{"id":"https://openalex.org/W4416549547","doi":"https://doi.org/10.1145/3719027.3744828","title":"<scp>Disa</scp> : Accurate Learning-based Static Disassembly with Attentions","display_name":"<scp>Disa</scp> : Accurate Learning-based Static Disassembly with Attentions","publication_year":2025,"publication_date":"2025-11-19","ids":{"openalex":"https://openalex.org/W4416549547","doi":"https://doi.org/10.1145/3719027.3744828"},"language":null,"primary_location":{"id":"doi:10.1145/3719027.3744828","is_oa":false,"landing_page_url":"https://doi.org/10.1145/3719027.3744828","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the 2025 ACM SIGSAC Conference on Computer and Communications Security","raw_type":"proceedings-article"},"type":"conference-paper","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5058801623","display_name":"P Wang","orcid":"https://orcid.org/0009-0009-3024-6371"},"institutions":[{"id":"https://openalex.org/I149594827","display_name":"Xidian University","ror":"https://ror.org/05s92vm98","country_code":"CN","type":"education","lineage":["https://openalex.org/I149594827"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Peicheng Wang","raw_affiliation_strings":["Xidian University, Xi'an, Shaanxi, China"],"raw_orcid":"https://orcid.org/0009-0009-3024-6371","affiliations":[{"raw_affiliation_string":"Xidian University, Xi'an, Shaanxi, China","institution_ids":["https://openalex.org/I149594827"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5090379252","display_name":"Monika Santra","orcid":"https://orcid.org/0000-0001-6219-6545"},"institutions":[{"id":"https://openalex.org/I130769515","display_name":"Pennsylvania State University","ror":"https://ror.org/04p491231","country_code":"US","type":"education","lineage":["https://openalex.org/I130769515"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Monika Santra","raw_affiliation_strings":["The Pennsylvania State University, University Park, PA, USA"],"raw_orcid":"https://orcid.org/0000-0001-6219-6545","affiliations":[{"raw_affiliation_string":"The Pennsylvania State University, University Park, PA, USA","institution_ids":["https://openalex.org/I130769515"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5036009549","display_name":"Mingyu Liu","orcid":"https://orcid.org/0009-0004-8234-177X"},"institutions":[{"id":"https://openalex.org/I149594827","display_name":"Xidian University","ror":"https://ror.org/05s92vm98","country_code":"CN","type":"education","lineage":["https://openalex.org/I149594827"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Mingyu Liu","raw_affiliation_strings":["Xidian University, Xi'an, Shaanxi, China"],"raw_orcid":"https://orcid.org/0009-0004-8234-177X","affiliations":[{"raw_affiliation_string":"Xidian University, Xi'an, Shaanxi, China","institution_ids":["https://openalex.org/I149594827"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5058987076","display_name":"Cong Sun","orcid":"https://orcid.org/0000-0001-9116-2694"},"institutions":[{"id":"https://openalex.org/I149594827","display_name":"Xidian University","ror":"https://ror.org/05s92vm98","country_code":"CN","type":"education","lineage":["https://openalex.org/I149594827"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Cong Sun","raw_affiliation_strings":["Xidian University, Xi'an, Shaanxi, China"],"raw_orcid":"https://orcid.org/0000-0001-9116-2694","affiliations":[{"raw_affiliation_string":"Xidian University, Xi'an, Shaanxi, China","institution_ids":["https://openalex.org/I149594827"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5068257433","display_name":"Dongrui Zeng","orcid":"https://orcid.org/0000-0003-0032-2571"},"institutions":[{"id":"https://openalex.org/I4210108451","display_name":"Palo Alto Networks (United States)","ror":"https://ror.org/01rn6rn86","country_code":"US","type":"company","lineage":["https://openalex.org/I4210108451"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Dongrui Zeng","raw_affiliation_strings":["Palo Alto Networks, Inc., Santa Clara, CA, USA"],"raw_orcid":"https://orcid.org/0000-0003-0032-2571","affiliations":[{"raw_affiliation_string":"Palo Alto Networks, Inc., Santa Clara, CA, USA","institution_ids":["https://openalex.org/I4210108451"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5010830558","display_name":"Gang Tan","orcid":"https://orcid.org/0000-0001-6109-6091"},"institutions":[{"id":"https://openalex.org/I130769515","display_name":"Pennsylvania State