{"id":"https://openalex.org/W3214353108","doi":"https://doi.org/10.1145/3460120.3485363","title":"Automated Bug Hunting With Data-Driven Symbolic Root Cause Analysis","display_name":"Automated Bug Hunting With Data-Driven Symbolic Root Cause Analysis","publication_year":2021,"publication_date":"2021-11-12","ids":{"openalex":"https://openalex.org/W3214353108","doi":"https://doi.org/10.1145/3460120.3485363","mag":"3214353108"},"language":"en","primary_location":{"id":"doi:10.1145/3460120.3485363","is_oa":true,"landing_page_url":"https://doi.org/10.1145/3460120.3485363","pdf_url":"https://dl.acm.org/doi/pdf/10.1145/3460120.3485363","source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the 2021 ACM SIGSAC Conference on Computer and Communications Security","raw_type":"proceedings-article"},"type":"article","indexed_in":["crossref"],"open_access":{"is_oa":true,"oa_status":"gold","oa_url":"https://dl.acm.org/doi/pdf/10.1145/3460120.3485363","any_repository_has_fulltext":null},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5084633808","display_name":"Carter Yagemann","orcid":"https://orcid.org/0000-0002-8018-0341"},"institutions":[{"id":"https://openalex.org/I130701444","display_name":"Georgia Institute of Technology","ror":"https://ror.org/01zkghx44","country_code":"US","type":"education","lineage":["https://openalex.org/I130701444"]}],"countries":["US"],"is_corresponding":true,"raw_author_name":"Carter Yagemann","raw_affiliation_strings":["Georgia Institute of Technology, Atlanta, GA, USA"],"affiliations":[{"raw_affiliation_string":"Georgia Institute of Technology, Atlanta, GA, USA","institution_ids":["https://openalex.org/I130701444"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5052526223","display_name":"Simon P. Chung","orcid":null},"institutions":[{"id":"https://openalex.org/I130701444","display_name":"Georgia Institute of Technology","ror":"https://ror.org/01zkghx44","country_code":"US","type":"education","lineage":["https://openalex.org/I130701444"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Simon P. Chung","raw_affiliation_strings":["Georgia Institute of Technology, Atlanta, GA, USA"],"affiliations":[{"raw_affiliation_string":"Georgia Institute of Technology, Atlanta, GA, USA","institution_ids":["https://openalex.org/I130701444"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5021029981","display_name":"Brendan Saltaformaggio","orcid":"https://orcid.org/0000-0001-5859-6925"},"institutions":[{"id":"https://openalex.org/I130701444","display_name":"Georgia Institute of Technology","ror":"https://ror.org/01zkghx44","country_code":"US","type":"education","lineage":["https://openalex.org/I130701444"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Brendan Saltaformaggio","raw_affiliation_strings":["Georgia Institute of Technology, Atlanta, GA, USA"],"affiliations":[{"raw_affiliation_string":"Georgia Institute of Technology, Atlanta, GA, USA","institution_ids":["https://openalex.org/I130701444"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5047140382","display_name":"Wenke Lee","orcid":"https://orcid.org/0000-0003-2761-1277"},"institutions":[{"id":"https://openalex.org/I130701444","display_name":"Georgia Institute of Technology","ror":"https://ror.org/01zkghx44","country_code":"US","type":"education","lineage":["https://openalex.org/I130701444"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Wenke Lee","raw_affiliation_strings":["Georgia Institute of Technology, Atlanta, GA, USA"],"affiliations":[{"raw_affiliation_string":"Georgia Institute of Technology, Atlanta, GA, USA","institution_ids":["https://openalex.org/I130701444"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":4,"corresponding_author_ids":["https://openalex.org/A5084633808"],"corresponding_institution_ids":["https://openalex.org/I130701444"],"apc_list":null,"apc_paid":null,"fwci":1.5387,"has_fulltext":true,"cited_by_count":17,"citation_normalized_percentile":{"value":0.83662237,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":{"min":96,"max":99},"biblio":{"volume":null,"issue":null,"first_page":"320","last_page":"336"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":0.9998999834060669,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":0.9998999834060669,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10743","display_name":"Software Testing and Debugging Techniques","score":0.9994999766349792,"subfield":{"id":"https://openalex.org/subfields/1712","display_name":"Software"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11424","display_name":"Security