{"id":"https://openalex.org/W4409311751","doi":"https://doi.org/10.1145/3720415","title":"Binary Cryptographic Function Identification via Similarity Analysis with Path-Insensitive Emulation","display_name":"Binary Cryptographic Function Identification via Similarity Analysis with Path-Insensitive Emulation","publication_year":2025,"publication_date":"2025-04-09","ids":{"openalex":"https://openalex.org/W4409311751","doi":"https://doi.org/10.1145/3720415"},"language":"en","primary_location":{"id":"doi:10.1145/3720415","is_oa":true,"landing_page_url":"https://doi.org/10.1145/3720415","pdf_url":null,"source":{"id":"https://openalex.org/S4210216081","display_name":"Proceedings of the ACM on Programming Languages","issn_l":"2475-1421","issn":["2475-1421"],"is_oa":true,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310319798","host_organization_name":"Association for Computing Machinery","host_organization_lineage":["https://openalex.org/P4310319798"],"host_organization_lineage_names":["Association for Computing Machinery"],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the ACM on Programming Languages","raw_type":"journal-article"},"type":"article","indexed_in":["crossref"],"open_access":{"is_oa":true,"oa_status":"diamond","oa_url":"https://doi.org/10.1145/3720415","any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5072301618","display_name":"Yikun Hu","orcid":"https://orcid.org/0000-0002-2035-7176"},"institutions":[{"id":"https://openalex.org/I183067930","display_name":"Shanghai Jiao Tong University","ror":"https://ror.org/0220qvk04","country_code":"CN","type":"education","lineage":["https://openalex.org/I183067930"]},{"id":"https://openalex.org/I4210132990","display_name":"State Key Laboratory of Cryptology","ror":"https://ror.org/02pn5rj08","country_code":"CN","type":"government","lineage":["https://openalex.org/I4210132990"]}],"countries":["CN"],"is_corresponding":true,"raw_author_name":"Yikun Hu","raw_affiliation_strings":["Shanghai Jiao Tong University, Shanghai, China","State Key Laboratory of Cryptology, Beijing, China"],"raw_orcid":"https://orcid.org/0000-0002-2035-7176","affiliations":[{"raw_affiliation_string":"Shanghai Jiao Tong University, Shanghai, China","institution_ids":["https://openalex.org/I183067930"]},{"raw_affiliation_string":"State Key Laboratory of Cryptology, Beijing, China","institution_ids":["https://openalex.org/I4210132990"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5100308915","display_name":"Yituo He","orcid":null},"institutions":[{"id":"https://openalex.org/I183067930","display_name":"Shanghai Jiao Tong University","ror":"https://ror.org/0220qvk04","country_code":"CN","type":"education","lineage":["https://openalex.org/I183067930"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Yituo He","raw_affiliation_strings":["Shanghai Jiao Tong University, Shanghai, China"],"raw_orcid":"https://orcid.org/0009-0003-0563-9022","affiliations":[{"raw_affiliation_string":"Shanghai Jiao Tong University, Shanghai, China","institution_ids":["https://openalex.org/I183067930"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5102349696","display_name":"Wenyu He","orcid":null},"institutions":[{"id":"https://openalex.org/I183067930","display_name":"Shanghai Jiao Tong University","ror":"https://ror.org/0220qvk04","country_code":"CN","type":"education","lineage":["https://openalex.org/I183067930"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Wenyu He","raw_affiliation_strings":["Shanghai Jiao Tong University, Shanghai, China"],"raw_orcid":"https://orcid.org/0009-0009-9160-3889","affiliations":[{"raw_affiliation_string":"Shanghai Jiao Tong University, Shanghai, China","institution_ids":["https://openalex.org/I183067930"]}]},{"author_position":"middle","author":{"id":null,"display_name":"Haoran Li","orcid":"https://orcid.org/0009-0003-1538-107X"},"institutions":[{"id":"https://openalex.org/I183067930","display_name":"Shanghai Jiao Tong University","ror":"https://ror.org/0220qvk04","country_code":"CN","type":"education","lineage":["https://openalex.org/I183067930"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Haoran Li","raw_affiliation_strings":["Shanghai Jiao Tong