalex.org/keywords/software-deployment","display_name":"Software deployment","score":0.4775881767272949},{"id":"https://openalex.org/keywords/vulnerability","display_name":"Vulnerability (computing)","score":0.43976616859436035},{"id":"https://openalex.org/keywords/operating-system","display_name":"Operating system","score":0.21081548929214478}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.7782807350158691},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.49114248156547546},{"id":"https://openalex.org/C105339364","wikidata":"https://www.wikidata.org/wiki/Q2297740","display_name":"Software deployment","level":2,"score":0.4775881767272949},{"id":"https://openalex.org/C95713431","wikidata":"https://www.wikidata.org/wiki/Q631425","display_name":"Vulnerability (computing)","level":2,"score":0.43976616859436035},{"id":"https://openalex.org/C111919701","wikidata":"https://www.wikidata.org/wiki/Q9135","display_name":"Operating system","level":1,"score":0.21081548929214478}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1145/3433210.3453076","is_oa":false,"landing_page_url":"https://doi.org/10.1145/3433210.3453076","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the 2021 ACM Asia Conference on Computer and Communications Security","raw_type":"proceedings-article"}],"best_oa_location":null,"sustainable_development_goals":[{"display_name":"Peace, Justice and strong institutions","id":"https://metadata.un.org/sdg/16","score":0.4399999976158142}],"awards":[],"funders":[],"has_content":{"pdf":false,"grobid_xml":false},"content_urls":null,"referenced_works_count":29,"referenced_works":["https://openalex.org/W1503499126","https://openalex.org/W1659340666","https://openalex.org/W1967845068","https://openalex.org/W2068932268","https://openalex.org/W2080781552","https://openalex.org/W2083794595","https://openalex.org/W2106035061","https://openalex.org/W2112962899","https://openalex.org/W2339647006","https://openalex.org/W2350778671","https://openalex.org/W2363172845","https://openalex.org/W2419550901","https://openalex.org/W2536021772","https://openalex.org/W2613084287","https://openalex.org/W2688711791","https://openalex.org/W2766106797","https://openalex.org/W2790761820","https://openalex.org/W2793043914","https://openalex.org/W2901089484","https://openalex.org/W2929275958","https://openalex.org/W2964097210","https://openalex.org/W2986159792","https://openalex.org/W2986807064","https://openalex.org/W3047608117","https://openalex.org/W3099713549","https://openalex.org/W4243607364","https://openalex.org/W4299301436","https://openalex.org/W6600002382","https://openalex.org/W6629307475"],"related_works":["https://openalex.org/W4391375266","https://openalex.org/W2748952813","https://openalex.org/W2770234245","https://openalex.org/W96612179","https://openalex.org/W4229499248","https://openalex.org/W2566006169","https://openalex.org/W1567818861","https://openalex.org/W2987774938","https://openalex.org/W4256492088","https://openalex.org/W632915154"],"abstract_inverted_index":{"RPCs":[0,16,189,247],"are":[1,146],"fundamental":[2],"to":[3,115,119,175,182,191,207,214,239],"our":[4,120,281],"large-scale":[5,73],"distributed":[6],"system.":[7,75],"From":[8],"a":[9,37,62,125,157,161,196,242,275],"security":[10],"perspective,":[11],"the":[12,41,54,82,88,94,129,150,173,177,185,203,209,254],"blast":[13],"radius":[14],"of":[15,27,60,78,131,134,139,163,187,244,256,271],"is":[17,35,91,113,155,226],"worryingly":[18],"big":[19],"since":[20],"each":[21],"RPC":[22,33,74,96,122,210],"often":[23,36,227],"interacts":[24],"with":[25],"tens":[26],"internal":[28],"system":[29,65,205],"components.":[30],"Thus,":[31],"discovering":[32],"vulnerabilities":[34],"top":[38],"priority":[39],"in":[40,70,124,179,261],"software":[42],"quality":[43],"assurance":[44],"process":[45],"for":[46,66],"production":[47,121,258,282],"systems.":[48],"In":[49],"this":[50],"paper,":[51],"we":[52],"present":[53],"design,":[55],"implementation,":[56],"and":[57,142,198],"deployment":[58],"experiences":[59],"PAIR,":[61],"fully":[63],"automated":[64],"privilege-escalation":[67],"vulnerability":[68,89,236],"discovery":[69,90],"Ant":[71],"Group's":[72],"The":[76],"design":[77,85,153,165],"PAIR":[79,112,194,217,232,260],"centers":[80],"around":[81],"live":[83,95,151],"replay":[84,152],"principle":[86,154,178],"where":[87],"driven":[92],"by":[93,229],"requests":[97,123],"collected":[98],"from":[99,269],"production,":[100],"rather":[101],"than":[102,222],"relying":[103],"on":[104],"any":[105],"engineered":[106],"testing":[107],"requests.":[108],"This":[109],"ensures":[110],"that":[111,216,225],"able":[114],"provide":[116],"complete":[117],"coverage":[118],"privacy-preserving":[126,199],"manner,":[127],"despite":[128],"manifest":[130],"scale":[132],"(billions":[133],"daily":[135],"requests),":[136],"complexity":[137],"(hundreds":[138],"system-services":[140],"involved)":[141],"heterogeneity":[143],"(RPC":[144],"protocols":[145],"highly":[147],"customized).":[148],"However,":[149],"not":[156],"panacea.":[158],"We":[159],"made":[160],"couple":[162],"critical":[164],"decisions":[166],"(and":[167],"addressed":[168],"their":[169],"corresponding":[170],"challenges)":[171],"along":[172],"way":[174],"realize":[176],"production.":[180],"First,":[181],"avoid":[183],"inspecting":[184],"responses":[186],"user-facing":[188],"(due":[190],"privacy":[192],"concerns),":[193],"designs":[195,233],"universal":[197],"mechanism,":[200],"via":[201],"profiling":[202],"end-to-end":[204],"invocation,":[206],"represent":[208],"handling":[211],"logic.":[212],"Second,":[213],"ensure":[215],"provides":[218],"proactive":[219],"defense":[220,224],"(rather":[221],"reactive":[223],"limited":[228],"known":[230],"vulnerabilities),":[231],"an":[234],"empirical":[235],"labeling":[237],"mechanism":[238],"effectively":[240],"identify":[241],"group":[243],"potentially":[245],"insecure":[246,267],"while":[248,273],"safely":[249],"excluding":[250],"other":[251],"RPCs.":[252],"During":[253],"course":[255],"three-year":[257],"development,":[259],"total":[262],"helped":[263],"locate":[264],"133":[265],"truly":[266],"RPCs,":[268],"billions":[270],"requests,":[272],"maintaining":[274],"zero":[276],"false":[277],"negative":[278],"rate":[279],"per":[280],"observations.":[283]},"counts_by_year":[{"year":2025,"cited_by_count":2},{"year":2024,"cited_by_count":1},{"year":2023,"cited_by_count":2}],"updated_date":"2026-07-14T23:27:15.235271","created_date":"2025-10-10T00:00:00"}