{"id":"https://openalex.org/W4411523006","doi":"https://doi.org/10.1145/3728982","title":"ICEPRE: ICS Protocol Reverse Engineering via Data-Driven Concolic Execution","display_name":"ICEPRE: ICS Protocol Reverse Engineering via Data-Driven Concolic Execution","publication_year":2025,"publication_date":"2025-06-22","ids":{"openalex":"https://openalex.org/W4411523006","doi":"https://doi.org/10.1145/3728982"},"language":"en","primary_location":{"id":"doi:10.1145/3728982","is_oa":true,"landing_page_url":"https://doi.org/10.1145/3728982","pdf_url":null,"source":{"id":"https://openalex.org/S4404663975","display_name":"Proceedings of the ACM on software engineering.","issn_l":"2994-970X","issn":["2994-970X"],"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/P4310319798","host_organization_name":"Association for Computing Machinery","host_organization_lineage":["https://openalex.org/P4310319798"],"host_organization_lineage_names":["Association for Computing Machinery"],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the ACM on Software Engineering","raw_type":"journal-article"},"type":"article","indexed_in":["crossref"],"open_access":{"is_oa":true,"oa_status":"hybrid","oa_url":"https://doi.org/10.1145/3728982","any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":null,"display_name":"Yibo Qu","orcid":"https://orcid.org/0009-0000-1137-9800"},"institutions":[{"id":"https://openalex.org/I19820366","display_name":"Chinese Academy of Sciences","ror":"https://ror.org/034t30j35","country_code":"CN","type":"government","lineage":["https://openalex.org/I19820366"]},{"id":"https://openalex.org/I4210156404","display_name":"Institute of Information Engineering","ror":"https://ror.org/04r53se39","country_code":"CN","type":"facility","lineage":["https://openalex.org/I19820366","https://openalex.org/I4210156404"]},{"id":"https://openalex.org/I4210165038","display_name":"University of Chinese Academy of Sciences","ror":"https://ror.org/05qbk4x57","country_code":"CN","type":"education","lineage":["https://openalex.org/I19820366","https://openalex.org/I4210165038"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Yibo Qu","raw_affiliation_strings":["Institute of Information Engineering at Chinese Academy of Sciences, Beijing, China","University of Chinese Academy of Sciences, Beijing, China"],"raw_orcid":"https://orcid.org/0009-0000-1137-9800","affiliations":[{"raw_affiliation_string":"Institute of Information Engineering at Chinese Academy of Sciences, Beijing, China","institution_ids":["https://openalex.org/I4210156404","https://openalex.org/I19820366"]},{"raw_affiliation_string":"University of Chinese Academy of Sciences, Beijing, China","institution_ids":["https://openalex.org/I4210165038"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5071831111","display_name":"Dongliang Fang","orcid":"https://orcid.org/0009-0005-7484-1333"},"institutions":[{"id":"https://openalex.org/I19820366","display_name":"Chinese Academy of Sciences","ror":"https://ror.org/034t30j35","country_code":"CN","type":"government","lineage":["https://openalex.org/I19820366"]},{"id":"https://openalex.org/I4210156404","display_name":"Institute of Information Engineering","ror":"https://ror.org/04r53se39","country_code":"CN","type":"facility","lineage":["https://openalex.org/I19820366","https://openalex.org/I4210156404"]},{"id":"https://openalex.org/I4210165038","display_name":"University of Chinese Academy of Sciences","ror":"https://ror.org/05qbk4x57","country_code":"CN","type":"education","lineage":["https://openalex.org/I19820366","https://openalex.org/I4210165038"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Dongliang Fang","raw_affiliation_strings":["Institute of Information Engineering at Chinese Academy of Sciences, Beijing, China","University of Chinese Academy of Sciences, Beijing, China"],"raw_orcid":"https://orcid.org/0009-0005-7484-1333","affiliations":[{"raw_affiliation_string":"Institute of Information Engineering at Chinese Academy of