and Verification in Computing","score":0.9987000226974487,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.7961853742599487},{"id":"https://openalex.org/keywords/root-cause","display_name":"Root cause","score":0.7306475639343262},{"id":"https://openalex.org/keywords/symbolic-execution","display_name":"Symbolic execution","score":0.718725323677063},{"id":"https://openalex.org/keywords/software-bug","display_name":"Software bug","score":0.6091148257255554},{"id":"https://openalex.org/keywords/server","display_name":"Server","score":0.5381916165351868},{"id":"https://openalex.org/keywords/software","display_name":"Software","score":0.5136417746543884},{"id":"https://openalex.org/keywords/root","display_name":"Root (linguistics)","score":0.5057888031005859},{"id":"https://openalex.org/keywords/host","display_name":"Host (biology)","score":0.502994954586029},{"id":"https://openalex.org/keywords/mindset","display_name":"Mindset","score":0.4992105960845947},{"id":"https://openalex.org/keywords/root-cause-analysis","display_name":"Root cause analysis","score":0.44735443592071533},{"id":"https://openalex.org/keywords/computer-security","display_name":"Computer security","score":0.4426991045475006},{"id":"https://openalex.org/keywords/path","display_name":"Path (computing)","score":0.42773494124412537},{"id":"https://openalex.org/keywords/operating-system","display_name":"Operating system","score":0.3141725957393646},{"id":"https://openalex.org/keywords/artificial-intelligence","display_name":"Artificial intelligence","score":0.12206584215164185},{"id":"https://openalex.org/keywords/engineering","display_name":"Engineering","score":0.10446956753730774}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.7961853742599487},{"id":"https://openalex.org/C84945661","wikidata":"https://www.wikidata.org/wiki/Q7366567","display_name":"Root cause","level":2,"score":0.7306475639343262},{"id":"https://openalex.org/C2779639559","wikidata":"https://www.wikidata.org/wiki/Q7661178","display_name":"Symbolic execution","level":3,"score":0.718725323677063},{"id":"https://openalex.org/C1009929","wikidata":"https://www.wikidata.org/wiki/Q179550","display_name":"Software bug","level":3,"score":0.6091148257255554},{"id":"https://openalex.org/C93996380","wikidata":"https://www.wikidata.org/wiki/Q44127","display_name":"Server","level":2,"score":0.5381916165351868},{"id":"https://openalex.org/C2777904410","wikidata":"https://www.wikidata.org/wiki/Q7397","display_name":"Software","level":2,"score":0.5136417746543884},{"id":"https://openalex.org/C171078966","wikidata":"https://www.wikidata.org/wiki/Q111029","display_name":"Root (linguistics)","level":2,"score":0.5057888031005859},{"id":"https://openalex.org/C126831891","wikidata":"https://www.wikidata.org/wiki/Q221673","display_name":"Host (biology)","level":2,"score":0.502994954586029},{"id":"https://openalex.org/C2778491294","wikidata":"https://www.wikidata.org/wiki/Q1339824","display_name":"Mindset","level":2,"score":0.4992105960845947},{"id":"https://openalex.org/C130963320","wikidata":"https://www.wikidata.org/wiki/Q1401207","display_name":"Root cause analysis","level":2,"score":0.44735443592071533},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.4426991045475006},{"id":"https://openalex.org/C2777735758","wikidata":"https://www.wikidata.org/wiki/Q817765","display_name":"Path (computing)","level":2,"score":0.42773494124412537},{"id":"https://openalex.org/C111919701","wikidata":"https://www.wikidata.org/wiki/Q9135","display_name":"Operating system","level":1,"score":0.3141725957393646},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.12206584215164185},{"id":"https://openalex.org/C127413603","wikidata":"https://www.wikidata.org/wiki/Q11023","display_name":"Engineering","level":0,"score":0.10446956753730774},{"id":"https://openalex.org/C77595967","wikidata":"https://www.wikidata.org/wiki/Q3151013","display_name":"Forensic engineering","level":1,"score":0.0},{"id":"https://openalex.org/C18903297","wikidata":"https://www.wikidata.org/wiki/Q7150","display_name":"Ecology","level":1,"score":0.0},{"id":"https://openalex.org/C200601418","wikidata":"https://www.wikidata.org/wiki/Q2193887","display_name":"Reliability