{"id":"https://openalex.org/W4318541564","doi":"https://doi.org/10.1145/3575693.3575734","title":"Decker: Attack Surface Reduction via On-Demand Code Mapping","display_name":"Decker: Attack Surface Reduction via On-Demand Code Mapping","publication_year":2023,"publication_date":"2023-01-27","ids":{"openalex":"https://openalex.org/W4318541564","doi":"https://doi.org/10.1145/3575693.3575734"},"language":"en","primary_location":{"id":"doi:10.1145/3575693.3575734","is_oa":true,"landing_page_url":"https://doi.org/10.1145/3575693.3575734","pdf_url":"https://dl.acm.org/doi/pdf/10.1145/3575693.3575734","source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the 28th ACM International Conference on Architectural Support for Programming Languages and Operating Systems, Volume 2","raw_type":"proceedings-article"},"type":"conference-paper","indexed_in":["crossref"],"open_access":{"is_oa":true,"oa_status":"gold","oa_url":"https://dl.acm.org/doi/pdf/10.1145/3575693.3575734","any_repository_has_fulltext":null},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5049228142","display_name":"Chris Porter","orcid":"https://orcid.org/0000-0002-2821-2668"},"institutions":[{"id":"https://openalex.org/I130701444","display_name":"Georgia Institute of Technology","ror":"https://ror.org/01zkghx44","country_code":"US","type":"education","lineage":["https://openalex.org/I130701444"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Chris Porter","raw_affiliation_strings":["Georgia Institute of Technology, USA"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Georgia Institute of Technology, USA","institution_ids":["https://openalex.org/I130701444"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5009383888","display_name":"Sharjeel Khan","orcid":"https://orcid.org/0000-0002-4563-4619"},"institutions":[{"id":"https://openalex.org/I130701444","display_name":"Georgia Institute of Technology","ror":"https://ror.org/01zkghx44","country_code":"US","type":"education","lineage":["https://openalex.org/I130701444"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Sharjeel Khan","raw_affiliation_strings":["Georgia Institute of Technology, USA"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Georgia Institute of Technology, USA","institution_ids":["https://openalex.org/I130701444"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5061235810","display_name":"Santosh Pande","orcid":"https://orcid.org/0000-0001-6723-8062"},"institutions":[{"id":"https://openalex.org/I130701444","display_name":"Georgia Institute of Technology","ror":"https://ror.org/01zkghx44","country_code":"US","type":"education","lineage":["https://openalex.org/I130701444"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Santosh Pande","raw_affiliation_strings":["Georgia Institute of Technology, USA"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Georgia Institute of Technology, USA","institution_ids":["https://openalex.org/I130701444"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":1,"corresponding_author_ids":[],"corresponding_institution_ids":["https://openalex.org/I130701444"],"apc_list":null,"apc_paid":null,"fwci":0.4346,"has_fulltext":true,"cited_by_count":2,"citation_normalized_percentile":{"value":0.54291625,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":{"min":90,"max":95},"biblio":{"volume":null,"issue":null,"first_page":"192","last_page":"206"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11424","display_name":"Security and Verification in Computing","score":0.9998999834060669,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11424","display_name":"Security and Verification in Computing","score":0.9998999834060669,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":0.9998000264167786,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":0.9939000010490417,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/reduction","display_name":"Reduction (mathematics)","score":0.7851918339729309},{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.5932003855705261},{"id":"https://openalex.org/keywords/code","display_name":"Code (set theory)","score":0.5527420043945312},{"id":"https://openalex.org/keywords/attack-surface","display_name":"Attack