{"id":"https://openalex.org/W4320057401","doi":"https://doi.org/10.1145/3573834.3574541","title":"Generic O-LLVM Automatic Multi-architecture Deobfuscation Framework Based on Symbolic Execution","display_name":"Generic O-LLVM Automatic Multi-architecture Deobfuscation Framework Based on Symbolic Execution","publication_year":2022,"publication_date":"2022-11-25","ids":{"openalex":"https://openalex.org/W4320057401","doi":"https://doi.org/10.1145/3573834.3574541"},"language":"en","primary_location":{"id":"doi:10.1145/3573834.3574541","is_oa":false,"landing_page_url":"http://dx.doi.org/10.1145/3573834.3574541","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the 4th International Conference on Advanced Information Science and System","raw_type":"proceedings-article"},"type":"conference-paper","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5034467509","display_name":"Yuhan Li","orcid":"https://orcid.org/0000-0001-5487-4676"},"institutions":[{"id":"https://openalex.org/I152033890","display_name":"Hainan Normal University","ror":"https://ror.org/031dhcv14","country_code":"CN","type":"education","lineage":["https://openalex.org/I152033890"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Yuhan Li","raw_affiliation_strings":["Hainan Normal University, China"],"raw_orcid":"https://orcid.org/0000-0001-5487-4676","affiliations":[{"raw_affiliation_string":"Hainan Normal University, China","institution_ids":["https://openalex.org/I152033890"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5028289223","display_name":"Bin Wen","orcid":"https://orcid.org/0000-0002-3665-4730"},"institutions":[{"id":"https://openalex.org/I152033890","display_name":"Hainan Normal University","ror":"https://ror.org/031dhcv14","country_code":"CN","type":"education","lineage":["https://openalex.org/I152033890"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Bin Wen","raw_affiliation_strings":["Hainan Normal University, China"],"raw_orcid":"https://orcid.org/0000-0002-3665-4730","affiliations":[{"raw_affiliation_string":"Hainan Normal University, China","institution_ids":["https://openalex.org/I152033890"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5052915898","display_name":"Haixiao Zheng","orcid":"https://orcid.org/0000-0003-0809-928X"},"institutions":[{"id":"https://openalex.org/I152033890","display_name":"Hainan Normal University","ror":"https://ror.org/031dhcv14","country_code":"CN","type":"education","lineage":["https://openalex.org/I152033890"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Haixiao Zheng","raw_affiliation_strings":["Hainan Normal University, China"],"raw_orcid":"https://orcid.org/0000-0003-0809-928X","affiliations":[{"raw_affiliation_string":"Hainan Normal University, China","institution_ids":["https://openalex.org/I152033890"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":1,"corresponding_author_ids":[],"corresponding_institution_ids":["https://openalex.org/I152033890"],"apc_list":null,"apc_paid":null,"fwci":null,"has_fulltext":false,"cited_by_count":2,"citation_normalized_percentile":null,"cited_by_percentile_year":null,"biblio":{"volume":null,"issue":null,"first_page":"1","last_page":"6"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":1.0,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":1.0,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10743","display_name":"Software Testing and Debugging Techniques","score":0.9980999827384949,"subfield":{"id":"https://openalex.org/subfields/1712","display_name":"Software"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":0.9825999736785889,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.873478889465332},{"id":"https://openalex.org/keywords/software-portability","display_name":"Software portability","score":0.8065446615219116},{"id":"https://openalex.org/keywords/obfuscation","display_name":"Obfuscation","score":0.7878397703170776},{"id":"https://openalex.org/keywords/malware","display_name":"Malware","score":0.5932340025901794},{"id":"https://openalex.org/keywords/architecture","display_name":"Architecture","score":0.5357685685157776},{"id":"https://openalex.org/keywords/symbolic-execution","display_name":"Symbolic execution","score":0.44000160694122314},{"id":"https://openalex.org/keywords/software-engineering","display_name":"Software engineering","score":0.4006502032279968},{"id":"https://openalex.org/keywords/embedded-system","display_name":"Embedded system","score":0.34042179584503174},{"id":"https://openalex.org/keywords/programming-language","display_name":"Programming language","score":0.32839566469192505},{"id":"https://openalex.org/keywords/operating-system","display_name":"Operating system","score":0.23565441370010376},{"id":"https://openalex.org/keywords/software","display_name":"Software","score":0.17645680904388428},{"id":"https://openalex.org/keywords/computer-security","display_name":"Computer