Sciences, Beijing, China","institution_ids":["https://openalex.org/I4210156404","https://openalex.org/I19820366"]},{"raw_affiliation_string":"University of Chinese Academy of Sciences, Beijing, China","institution_ids":["https://openalex.org/I4210165038"]}]},{"author_position":"middle","author":{"id":null,"display_name":"Zhen Wang","orcid":"https://orcid.org/0009-0009-9919-4653"},"institutions":[{"id":"https://openalex.org/I19820366","display_name":"Chinese Academy of Sciences","ror":"https://ror.org/034t30j35","country_code":"CN","type":"government","lineage":["https://openalex.org/I19820366"]},{"id":"https://openalex.org/I4210156404","display_name":"Institute of Information Engineering","ror":"https://ror.org/04r53se39","country_code":"CN","type":"facility","lineage":["https://openalex.org/I19820366","https://openalex.org/I4210156404"]},{"id":"https://openalex.org/I4210165038","display_name":"University of Chinese Academy of Sciences","ror":"https://ror.org/05qbk4x57","country_code":"CN","type":"education","lineage":["https://openalex.org/I19820366","https://openalex.org/I4210165038"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Zhen Wang","raw_affiliation_strings":["Institute of Information Engineering at Chinese Academy of Sciences, Beijing, China","University of Chinese Academy of Sciences, Beijing, China"],"raw_orcid":"https://orcid.org/0009-0009-9919-4653","affiliations":[{"raw_affiliation_string":"Institute of Information Engineering at Chinese Academy of Sciences, Beijing, China","institution_ids":["https://openalex.org/I4210156404","https://openalex.org/I19820366"]},{"raw_affiliation_string":"University of Chinese Academy of Sciences, Beijing, China","institution_ids":["https://openalex.org/I4210165038"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5068579311","display_name":"J. L. Cheng","orcid":null},"institutions":[{"id":"https://openalex.org/I19820366","display_name":"Chinese Academy of Sciences","ror":"https://ror.org/034t30j35","country_code":"CN","type":"government","lineage":["https://openalex.org/I19820366"]},{"id":"https://openalex.org/I4210156404","display_name":"Institute of Information Engineering","ror":"https://ror.org/04r53se39","country_code":"CN","type":"facility","lineage":["https://openalex.org/I19820366","https://openalex.org/I4210156404"]},{"id":"https://openalex.org/I4210165038","display_name":"University of Chinese Academy of Sciences","ror":"https://ror.org/05qbk4x57","country_code":"CN","type":"education","lineage":["https://openalex.org/I19820366","https://openalex.org/I4210165038"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Jiaxing Cheng","raw_affiliation_strings":["Institute of Information Engineering at Chinese Academy of Sciences, Beijing, China","University of Chinese Academy of Sciences, Beijing, China"],"raw_orcid":"https://orcid.org/0009-0005-9491-1239","affiliations":[{"raw_affiliation_string":"Institute of Information Engineering at Chinese Academy of Sciences, Beijing, China","institution_ids":["https://openalex.org/I4210156404","https://openalex.org/I19820366"]},{"raw_affiliation_string":"University of Chinese Academy of Sciences, Beijing, China","institution_ids":["https://openalex.org/I4210165038"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5024271967","display_name":"Shuaizong Si","orcid":"https://orcid.org/0000-0001-8805-1221"},"institutions":[{"id":"https://openalex.org/I19820366","display_name":"Chinese Academy of Sciences","ror":"https://ror.org/034t30j35","country_code":"CN","type":"government","lineage":["https://openalex.org/I19820366"]},{"id":"https://openalex.org/I4210156404","display_name":"Institute of Information Engineering","ror":"https://ror.org/04r53se39","country_code":"CN","type":"facility","lineage":["https://openalex.org/I19820366","https://openalex.org/I4210156404"]},{"id":"https://openalex.org/I4210165038","display_name":"University of Chinese Academy of Sciences","ror":"https://ror.org/05qbk4x57","country_code":"CN","type":"education","lineage":["https://openalex.org/I19820366","https://openalex.org/I4210165038"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Shuaizong