surface","score":0.4855665862560272},{"id":"https://openalex.org/keywords/surface","display_name":"Surface (topology)","score":0.47626325488090515},{"id":"https://openalex.org/keywords/computer-security","display_name":"Computer security","score":0.3670876920223236},{"id":"https://openalex.org/keywords/programming-language","display_name":"Programming language","score":0.28050702810287476},{"id":"https://openalex.org/keywords/mathematics","display_name":"Mathematics","score":0.16770291328430176},{"id":"https://openalex.org/keywords/geometry","display_name":"Geometry","score":0.08378267288208008}],"concepts":[{"id":"https://openalex.org/C111335779","wikidata":"https://www.wikidata.org/wiki/Q3454686","display_name":"Reduction (mathematics)","level":2,"score":0.7851918339729309},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.5932003855705261},{"id":"https://openalex.org/C2776760102","wikidata":"https://www.wikidata.org/wiki/Q5139990","display_name":"Code (set theory)","level":3,"score":0.5527420043945312},{"id":"https://openalex.org/C2776576444","wikidata":"https://www.wikidata.org/wiki/Q303569","display_name":"Attack surface","level":2,"score":0.4855665862560272},{"id":"https://openalex.org/C2776799497","wikidata":"https://www.wikidata.org/wiki/Q484298","display_name":"Surface (topology)","level":2,"score":0.47626325488090515},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.3670876920223236},{"id":"https://openalex.org/C199360897","wikidata":"https://www.wikidata.org/wiki/Q9143","display_name":"Programming language","level":1,"score":0.28050702810287476},{"id":"https://openalex.org/C33923547","wikidata":"https://www.wikidata.org/wiki/Q395","display_name":"Mathematics","level":0,"score":0.16770291328430176},{"id":"https://openalex.org/C2524010","wikidata":"https://www.wikidata.org/wiki/Q8087","display_name":"Geometry","level":1,"score":0.08378267288208008},{"id":"https://openalex.org/C177264268","wikidata":"https://www.wikidata.org/wiki/Q1514741","display_name":"Set (abstract data type)","level":2,"score":0.0}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1145/3575693.3575734","is_oa":true,"landing_page_url":"https://doi.org/10.1145/3575693.3575734","pdf_url":"https://dl.acm.org/doi/pdf/10.1145/3575693.3575734","source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the 28th ACM International Conference on Architectural Support for Programming Languages and Operating Systems, Volume 2","raw_type":"proceedings-article"}],"best_oa_location":{"id":"doi:10.1145/3575693.3575734","is_oa":true,"landing_page_url":"https://doi.org/10.1145/3575693.3575734","pdf_url":"https://dl.acm.org/doi/pdf/10.1145/3575693.3575734","source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the 28th ACM International Conference on Architectural Support for Programming Languages and Operating Systems, Volume 2","raw_type":"proceedings-article"},"sustainable_development_goals":[],"awards":[{"id":"https://openalex.org/G4504108201","display_name":null,"funder_award_id":"N00014-17-1","funder_id":"https://openalex.org/F4320337345","funder_display_name":"Office of Naval Research"},{"id":"https://openalex.org/G8568027321","display_name":null,"funder_award_id":"N00014-17-1-2895","funder_id":"https://openalex.org/F4320337345","funder_display_name":"Office of Naval Research"},{"id":"https://openalex.org/G8876996369","display_name":null,"funder_award_id":"N00014","funder_id":"https://openalex.org/F4320337345","funder_display_name":"Office of Naval Research"},{"id":"https://openalex.org/G8929337198","display_name":null,"funder_award_id":"N00014-17","funder_id":"https://openalex.org/F4320337345","funder_display_name":"Office of Naval Research"}],"funders":[{"id":"https://openalex.org/F4320337345","display_name":"Office of Naval