University","ror":"https://ror.org/04p491231","country_code":"US","type":"education","lineage":["https://openalex.org/I130769515"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Gang Tan","raw_affiliation_strings":["The Pennsylvania State University, University Park, PA, USA"],"raw_orcid":"https://orcid.org/0000-0001-6109-6091","affiliations":[{"raw_affiliation_string":"The Pennsylvania State University, University Park, PA, USA","institution_ids":["https://openalex.org/I130769515"]}]}],"institutions":[],"countries_distinct_count":2,"institutions_distinct_count":3,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":1.5151,"has_fulltext":false,"cited_by_count":1,"citation_normalized_percentile":{"value":0.84578696,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":{"min":94,"max":97},"biblio":{"volume":null,"issue":null,"first_page":"843","last_page":"857"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T12122","display_name":"Physical Unclonable Functions (PUFs) and Hardware Security","score":0.3573000133037567,"subfield":{"id":"https://openalex.org/subfields/1708","display_name":"Hardware and Architecture"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T12122","display_name":"Physical Unclonable Functions (PUFs) and Hardware Security","score":0.3573000133037567,"subfield":{"id":"https://openalex.org/subfields/1708","display_name":"Hardware and Architecture"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":0.29030001163482666,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11424","display_name":"Security and Verification in Computing","score":0.17790000140666962,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/block","display_name":"Block (permutation group theory)","score":0.5738999843597412},{"id":"https://openalex.org/keywords/heuristics","display_name":"Heuristics","score":0.5687999725341797},{"id":"https://openalex.org/keywords/reverse-engineering","display_name":"Reverse engineering","score":0.5415999889373779},{"id":"https://openalex.org/keywords/function","display_name":"Function (biology)","score":0.4941999912261963},{"id":"https://openalex.org/keywords/reduction","display_name":"Reduction (mathematics)","score":0.3862000107765198},{"id":"https://openalex.org/keywords/binary-number","display_name":"Binary number","score":0.36340001225471497}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.7361000180244446},{"id":"https://openalex.org/C2777210771","wikidata":"https://www.wikidata.org/wiki/Q4927124","display_name":"Block (permutation group theory)","level":2,"score":0.5738999843597412},{"id":"https://openalex.org/C127705205","wikidata":"https://www.wikidata.org/wiki/Q5748245","display_name":"Heuristics","level":2,"score":0.5687999725341797},{"id":"https://openalex.org/C207850805","wikidata":"https://www.wikidata.org/wiki/Q269608","display_name":"Reverse engineering","level":2,"score":0.5415999889373779},{"id":"https://openalex.org/C14036430","wikidata":"https://www.wikidata.org/wiki/Q3736076","display_name":"Function (biology)","level":2,"score":0.4941999912261963},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.445499986410141},{"id":"https://openalex.org/C111335779","wikidata":"https://www.wikidata.org/wiki/Q3454686","display_name":"Reduction (mathematics)","level":2,"score":0.3862000107765198},{"id":"https://openalex.org/C48372109","wikidata":"https://www.wikidata.org/wiki/Q3913","display_name":"Binary number","level":2,"score":0.36340001225471497},{"id":"https://openalex.org/C108583219","wikidata":"https://www.wikidata.org/wiki/Q197536","display_name":"Deep learning","level":2,"score":0.3240000009536743},{"id":"https://openalex.org/C119857082","wikidata":"https://www.wikidata.org/wiki/Q2539","display_name":"Machine learning","level":1,"score":0.31779998540878296},{"id":"https://openalex.org/C95713431","wikidata":"https://www.wikidata.org/wiki/Q631425","display_name":"Vulnerability (computing)","level":2,"score":0.3140999972820282},{"id":"https://openalex.org/C160191386","wikidata":"https://www.wikidata.org/wiki/Q868299","display_name":"Control flow","level":2,"score":0.2741999924182892},{"id":"https://openalex.org/C124101348","wikidata":"https://www.wikidata.org/wiki/Q172491","display_name":"Data mining","level":1,"score":0.2637999951839447},{"id":"https://openalex.org/C2780801425","wikidata":"https://www.wikidata.org/wiki/Q5164392","display_name":"Construct (python