Si","raw_affiliation_strings":["Institute of Information Engineering at Chinese Academy of Sciences, Beijing, China","University of Chinese Academy of Sciences, Beijing, China"],"raw_orcid":"https://orcid.org/0000-0001-8805-1221","affiliations":[{"raw_affiliation_string":"Institute of Information Engineering at Chinese Academy of Sciences, Beijing, China","institution_ids":["https://openalex.org/I4210156404","https://openalex.org/I19820366"]},{"raw_affiliation_string":"University of Chinese Academy of Sciences, Beijing, China","institution_ids":["https://openalex.org/I4210165038"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5077607914","display_name":"Yongle Chen","orcid":"https://orcid.org/0000-0002-1000-1109"},"institutions":[{"id":"https://openalex.org/I9086337","display_name":"Taiyuan University of Technology","ror":"https://ror.org/03kv08d37","country_code":"CN","type":"education","lineage":["https://openalex.org/I9086337"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Yongle Chen","raw_affiliation_strings":["Taiyuan University of Technology, Taiyuan, China"],"raw_orcid":"https://orcid.org/0000-0002-1000-1109","affiliations":[{"raw_affiliation_string":"Taiyuan University of Technology, Taiyuan, China","institution_ids":["https://openalex.org/I9086337"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5101820083","display_name":"Limin Sun","orcid":"https://orcid.org/0000-0002-6578-0680"},"institutions":[{"id":"https://openalex.org/I19820366","display_name":"Chinese Academy of Sciences","ror":"https://ror.org/034t30j35","country_code":"CN","type":"government","lineage":["https://openalex.org/I19820366"]},{"id":"https://openalex.org/I4210156404","display_name":"Institute of Information Engineering","ror":"https://ror.org/04r53se39","country_code":"CN","type":"facility","lineage":["https://openalex.org/I19820366","https://openalex.org/I4210156404"]},{"id":"https://openalex.org/I4210165038","display_name":"University of Chinese Academy of Sciences","ror":"https://ror.org/05qbk4x57","country_code":"CN","type":"education","lineage":["https://openalex.org/I19820366","https://openalex.org/I4210165038"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Limin Sun","raw_affiliation_strings":["Institute of Information Engineering at Chinese Academy of Sciences, Beijing, China","University of Chinese Academy of Sciences, Beijing, China"],"raw_orcid":"https://orcid.org/0000-0002-6578-0680","affiliations":[{"raw_affiliation_string":"Institute of Information Engineering at Chinese Academy of Sciences, Beijing, China","institution_ids":["https://openalex.org/I4210156404","https://openalex.org/I19820366"]},{"raw_affiliation_string":"University of Chinese Academy of Sciences, Beijing, China","institution_ids":["https://openalex.org/I4210165038"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":7,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":2.128,"has_fulltext":false,"cited_by_count":2,"citation_normalized_percentile":{"value":0.87485475,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":{"min":98,"max":99},"biblio":{"volume":"2","issue":"ISSTA","first_page":"2384","last_page":"2406"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":0.9991999864578247,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":0.9991999864578247,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11424","display_name":"Security and Verification in Computing","score":0.9990000128746033,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":0.9919000267982483,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/reverse-engineering","display_name":"Reverse engineering","score":0.8584495782852173},{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.8328815698623657},{"id":"https://openalex.org/keywords/executable","display_name":"Executable","score":0.7331485748291016},{"id":"https://openalex.org/keywords/protocol","display_name":"Protocol (science)","score":0.6927654147148132},{"id":"https://openalex.org/keywords/software-engineering","display_name":"Software