security","score":0.16243749856948853}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.873478889465332},{"id":"https://openalex.org/C63000827","wikidata":"https://www.wikidata.org/wiki/Q3080428","display_name":"Software portability","level":2,"score":0.8065446615219116},{"id":"https://openalex.org/C40305131","wikidata":"https://www.wikidata.org/wiki/Q2616305","display_name":"Obfuscation","level":2,"score":0.7878397703170776},{"id":"https://openalex.org/C541664917","wikidata":"https://www.wikidata.org/wiki/Q14001","display_name":"Malware","level":2,"score":0.5932340025901794},{"id":"https://openalex.org/C123657996","wikidata":"https://www.wikidata.org/wiki/Q12271","display_name":"Architecture","level":2,"score":0.5357685685157776},{"id":"https://openalex.org/C2779639559","wikidata":"https://www.wikidata.org/wiki/Q7661178","display_name":"Symbolic execution","level":3,"score":0.44000160694122314},{"id":"https://openalex.org/C115903868","wikidata":"https://www.wikidata.org/wiki/Q80993","display_name":"Software engineering","level":1,"score":0.4006502032279968},{"id":"https://openalex.org/C149635348","wikidata":"https://www.wikidata.org/wiki/Q193040","display_name":"Embedded system","level":1,"score":0.34042179584503174},{"id":"https://openalex.org/C199360897","wikidata":"https://www.wikidata.org/wiki/Q9143","display_name":"Programming language","level":1,"score":0.32839566469192505},{"id":"https://openalex.org/C111919701","wikidata":"https://www.wikidata.org/wiki/Q9135","display_name":"Operating system","level":1,"score":0.23565441370010376},{"id":"https://openalex.org/C2777904410","wikidata":"https://www.wikidata.org/wiki/Q7397","display_name":"Software","level":2,"score":0.17645680904388428},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.16243749856948853},{"id":"https://openalex.org/C153349607","wikidata":"https://www.wikidata.org/wiki/Q36649","display_name":"Visual arts","level":1,"score":0.0},{"id":"https://openalex.org/C142362112","wikidata":"https://www.wikidata.org/wiki/Q735","display_name":"Art","level":0,"score":0.0}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1145/3573834.3574541","is_oa":false,"landing_page_url":"http://dx.doi.org/10.1145/3573834.3574541","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the 4th International Conference on Advanced Information Science and System","raw_type":"proceedings-article"}],"best_oa_location":null,"sustainable_development_goals":[{"id":"https://metadata.un.org/sdg/9","score":0.4300000071525574,"display_name":"Industry, innovation and infrastructure"}],"awards":[{"id":"https://openalex.org/G2180940738","display_name":null,"funder_award_id":"No.61562024","funder_id":"https://openalex.org/F4320321001","funder_display_name":"National Natural Science Foundation of China"}],"funders":[{"id":"https://openalex.org/F4320321001","display_name":"National Natural Science Foundation of China","ror":"https://ror.org/01h0zpd94"}],"has_content":{"pdf":false,"grobid_xml":false},"content_urls":null,"referenced_works_count":13,"referenced_works":["https://openalex.org/W229745036","https://openalex.org/W2101512909","https://openalex.org/W2160756430","https://openalex.org/W2296669295","https://openalex.org/W2514974017","https://openalex.org/W2884512978","https://openalex.org/W2902238216","https://openalex.org/W2985391551","https://openalex.org/W3155297957","https://openalex.org/W3214947263","https://openalex.org/W4200620451","https://openalex.org/W4225307110","https://openalex.org/W4255128646"],"related_works":["https://openalex.org/W2620652965","https://openalex.org/W2024170198","https://openalex.org/W4296272594","https://openalex.org/W2900526031","https://openalex.org/W2728713145","https://openalex.org/W2470502009","https://openalex.org/W2131332603","https://openalex.org/W2072617132","https://openalex.org/W4360993664","https://openalex.org/W2465235098"],"abstract_inverted_index":{"Nowadays,":[0],"the":[1,36,55],"O-LLVM":[2,29],"obfuscation":[3,30],"framework":[4,25,56],"makes":[5],"it":[6],"difficult":[7],"to":[8],"analyze":[9],"various":[10],"types":[11],"of":[12,38],"malware.":[13],"To":[14],"address":[15],"this":[16,18],"problem,":[17],"paper":[19],"proposes":[20],"a":[21],"multi-architecture":[22],"automated":[23],"deobfuscation":[24,46,59],"GOAMD":[26],"specifically":[27],"for":[28],"technology,":[31],"which":[32],"can":[33],"intelligently":[34],"identify":[35],"differences":[37],"programs":[39],"on":[40,48],"different":[41],"architectures":[42],"and":[43,61],"perform":[44],"targeted":[45],"work":[47],"them.":[49],"The":[50],"experimental":[51],"results":[52],"show":[53],"that":[54],"has":[57],"high":[58],"accuracy":[60],"portability.":[62]},"counts_by_year":[{"year":2026,"cited_by_count":2}],"updated_date":"2026-07-14T23:27:15.235271","created_date":"2025-10-10T00:00:00"}