Research","ror":"https://ror.org/00rk2pe57"}],"has_content":{"grobid_xml":true,"pdf":true},"content_urls":{"pdf":"https://content.openalex.org/works/W4318541564.pdf","grobid_xml":"https://content.openalex.org/works/W4318541564.grobid-xml"},"referenced_works_count":46,"referenced_works":["https://openalex.org/W1538332098","https://openalex.org/W1576911972","https://openalex.org/W1963947298","https://openalex.org/W1969031936","https://openalex.org/W1969501726","https://openalex.org/W1974608873","https://openalex.org/W1990535818","https://openalex.org/W1993682390","https://openalex.org/W1993736952","https://openalex.org/W1996931407","https://openalex.org/W2008015263","https://openalex.org/W2015083179","https://openalex.org/W2052951836","https://openalex.org/W2069568053","https://openalex.org/W2072102701","https://openalex.org/W2074943483","https://openalex.org/W2080313875","https://openalex.org/W2098010707","https://openalex.org/W2101857770","https://openalex.org/W2109219878","https://openalex.org/W2133638476","https://openalex.org/W2138517425","https://openalex.org/W2162800072","https://openalex.org/W2167753650","https://openalex.org/W2170927924","https://openalex.org/W2185533280","https://openalex.org/W2341864083","https://openalex.org/W2516933175","https://openalex.org/W2584029330","https://openalex.org/W2612418998","https://openalex.org/W2612611921","https://openalex.org/W2888445849","https://openalex.org/W2891196279","https://openalex.org/W2891688103","https://openalex.org/W2921892740","https://openalex.org/W2953977010","https://openalex.org/W2969354474","https://openalex.org/W3025058513","https://openalex.org/W3033425067","https://openalex.org/W3106588244","https://openalex.org/W3106633543","https://openalex.org/W3206829200","https://openalex.org/W4242926647","https://openalex.org/W4246166885","https://openalex.org/W4283826179","https://openalex.org/W4302343751"],"related_works":["https://openalex.org/W4390097497","https://openalex.org/W4382046111","https://openalex.org/W2935154965","https://openalex.org/W3009153228","https://openalex.org/W2536179434","https://openalex.org/W1929087753","https://openalex.org/W3152571439","https://openalex.org/W3083937200","https://openalex.org/W3080294124","https://openalex.org/W3041847967"],"abstract_inverted_index":{"Modern":[0],"code":[1,20,29,77],"reuse":[2,78],"attacks":[3,114],"take":[4],"full":[5],"advantage":[6],"of":[7,15,37,41,52,69,76,92,139,162],"bloated":[8],"software.":[9],"Attackers":[10],"piece":[11],"together":[12],"short":[13],"sequences":[14],"instructions":[16],"in":[17],"otherwise":[18],"benign":[19],"to":[21,111,127],"carry":[22],"out":[23],"malicious":[24],"actions.":[25],"Mitigating":[26],"these":[27],"reusable":[28],"snippets,":[30],"known":[31],"as":[32],"gadgets,":[33,57],"has":[34],"become":[35],"one":[36],"the":[38,74,118,137,142],"prime":[39],"focuses":[40],"attack":[42,163],"surface":[43,105,164],"reduction":[44,106],"research.":[45],"While":[46],"some":[47],"debloating":[48],"techniques":[49,96,134],"remove":[50],"parts":[51],"software":[53,143],"that":[54,99],"contain":[55],"such":[56,113,133],"other":[58],"methods":[59],"focus":[60],"on":[61,149],"making":[62],"them":[63],"unusable":[64],"by":[65,115],"breaking":[66],"up":[67],"chains":[68],"them,":[70],"thereby":[71],"substantially":[72],"diminishing":[73],"possibility":[75],"attacks.":[79],"Third-party":[80],"libraries":[81],"are":[82],"another":[83],"main":[84],"focus,":[85],"because":[86],"they":[87,153],"exhibit":[88],"a":[89,159],"high":[90,129],"number":[91],"vulnerabilities,":[93],"but":[94],"recently,":[95],"have":[97,108],"emerged":[98],"deal":[100],"with":[101],"whole":[102],"applications.":[103],"Attack":[104],"efforts":[107],"typically":[109],"tried":[110],"eliminate":[112],"subsetting":[116],"(debloating)":[117],"application,":[119],"e.g.":[120],"via":[121],"user-specified":[122],"inputs,":[123,151],"configurations,":[124],"or":[125,152],"features":[126],"achieve":[128],"gadget":[130],"reductions.":[131],"However,":[132],"suffer":[135],"from":[136],"limitations":[138],"soundness,":[140],"i.e.":[141],"might":[144],"crash":[145],"during":[146],"no-attack":[147],"executions":[148],"regular":[150],"may":[154],"be":[155],"conservative":[156],"and":[157],"leave":[158],"large":[160],"amount":[161],"untackled.":[165]},"counts_by_year":[{"year":2025,"cited_by_count":1},{"year":2024,"cited_by_count":1}],"updated_date":"2026-07-31T08:31:51.225901","created_date":"2025-10-10T00:00:00"}