engineering","level":1,"score":0.0},{"id":"https://openalex.org/C41895202","wikidata":"https://www.wikidata.org/wiki/Q8162","display_name":"Linguistics","level":1,"score":0.0},{"id":"https://openalex.org/C138885662","wikidata":"https://www.wikidata.org/wiki/Q5891","display_name":"Philosophy","level":0,"score":0.0},{"id":"https://openalex.org/C86803240","wikidata":"https://www.wikidata.org/wiki/Q420","display_name":"Biology","level":0,"score":0.0}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1145/3460120.3485363","is_oa":true,"landing_page_url":"https://doi.org/10.1145/3460120.3485363","pdf_url":"https://dl.acm.org/doi/pdf/10.1145/3460120.3485363","source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the 2021 ACM SIGSAC Conference on Computer and Communications Security","raw_type":"proceedings-article"}],"best_oa_location":{"id":"doi:10.1145/3460120.3485363","is_oa":true,"landing_page_url":"https://doi.org/10.1145/3460120.3485363","pdf_url":"https://dl.acm.org/doi/pdf/10.1145/3460120.3485363","source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the 2021 ACM SIGSAC Conference on Computer and Communications Security","raw_type":"proceedings-article"},"sustainable_development_goals":[{"score":0.8100000023841858,"display_name":"Peace, Justice and strong institutions","id":"https://metadata.un.org/sdg/16"}],"awards":[{"id":"https://openalex.org/G2637195115","display_name":null,"funder_award_id":"4-18-1-","funder_id":"https://openalex.org/F4320337345","funder_display_name":"Office of Naval Research"},{"id":"https://openalex.org/G2755256982","display_name":null,"funder_award_id":"N00014-19-1-2179,N00014-17-1-2895,N00014-15-1-2162,N00014-18-1-2662","funder_id":"https://openalex.org/F4320337345","funder_display_name":"Office of Naval Research"},{"id":"https://openalex.org/G3366692587","display_name":null,"funder_award_id":"N00014-18-1-2662","funder_id":"https://openalex.org/F4320337345","funder_display_name":"Office of Naval Research"},{"id":"https://openalex.org/G4504108201","display_name":null,"funder_award_id":"N00014-17-1","funder_id":"https://openalex.org/F4320337345","funder_display_name":"Office of Naval Research"},{"id":"https://openalex.org/G4751570384","display_name":null,"funder_award_id":"4-17-1-","funder_id":"https://openalex.org/F4320337345","funder_display_name":"Office of Naval Research"},{"id":"https://openalex.org/G5643251411","display_name":null,"funder_award_id":"and N00","funder_id":"https://openalex.org/F4320337345","funder_display_name":"Office of Naval Research"},{"id":"https://openalex.org/G6069866899","display_name":null,"funder_award_id":"HR00112090031","funder_id":"https://openalex.org/F4320332180","funder_display_name":"Defense Advanced Research Projects Agency"},{"id":"https://openalex.org/G637290822","display_name":null,"funder_award_id":"N00014-17-1-289","funder_id":"https://openalex.org/F4320337345","funder_display_name":"Office of Naval Research"},{"id":"https://openalex.org/G7931865478","display_name":null,"funder_award_id":"4-15-1-","funder_id":"https://openalex.org/F4320337345","funder_display_name":"Office of Naval Research"},{"id":"https://openalex.org/G8326067817","display_name":null,"funder_award_id":"N00014-15-1-2162","funder_id":"https://openalex.org/F4320337345","funder_display_name":"Office of Naval Research"},{"id":"https://openalex.org/G8568027321","display_name":null,"funder_award_id":"N00014-17-1-2895","funder_id":"https://openalex.org/F4320337345","funder_display_name":"Office of Naval Research"},{"id":"https://openalex.org/G8876996369","display_name":null,"funder_award_id":"N00014","funder_id":"https://openalex.org/F4320337345","funder_display_name":"Office of Naval Research"}],"funders":[{"id":"https://openalex.org/F4320332180","display_name":"Defense Advanced Research Projects Agency","ror":"https://ror.org/02caytj08"},{"id":"https://openalex.org/F4320332815","display_name":"Advanced Research Projects Agency","ror":"https://ror.org/02caytj08"},{"id":"https://openalex.org/F4320337345","display_name":"Office of Naval Research","ror":"https://ror.org/00rk2pe57"}],"has_content":{"grobid_xml":true,"pdf":true},"content_urls":{"pdf":"https://content.openalex.org/works/W3214353108.pdf","grobid_xml":"https://content.openalex.org/works/W3214353108.grobid-xml"},"referenced_works_count":67,"referenced_works":["https://openalex.org/W1504467209","https://openalex.org/W1546956568","https://openalex.org/W1981015239","https://openalex.org/W2009489720","https://openalex.org/W2091939272","https://openalex.org/W2094382938","https://openalex.org/W2097742961","https://openalex.org/W2100583963","https://openalex.org/W2101512909","https://openalex.org/W2108598243","https://openalex.org/W2109276114","https://