engineering","score":0.4489792585372925},{"id":"https://openalex.org/keywords/programming-language","display_name":"Programming language","score":0.3984018862247467},{"id":"https://openalex.org/keywords/embedded-system","display_name":"Embedded system","score":0.38692498207092285}],"concepts":[{"id":"https://openalex.org/C207850805","wikidata":"https://www.wikidata.org/wiki/Q269608","display_name":"Reverse engineering","level":2,"score":0.8584495782852173},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.8328815698623657},{"id":"https://openalex.org/C160145156","wikidata":"https://www.wikidata.org/wiki/Q778586","display_name":"Executable","level":2,"score":0.7331485748291016},{"id":"https://openalex.org/C2780385302","wikidata":"https://www.wikidata.org/wiki/Q367158","display_name":"Protocol (science)","level":3,"score":0.6927654147148132},{"id":"https://openalex.org/C115903868","wikidata":"https://www.wikidata.org/wiki/Q80993","display_name":"Software engineering","level":1,"score":0.4489792585372925},{"id":"https://openalex.org/C199360897","wikidata":"https://www.wikidata.org/wiki/Q9143","display_name":"Programming language","level":1,"score":0.3984018862247467},{"id":"https://openalex.org/C149635348","wikidata":"https://www.wikidata.org/wiki/Q193040","display_name":"Embedded system","level":1,"score":0.38692498207092285},{"id":"https://openalex.org/C204787440","wikidata":"https://www.wikidata.org/wiki/Q188504","display_name":"Alternative medicine","level":2,"score":0.0},{"id":"https://openalex.org/C142724271","wikidata":"https://www.wikidata.org/wiki/Q7208","display_name":"Pathology","level":1,"score":0.0},{"id":"https://openalex.org/C71924100","wikidata":"https://www.wikidata.org/wiki/Q11190","display_name":"Medicine","level":0,"score":0.0}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1145/3728982","is_oa":true,"landing_page_url":"https://doi.org/10.1145/3728982","pdf_url":null,"source":{"id":"https://openalex.org/S4404663975","display_name":"Proceedings of the ACM on software engineering.","issn_l":"2994-970X","issn":["2994-970X"],"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/P4310319798","host_organization_name":"Association for Computing Machinery","host_organization_lineage":["https://openalex.org/P4310319798"],"host_organization_lineage_names":["Association for Computing Machinery"],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the ACM on Software Engineering","raw_type":"journal-article"}],"best_oa_location":{"id":"doi:10.1145/3728982","is_oa":true,"landing_page_url":"https://doi.org/10.1145/3728982","pdf_url":null,"source":{"id":"https://openalex.org/S4404663975","display_name":"Proceedings of the ACM on software engineering.","issn_l":"2994-970X","issn":["2994-970X"],"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/P4310319798","host_organization_name":"Association for Computing Machinery","host_organization_lineage":["https://openalex.org/P4310319798"],"host_organization_lineage_names":["Association for Computing Machinery"],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the ACM on Software Engineering","raw_type":"journal-article"},"sustainable_development_goals":[{"score":0.5699999928474426,"id":"https://metadata.un.org/sdg/9","display_name":"Industry, innovation and infrastructure"}],"awards":[{"id":"https://openalex.org/G8172265067","display_name":null,"funder_award_id":"No.92467201","funder_id":"https://openalex.org/F4320321001","funder_display_name":"National Natural Science Foundation of China"}],"funders":[{"id":"https://openalex.org/F4320321001","display_name":"National Natural Science Foundation of