University, Shanghai, China"],"raw_orcid":"https://orcid.org/0009-0003-1538-107X","affiliations":[{"raw_affiliation_string":"Shanghai Jiao Tong University, Shanghai, China","institution_ids":["https://openalex.org/I183067930"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5100945151","display_name":"Yubo Zhao","orcid":null},"institutions":[{"id":"https://openalex.org/I183067930","display_name":"Shanghai Jiao Tong University","ror":"https://ror.org/0220qvk04","country_code":"CN","type":"education","lineage":["https://openalex.org/I183067930"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Yubo Zhao","raw_affiliation_strings":["Shanghai Jiao Tong University, Shanghai, China"],"raw_orcid":"https://orcid.org/0009-0001-4505-0971","affiliations":[{"raw_affiliation_string":"Shanghai Jiao Tong University, Shanghai, China","institution_ids":["https://openalex.org/I183067930"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5100328264","display_name":"Shuai Wang","orcid":"https://orcid.org/0000-0002-0866-0308"},"institutions":[{"id":"https://openalex.org/I200769079","display_name":"Hong Kong University of Science and Technology","ror":"https://ror.org/00q4vv597","country_code":"HK","type":"education","lineage":["https://openalex.org/I200769079"]}],"countries":["HK"],"is_corresponding":false,"raw_author_name":"Shuai Wang","raw_affiliation_strings":["Hong Kong University of Science and Technology, Hong Kong, China"],"raw_orcid":"https://orcid.org/0000-0002-0866-0308","affiliations":[{"raw_affiliation_string":"Hong Kong University of Science and Technology, Hong Kong, China","institution_ids":["https://openalex.org/I200769079"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5008204306","display_name":"Dawu Gu","orcid":"https://orcid.org/0000-0002-0504-9538"},"institutions":[{"id":"https://openalex.org/I183067930","display_name":"Shanghai Jiao Tong University","ror":"https://ror.org/0220qvk04","country_code":"CN","type":"education","lineage":["https://openalex.org/I183067930"]},{"id":"https://openalex.org/I4210132990","display_name":"State Key Laboratory of Cryptology","ror":"https://ror.org/02pn5rj08","country_code":"CN","type":"government","lineage":["https://openalex.org/I4210132990"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Dawu Gu","raw_affiliation_strings":["Shanghai Jiao Tong University, Shanghai, China","State Key Laboratory of Cryptology, Beijing, China"],"raw_orcid":"https://orcid.org/0000-0002-0504-9538","affiliations":[{"raw_affiliation_string":"Shanghai Jiao Tong University, Shanghai, China","institution_ids":["https://openalex.org/I183067930"]},{"raw_affiliation_string":"State Key Laboratory of Cryptology, Beijing, China","institution_ids":["https://openalex.org/I4210132990"]}]}],"institutions":[],"countries_distinct_count":2,"institutions_distinct_count":7,"corresponding_author_ids":["https://openalex.org/A5072301618"],"corresponding_institution_ids":["https://openalex.org/I183067930","https://openalex.org/I4210132990"],"apc_list":null,"apc_paid":null,"fwci":0.0,"has_fulltext":false,"cited_by_count":0,"citation_normalized_percentile":{"value":0.07285107,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":null,"biblio":{"volume":"9","issue":"OOPSLA1","first_page":"28","last_page":"56"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":0.9998000264167786,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":0.9998000264167786,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11017","display_name":"Chaos-based Image/Signal Encryption","score":0.9990000128746033,"subfield":{"id":"https://openalex.org/subfields/1707","display_name":"Computer Vision and Pattern Recognition"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T12122","display_name":"Physical Unclonable Functions (PUFs) and Hardware Security","score":0.9984999895095825,"subfield":{"id":"https://openalex.org/subfields/1708","display_name":"Hardware and Architecture"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/emulation","display_name":"Emulation","score":0.8890246152877808},{"id":"https://openalex.org/keywords/cryptography","display_name":"Cryptography","score":0.6393834352493286},{"id":"https://openalex.org/keywords/identification","display_name":"Identification (biology)","score":0.6180503964424133},{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.5928763151168823},{"id":"https://openalex.org/keywords/similarity","display_name":"Similarity (geometry)","score":0.5543708205223083},{"id":"https://openalex.org/keywords/path","display_name":"Path (computing)","score":0.5463434457778931},{"id":"https://openalex.org/keywords/binary-number","display_name":"Binary number","score":0.48759928345680237},{"id":"https://openalex.org/keywords/function","display_name":"Function (biology)","score":0.4689198136329651},{"id":"https://openalex.org/keywords/theoretical-computer-science","display_name":"Theoretical computer science","score":0.3721156418323517},{"id":"https://openalex.org/keywords/algorithm","display_name":"Algorithm","score":0.3605746030807495},{"id":"https://openalex.org/keywords/mathematics","display_name":"Mathematics","score":0.26508066058158875},{"id":"https://openalex.org/keywords/arithmetic","display_name":"Arithmetic","score":0.20245862007141113},{"id":"https://openalex.org/keywords/computer-network","display_name":"Computer network","score":0.18287456035614014},{"id":"https://openalex.org/keywords/artificial-intelligence","display_name":"Artificial intelligence","score":0.17484351992607117},{"id":"https://openalex.org/keywords/biology","display_name":"Biology","score":0.10440242290496826},{"id":"https://openalex.org/keywords/psychology","display_name":"Psychology","score":0.07013571262359619},{"id":"https://openalex.org/keywords/genetics","display_name":"Genetics","score":0.0656948983669281}],"concepts":[{"id":"https://openalex.org/C149810388","wikidata":"https://www.wikidata.org/wiki/Q5374873","display_name":"Emulation","level":2,"score":0.8890246152877808},{"id":"https://openalex.org/C178489894","wikidata":"https://www.wikidata.org/wiki/Q8789","display_name":"Cryptography","level":2,"score":0.6393834352493286},{"id":"https://openalex.org/C116834253","wikidata":"https://www.wikidata.org/wiki/Q2039217","display_name":"Identification (biology)","level":2,"score":0.6180503964424133},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.5928763151168823},{"id":"https://openalex.org/C103278499","wikidata":"https://www.wikidata.org/wiki/Q254465","display_name":"Similarity (geometry)","level":3,"score":0.5543708205223083},{"id":"https://openalex.org/C2777735758","wikidata":"https://www.wikidata.org/wiki/Q817765","display_name":"Path (computing)","level":2,"score":0.5463434457778931},{"id":"https://openalex.org/C48372109","wikidata":"https://www.wikidata.org/wiki/Q3913","display_name":"Binary number","level":2,"score":0.48759928345680237},{"id":"https://openalex.org/C14036430","wikidata":"https://www.wikidata.org/wiki/Q3736076","display_name":"Function (biology)","level":2,"score":0.4689198136329651},{"id":"https://openalex.org/C80444323","wikidata":"https://www.wikidata.org/wiki/Q2878974","display_name":"Theoretical computer science","level":1,"score":0.3721156418323517},{"id":"https://openalex.org/C11413529","wikidata":"https://www.wikidata.org/wiki/Q8366","display_name":"Algorithm","level":1,"score":0.3605746030807495},{"id":"https://openalex.org/C33923547","wikidata":"https://www.wikidata.org/wiki/Q395","display_name":"Mathematics","level":0,"score":0.26508066058158875},{"id":"https://openalex.org/C94375191","wikidata":"https://www.wikidata.org/wiki/Q11205","display_name":"Arithmetic","level":1,"score":0.20245862007141113},{"id":"https://openalex.org/C31258907","wikidata":"https://www.wikidata.org/wiki/Q1301371","display_name":"Computer network","level":1,"score":0.18287456035614014},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.17484351992607117},{"id":"https://openalex.org/C86803240","wikidata":"https://www.wikidata.org/wiki/Q420","display_name":"Biology","level":0,"score":0.10440242290496826},{"id":"https://openalex.org/C15744967","wikidata":"https://www.wikidata.org/wiki/Q9418","display_name":"Psychology","level":0,"score":0.07013571262359619},{"id":"https://openalex.org/C54355233","wikidata":"https://www.wikidata.org/wiki/Q7162","display_name":"Genetics","level":1,"score":0.0656948983669281},{"id":"https://openalex.org/C59822182","wikidata":"https://www.wikidata.org/wiki/Q441","display_name":"Botany","level":1,"score":0.0},{"id":"https://openalex.org/C115961682","wikidata":"https://www.wikidata.org/wiki/Q860623","display_name":"Image (mathematics)","level":2,"score":0.0},{"id":"https://openalex.org/C77805123","wikidata":"https://www.wikidata.org/wiki/Q161272","display_name":"Social psychology","level":1,"score":0.0}],"mesh":[],"locations_count":2,"locations":[{"id":"doi:10.1145/3720415","is_oa":true,"landing_page_url":"https://doi.org/10.1145/3720415","pdf_url":null,"source":{"id":"https://openalex.org/S4210216081","display_name":"Proceedings of the ACM on Programming Languages","issn_l":"2475-1421","issn":["2475-1421"],"is_oa":true,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310319798","host_organization_name":"Association for Computing Machinery","host_organization_lineage":["https://openalex.org/P4310319798"],"host_organization_lineage_names":["Association for Computing Machinery"],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the ACM on Programming Languages","raw_type":"journal-article"},{"id":"pmh:oai:repository.hkust.edu.hk:1783.1-160351","is_oa":false,"landing_page_url":"http://repository.hkust.edu.hk/ir/Record/1783.1-160351","pdf_url":null,"source":{"id":"https://openalex.org/S4306401796","display_name":"Rare & Special e-Zone (The Hong Kong University of Science and Technology)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I200769079","host_organization_name":"Hong Kong University of Science and Technology","host_organization_lineage":["https://openalex.org/I200769079"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"Article"}],"best_oa_location":{"id":"doi:10.1145/3720415","is_oa":true,"landing_page_url":"https://doi.org/10.1145/3720415","pdf_url":null,"source":{"id":"https://openalex.org/S4210216081","display_name":"Proceedings of the ACM on Programming Languages","issn_l":"2475-1421","issn":["2475-1421"],"is_oa":true,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310319798","host_organization_name":"Association for Computing Machinery","host_organization_lineage":["https://openalex.org/P4310319798"],"host_organization_lineage_names":["Association for Computing Machinery"],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the ACM on Programming Languages","raw_type":"journal-article"},"sustainable_development_goals":[],"awards":[],"funders":[],"has_content":{"grobid_xml":false,"pdf":false},"content_urls":null,"referenced_works_count":88,"referenced_works":["https://openalex.org/W126407768","https://openalex.org/W335512679","https://openalex.org/W614025954","https://openalex.org/W1538186256","https://openalex.org/W1599026900","https://openalex.org/W1942295288","https://openalex.org/W1964973129","https://openalex.org/W1965817476","https://openalex.org/W2007427290","https://openalex.org/W2009614414","https://openalex.org/W2021202955","https://openalex.org/W2027246608","https://openalex.org/W2027991598","https://openalex.org/W2034212539","https://openalex.org/W2041839827","https://openalex.org/W2047113058","https://openalex.org/W2047848881","https://openalex.org/W2049208027","https://openalex.org/W2065995359","https://openalex.org/W2080132708","https://openalex.org/W2082318969","https://openalex.org/W2112725702","https://openalex.org/W2114793359","https://openalex.org/W2157087583","https://openalex.org/W2246503224","https://openalex.org/W2516372287","https://openalex.org/W2532962075","https://openalex.org/W2547625248","https://openalex.org/W2577142429","https://openalex.org/W2602815560","https://openalex.org/W2612128870","https://openalex.org/W2670925489","https://openalex.org/W2731423391","https://openalex.org/W2732635930","https://openalex.org/W2742658207","https://openalex.org/W2768013588","https://openalex.org/W2771508098","https://openalex.org/W2886694146","https://openalex.org/W2888320512","https://openalex.org/W2891539454","https://openalex.org/W2926178846","https://openalex.org/W2945201871","https://openalex.org/W2963408280","https://openalex.org/W2963534336","https://openalex.org/W2969679621","https://openalex.org/W2984976544","https://openalex.org/W2993607863","https://openalex.org/W2997915791","https://openalex.org/W3014581084","https://openalex.org/W3044930318","https://