openalex.org/W2113864883","https://openalex.org/W2114780348","https://openalex.org/W2116998101","https://openalex.org/W2118315969","https://openalex.org/W2119251836","https://openalex.org/W2121204404","https://openalex.org/W2131875129","https://openalex.org/W2143776233","https://openalex.org/W2149801502","https://openalex.org/W2165015106","https://openalex.org/W2170224888","https://openalex.org/W2183816381","https://openalex.org/W2295974667","https://openalex.org/W2383417445","https://openalex.org/W2401617229","https://openalex.org/W2503165018","https://openalex.org/W2514974017","https://openalex.org/W2534610146","https://openalex.org/W2560252021","https://openalex.org/W2574017551","https://openalex.org/W2584029330","https://openalex.org/W2603700459","https://openalex.org/W2606293696","https://openalex.org/W2612529343","https://openalex.org/W2613534458","https://openalex.org/W2650293344","https://openalex.org/W2734941459","https://openalex.org/W2755572540","https://openalex.org/W2761662547","https://openalex.org/W2766852928","https://openalex.org/W2766898821","https://openalex.org/W2794631344","https://openalex.org/W2795235421","https://openalex.org/W2888445849","https://openalex.org/W2891196279","https://openalex.org/W2891688103","https://openalex.org/W2897859437","https://openalex.org/W2921892740","https://openalex.org/W2925685215","https://openalex.org/W2934419927","https://openalex.org/W2946925508","https://openalex.org/W2970528944","https://openalex.org/W2989937303","https://openalex.org/W3000501050","https://openalex.org/W3006711782","https://openalex.org/W3015291177","https://openalex.org/W3109160943","https://openalex.org/W3136767761","https://openalex.org/W4231982873","https://openalex.org/W4244413641","https://openalex.org/W4245744969","https://openalex.org/W4254762831","https://openalex.org/W6604569975","https://openalex.org/W6606430823","https://openalex.org/W6629958140","https://openalex.org/W6737694244"],"related_works":["https://openalex.org/W2030594396","https://openalex.org/W2754538212","https://openalex.org/W2490884653","https://openalex.org/W4200610016","https://openalex.org/W2183996497","https://openalex.org/W129587375","https://openalex.org/W2110363179","https://openalex.org/W2056250485","https://openalex.org/W2535098331","https://openalex.org/W2624149531"],"abstract_inverted_index":{"The":[0],"increasing":[1],"cost":[2],"of":[3,77,100,132,143],"successful":[4],"cyberattacks":[5],"has":[6],"caused":[7],"a":[8],"mindset":[9],"shift,":[10],"whereby":[11],"defenders":[12],"now":[13],"employ":[14],"proactive":[15],"defenses,":[16],"namely":[17],"software":[18,134],"bug":[19,59],"hunting,":[20],"alongside":[21],"existing":[22],"reactive":[23],"measures":[24],"(firewalls,":[25],"IDS,":[26],"IPS)":[27],"to":[28,37,69],"protect":[29],"systems.":[30],"Unfortunately":[31],"the":[32,97,141],"path":[33,121],"from":[34,129],"hunting":[35,60],"bugs":[36,85],"deploying":[38],"patches":[39],"remains":[40],"laborious":[41],"and":[42,47,73,82,89,106,146],"expensive,":[43],"requires":[44],"human":[45],"expertise,":[46],"still":[48],"misses":[49],"serious":[50],"memory":[51,108],"corruptions.":[52],"Motivated":[53],"by":[54],"these":[55],"challenges,":[56],"we":[57],"propose":[58],"using":[61],"symbolically":[62],"reconstructed":[63],"states":[64],"based":[65],"on":[66,116,135],"execution":[67],"traces":[68],"achieve":[70],"better":[71],"detection":[72],"root":[74],"cause":[75],"analysis":[76,112,142],"overflow,":[78],"use-after-free,":[79],"double":[80],"free,":[81],"format":[83],"string":[84],"across":[86],"user":[87,144],"programs":[88,118,148],"their":[90],"imported":[91],"libraries.":[92],"We":[93],"discover":[94],"that":[95],"with":[96],"right":[98],"use":[99],"widely":[101],"available":[102],"hardware":[103],"processor":[104],"tracing":[105],"partial":[107],"snapshots,":[109],"powerful":[110],"symbolic":[111],"can":[113,126],"be":[114,127],"used":[115],"real-world":[117],"while":[119],"managing":[120],"explosion.":[122],"Better":[123],"yet,":[124],"data":[125],"captured":[128],"production":[130],"deployments":[131],"live":[133],"end-host":[136],"systems":[137],"transparently,":[138],"aiding":[139],"in":[140],"clients":[145],"long-running":[147],"like":[149],"web":[150],"servers.":[151]},"counts_by_year":[{"year":2025,"cited_by_count":7},{"year":2024,"cited_by_count":3},{"year":2023,"cited_by_count":4},{"year":2022,"cited_by_count":3}],"updated_date":"2026-03-14T08:43:22.919905","created_date":"2025-10-10T00:00:00"}