China","ror":"https://ror.org/01h0zpd94"}],"has_content":{"grobid_xml":false,"pdf":false},"content_urls":null,"referenced_works_count":26,"referenced_works":["https://openalex.org/W1547308659","https://openalex.org/W1553308705","https://openalex.org/W2018506753","https://openalex.org/W2049867480","https://openalex.org/W2115675703","https://openalex.org/W2140839850","https://openalex.org/W2156453323","https://openalex.org/W2295974667","https://openalex.org/W2514974017","https://openalex.org/W2744632709","https://openalex.org/W2796215551","https://openalex.org/W2883395840","https://openalex.org/W3047947484","https://openalex.org/W3130594730","https://openalex.org/W3138456218","https://openalex.org/W4200251832","https://openalex.org/W4245421994","https://openalex.org/W4285162845","https://openalex.org/W4289038676","https://openalex.org/W4312752017","https://openalex.org/W4386645116","https://openalex.org/W4387408828","https://openalex.org/W4388857869","https://openalex.org/W4394769379","https://openalex.org/W4396986865","https://openalex.org/W4402955383"],"related_works":["https://openalex.org/W82161441","https://openalex.org/W2112192942","https://openalex.org/W1576042299","https://openalex.org/W2181943964","https://openalex.org/W1528423264","https://openalex.org/W4307821979","https://openalex.org/W2150019175","https://openalex.org/W1679963423","https://openalex.org/W2139769766","https://openalex.org/W2003230381"],"abstract_inverted_index":{"With":[0],"the":[1,37,53,62,77,125,144,150,204],"advancement":[2],"of":[3,33,42,59,64,79,176,182,208],"digital":[4],"transformation,":[5],"Industrial":[6],"Control":[7],"Systems":[8],"(ICS)":[9],"are":[10],"becoming":[11],"increasingly":[12],"open":[13],"and":[14,28,40,56,85,178,188,197],"intelligent.":[15],"However,":[16],"inherent":[17],"vulnerabilities":[18],"in":[19,61,168,219,226],"ICS":[20,34],"protocols":[21,35,60,218],"pose":[22],"significant":[23],"security":[24,38],"threats":[25],"to":[26,51,76,142],"devices":[27],"systems.":[29],"The":[30],"proprietary":[31,217],"nature":[32],"complicates":[36],"analysis":[39],"deployment":[41],"protective":[43],"mechanisms":[44],"for":[45,129],"ICS.":[46],"Protocol":[47],"reverse":[48,69,99,165],"engineering":[49,70,100,166],"aims":[50],"infer":[52,143],"syntax,":[54],"semantics,":[55],"state":[57],"machines":[58],"absence":[63],"official":[65],"specifications.":[66],"Traditional":[67],"protocol":[68,98,151,164],"tools":[71,167],"face":[72],"considerable":[73],"limitations":[74],"due":[75],"lack":[78],"executable":[80,120],"environments,":[81,121],"incomplete":[82],"inference":[83,140],"strategies,":[84],"low-quality":[86],"network":[87,109],"traffic.":[88],"In":[89],"this":[90],"paper,":[91],"we":[92,134],"present":[93],"ICEPRE,":[94],"a":[95,179],"novel":[96],"data-driven":[97],"method":[101],"based":[102],"on":[103,119],"concolic":[104],"execution,":[105],"which":[106],"uniquely":[107],"integrates":[108],"trace":[110],"with":[111,216],"static":[112],"analysis.":[113],"Unlike":[114],"conventional":[115],"methods":[116],"that":[117,159],"rely":[118],"ICEPRE":[122,160,212],"statically":[123],"tracks":[124],"program's":[126],"parsing":[127],"process":[128],"specific":[130],"input":[131],"messages.":[132],"Furthermore,":[133],"employ":[135],"an":[136,173],"innovative":[137],"field":[138,169],"boundary":[139,170],"strategy":[141],"protocol's":[145],"syntax":[146],"by":[147],"analyzing":[148],"how":[149],"parser":[152],"handles":[153],"different":[154],"fields.":[155],"Our":[156],"evaluation":[157],"demonstrates":[158],"significantly":[161],"outperforms":[162],"previous":[163],"inference,":[171],"achieving":[172],"F1":[174],"score":[175,181],"0.76":[177],"perfection":[180],"0.67,":[183],"while":[184],"DynPRE,":[185],"BinaryInferno,":[186],"Nemeys,":[187],"Netzob":[189],"yield":[190],"(0.65,":[191],"0.35),":[192],"(0.42,":[193],"0.14),":[194],"(0.39,":[195],"0.09),":[196],"(0.27,":[198],"0.10),":[199],"respectively.":[200],"These":[201],"results":[202],"underscore":[203],"superior":[205],"overall":[206],"performance":[207,215],"our":[209],"method.":[210],"Additionally,":[211],"exhibits":[213],"exceptional":[214],"real-world":[220],"scenarios,":[221],"highlighting":[222],"its":[223],"practical":[224],"applicability":[225],"downstream":[227],"applications.":[228]},"counts_by_year":[{"year":2026,"cited_by_count":2}],"updated_date":"2026-06-11T09:08:48.828518","created_date":"2025-10-10T00:00:00"}