openalex.org/W3093613244","https://openalex.org/W3127424491","https://openalex.org/W3139086893","https://openalex.org/W3148190347","https://openalex.org/W3153698034","https://openalex.org/W3154707155","https://openalex.org/W3159215149","https://openalex.org/W3162246136","https://openalex.org/W4205718835","https://openalex.org/W4214617101","https://openalex.org/W4231640108","https://openalex.org/W4232757557","https://openalex.org/W4236879474","https://openalex.org/W4240174344","https://openalex.org/W4242250251","https://openalex.org/W4244263539","https://openalex.org/W4247191937","https://openalex.org/W4247464060","https://openalex.org/W4251889484","https://openalex.org/W4283378019","https://openalex.org/W4285586654","https://openalex.org/W4293088712","https://openalex.org/W4307510779","https://openalex.org/W4313203541","https://openalex.org/W4324007217","https://openalex.org/W4376877399","https://openalex.org/W4384154511","https://openalex.org/W4389208916","https://openalex.org/W4390751813","https://openalex.org/W4391704400","https://openalex.org/W4393304206","https://openalex.org/W4394745954","https://openalex.org/W4402443222","https://openalex.org/W4402527729","https://openalex.org/W4403536423","https://openalex.org/W4404294248","https://openalex.org/W4407278800","https://openalex.org/W6967857810"],"related_works":["https://openalex.org/W2154523322","https://openalex.org/W2083200807","https://openalex.org/W1603137082","https://openalex.org/W2364195017","https://openalex.org/W2355430452","https://openalex.org/W1951195060","https://openalex.org/W2049983405","https://openalex.org/W2392315374","https://openalex.org/W2351776620","https://openalex.org/W2352195574"],"abstract_inverted_index":{"It":[0,80],"becomes":[1],"an":[2],"essential":[3],"requirement":[4],"to":[5,12,40,73,121,170],"identify":[6,74],"cryptographic":[7,75,145],"functions":[8,76],"in":[9,16,77,103],"binaries":[10],"due":[11],"their":[13,53],"widespread":[14],"application":[15],"modern":[17],"software.":[18],"The":[19,147],"technology":[20],"fundamentally":[21],"supports":[22],"numerous":[23],"software":[24],"security":[25],"analyses,":[26],"such":[27],"as":[28,114],"malware":[29,185],"analysis,":[30,178,180,183,186],"blockchain":[31],"forensics,":[32],"etc.":[33],"Unfortunately,":[34],"the":[35,70,88,96,99,108,129,140,153,163,173],"existing":[36],"methods":[37],"still":[38],"struggle":[39],"strike":[41],"a":[42,62,104],"balance":[43],"between":[44],"analysis":[45,68],"accuracy,":[46],"efficiency,":[47],"and":[48,132,184],"code":[49,66,90,182],"coverage,":[50],"which":[51],"hampers":[52],"practical":[54,191],"application.":[55],"In":[56],"this":[57],"paper,":[58],"we":[59],"propose":[60],"BinCrypto,":[61],"method":[63],"of":[64,156,161],"emulation-based":[65],"similarity":[67],"on":[69,87],"interval":[71],"domain,":[72],"binary":[78],"files.":[79],"produces":[81],"accurate":[82],"results":[83,148],"because":[84],"it":[85,118],"relies":[86],"behavior-related":[89],"features":[91],"collected":[92],"during":[93],"emulation.":[94],"On":[95],"other":[97],"hand,":[98],"emulation":[100],"is":[101,119,167],"performed":[102],"path-insensitive":[105],"manner,":[106],"where":[107],"emulated":[109],"values":[110],"are":[111],"all":[112],"represented":[113],"intervals.":[115],"As":[116],"such,":[117],"able":[120,169],"analyze":[122],"every":[123],"basic":[124],"block":[125,135],"only":[126],"once,":[127],"accomplishing":[128],"identification":[130],"efficiently,":[131],"achieve":[133],"complete":[134,172],"coverage":[136],"simultaneously.":[137],"We":[138],"conduct":[139],"experiments":[141],"with":[142],"nine":[143],"real-world":[144],"libraries.":[146],"show":[149],"that":[150,160],"BinCrypto":[151,166],"achieves":[152],"average":[154],"accuracy":[155],"83.2%,":[157],"nearly":[158],"twice":[159],"WheresCrypto,":[162],"state-of-the-art":[164],"method.":[165],"also":[168],"successfully":[171],"tasks,":[174],"including":[175],"statically-linked":[176],"library":[177],"cross-library":[179],"obfuscated":[181],"demonstrating":[187],"its":[188],"potential":[189],"for":[190],"applications.":[192]},"counts_by_year":[],"updated_date":"2026-03-27T05:58:40.876381","created_date":"2025-10-10T00:00:00"}