library)","level":2,"score":0.26109999418258667},{"id":"https://openalex.org/C187455244","wikidata":"https://www.wikidata.org/wiki/Q942353","display_name":"Boolean function","level":2,"score":0.2540999948978424}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1145/3719027.3744828","is_oa":false,"landing_page_url":"https://doi.org/10.1145/3719027.3744828","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the 2025 ACM SIGSAC Conference on Computer and Communications Security","raw_type":"proceedings-article"}],"best_oa_location":null,"sustainable_development_goals":[],"awards":[{"id":"https://openalex.org/G7087208236","display_name":null,"funder_award_id":"62272366","funder_id":"https://openalex.org/F4320321001","funder_display_name":"National Natural Science Foundation of China"}],"funders":[{"id":"https://openalex.org/F4320321001","display_name":"National Natural Science Foundation of China","ror":"https://ror.org/01h0zpd94"}],"has_content":{"pdf":false,"grobid_xml":false},"content_urls":null,"referenced_works_count":20,"referenced_works":["https://openalex.org/W22858107","https://openalex.org/W2012737144","https://openalex.org/W2514974017","https://openalex.org/W2516933175","https://openalex.org/W2583316335","https://openalex.org/W2946130184","https://openalex.org/W2953598967","https://openalex.org/W2963125488","https://openalex.org/W3133719257","https://openalex.org/W3139338820","https://openalex.org/W3153698034","https://openalex.org/W3156018547","https://openalex.org/W3166956180","https://openalex.org/W3194813479","https://openalex.org/W4200070817","https://openalex.org/W4220931352","https://openalex.org/W4286532393","https://openalex.org/W4385080279","https://openalex.org/W4385187234","https://openalex.org/W4411337876"],"related_works":[],"abstract_inverted_index":{"For":[0],"reverse":[1],"engineering":[2],"related":[3],"security":[4],"domains,":[5],"such":[6],"as":[7],"vulnerability":[8],"detection,":[9],"malware":[10],"analysis,":[11],"and":[12,29,38,48,71,109,156,169],"binary":[13,54],"hardening,":[14],"disassembly":[15,24,60,84,147,166],"is":[16,25,55],"crucial":[17],"yet":[18],"challenging.":[19],"The":[20],"fundamental":[21],"challenge":[22],"of":[23,59,73,90],"to":[26,41,97,105,118,122],"identify":[27,115],"instruction":[28,110],"function":[30,107,150],"boundaries.":[31,111],"Classic":[32],"approaches":[33,148],"rely":[34],"on":[35,160],"file-format":[36],"assumptions":[37],"architecture-specific":[39],"heuristics":[40],"guess":[42],"the":[43,53,69,88,94,99,165,179,200],"boundaries,":[44],"resulting":[45],"in":[46,149,178,192],"incomplete":[47],"incorrect":[49],"disassembly,":[50],"especially":[51,153],"when":[52],"obfuscated.":[56],"Recent":[57],"advancements":[58],"have":[61],"demonstrated":[62],"that":[63,86,142],"deep":[64],"learning":[65],"can":[66,113],"improve":[67],"both":[68],"accuracy":[70],"efficiency":[72],"disassembly.":[74],"In":[75],"this":[76],"paper,":[77],"we":[78],"propose":[79],"Disa,":[80],"a":[81,189],"new":[82],"learning-based":[83],"approach":[85],"uses":[87],"information":[89],"superset":[91],"instructions":[92,116],"over":[93],"multi-head":[95],"self-attention":[96],"learn":[98],"instructions'":[100],"correlations,":[101],"thus":[102],"being":[103],"able":[104],"infer":[106],"entry-points":[108],"Disa":[112,143,183],"further":[114],"relevant":[117],"memory":[119,180],"block":[120,181],"boundaries":[121],"facilitate":[123],"an":[124,132,175],"advanced":[125],"block-memory":[126],"model":[127],"based":[128],"value-set":[129],"analysis":[130],"for":[131],"accurate":[133,186],"control":[134],"flow":[135],"graph":[136],"(CFG)":[137],"generation.":[138],"Our":[139],"experiments":[140],"show":[141],"outperforms":[144],"prior":[145],"deep-learning":[146],"entry-point":[151],"identification,":[152],"achieving":[154,174],"9.1%":[155],"13.2%":[157],"F1-score":[158],"improvement":[159,177],"binaries":[161],"respectively":[162],"obfuscated":[163],"by":[164],"desynchronization":[167],"technique":[168],"popular":[170],"source-level":[171],"obfuscator.":[172],"By":[173],"18.5%":[176],"precision,":[182],"generates":[184],"more":[185],"CFGs":[187],"with":[188,199],"4.4%":[190],"reduction":[191],"Average":[193],"Indirect":[194],"Call":[195],"Targets":[196],"(AICT)":[197],"compared":[198],"state-of-the-art":[201],"heuristic-based":[202],"approach.":[203]},"counts_by_year":[{"year":2026,"cited_by_count":1}],"updated_date":"2026-07-29T14:22:42.915294","created_date":"2025-11-23T00:00:00"}