{"id":"https://openalex.org/W4416016764","doi":"https://doi.org/10.1145/3746252.3761266","title":"ORCAS: Obfuscation-Resilient Binary Code Similarity Analysis using Dominance Enhanced Semantic Graph","display_name":"ORCAS: Obfuscation-Resilient Binary Code Similarity Analysis using Dominance Enhanced Semantic Graph","publication_year":2025,"publication_date":"2025-11-07","ids":{"openalex":"https://openalex.org/W4416016764","doi":"https://doi.org/10.1145/3746252.3761266"},"language":"en","primary_location":{"id":"doi:10.1145/3746252.3761266","is_oa":false,"landing_page_url":"https://doi.org/10.1145/3746252.3761266","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the 34th ACM International Conference on Information and Knowledge Management","raw_type":"proceedings-article"},"type":"preprint","indexed_in":["arxiv","crossref"],"open_access":{"is_oa":true,"oa_status":"green","oa_url":"https://arxiv.org/pdf/2506.06161","any_repository_has_fulltext":true},"authorships":[{"author_position":"first","author":{"id":null,"display_name":"Yufeng Wang","orcid":"https://orcid.org/0009-0000-2005-2172"},"institutions":[{"id":"https://openalex.org/I180726961","display_name":"Shenzhen University","ror":"https://ror.org/01vy4gh70","country_code":"CN","type":"education","lineage":["https://openalex.org/I180726961"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Yufeng Wang","raw_affiliation_strings":["College of Computer Science and Software Engineering, Shenzhen University, Shenzhen, Guangdong, China"],"raw_orcid":"https://orcid.org/0009-0000-2005-2172","affiliations":[{"raw_affiliation_string":"College of Computer Science and Software Engineering, Shenzhen University, Shenzhen, Guangdong, China","institution_ids":["https://openalex.org/I180726961"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5101501973","display_name":"Yuhong Feng","orcid":"https://orcid.org/0000-0002-7691-5587"},"institutions":[{"id":"https://openalex.org/I180726961","display_name":"Shenzhen University","ror":"https://ror.org/01vy4gh70","country_code":"CN","type":"education","lineage":["https://openalex.org/I180726961"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Yuhong Feng","raw_affiliation_strings":["College of Computer Science and Software Engineering, Shenzhen University, Shenzhen, Guangdong, China"],"raw_orcid":"https://orcid.org/0000-0002-7691-5587","affiliations":[{"raw_affiliation_string":"College of Computer Science and Software Engineering, Shenzhen University, Shenzhen, Guangdong, China","institution_ids":["https://openalex.org/I180726961"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5068733869","display_name":"Yixuan Cao","orcid":"https://orcid.org/0009-0006-6241-4251"},"institutions":[{"id":"https://openalex.org/I180726961","display_name":"Shenzhen University","ror":"https://ror.org/01vy4gh70","country_code":"CN","type":"education","lineage":["https://openalex.org/I180726961"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Yixuan Cao","raw_affiliation_strings":["College of Computer Science and Software Engineering, Shenzhen University, Shenzhen, Guangdong, China"],"raw_orcid":"https://orcid.org/0009-0006-6241-4251","affiliations":[{"raw_affiliation_string":"College of Computer Science and Software Engineering, Shenzhen University, Shenzhen, Guangdong, China","institution_ids":["https://openalex.org/I180726961"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5026011567","display_name":"Haoran Li","orcid":"https://orcid.org/0009-0007-6789-5573"},"institutions":[{"id":"https://openalex.org/I180726961","display_name":"Shenzhen University","ror":"https://ror.org/01vy4gh70","country_code":"CN","type":"education","lineage":["https://openalex.org/I180726961"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Haoran Li","raw_affiliation_strings":["College of Computer Science and Software Engineering, Shenzhen University, Shenzhen, Guangdong, China"],"raw_orcid":"https://orcid.org/0009-0007-6789-5573","affiliations":[{"raw_affiliation_string":"College of Computer Science and Software Engineering, Shenzhen University, Shenzhen, Guangdong, China","institution_ids":["https://openalex.org/I180726961"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5060840648","display_name":"Haiyue Feng","orcid":"https://orcid.org/0009-0002-7239-3467"},"institutions":[{"id":"https://openalex.org/I180726961","display_name":"Shenzhen University","ror":"https://ror.org/01vy4gh70","country_code":"CN","type":"education","lineage":["https://openalex.org/I180726961"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Haiyue Feng","raw_affiliation_strings":["College of Computer Science and Software Engineering, Shenzhen University, Shenzhen, Guangdong, China"],"raw_orcid":"https://orcid.org/0009-0002-7239-3467","affiliations":[{"raw_affiliation_string":"College of Computer Science and Software Engineering, Shenzhen University, Shenzhen, Guangdong, China","institution_ids":["https://openalex.org/I180726961"]}]},{"author_position":"last","author":{"id":null,"display_name":"Yifeng Wang","orcid":"https://orcid.org/0009-0006-4271-7378"},"institutions":[{"id":"https://openalex.org/I180726961","display_name":"Shenzhen University","ror":"https://ror.org/01vy4gh70","country_code":"CN","type":"education","lineage":["https://openalex.org/I180726961"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Yifeng Wang","raw_affiliation_strings":["College of Computer Science and Software Engineering, Shenzhen University, Shenzhen, Guangdong, China"],"raw_orcid":"https://orcid.org/0009-0006-4271-7378","affiliations":[{"raw_affiliation_string":"College of Computer Science and Software Engineering, Shenzhen University, Shenzhen, Guangdong, China","institution_ids":["https://openalex.org/I180726961"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":6,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":1.064,"has_fulltext":false,"cited_by_count":1,"citation_normalized_percentile":{"value":0.82104785,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":{"min":95,"max":98},"biblio":{"volume":null,"issue":null,"first_page":"3198","last_page":"3208"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":0.9682999849319458,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":0.9682999849319458,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10260","display_name":"Software Engineering Research","score":0.004800000227987766,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10743","display_name":"Software Testing and Debugging Techniques","score":0.003599999938160181,"subfield":{"id":"https://openalex.org/subfields/1712","display_name":"Software"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/obfuscation","display_name":"Obfuscation","score":0.7117999792098999},{"id":"https://openalex.org/keywords/binary-code","display_name":"Binary code","score":0.545199990272522},{"id":"https://openalex.org/keywords/graph","display_name":"Graph","score":0.5382999777793884},{"id":"https://openalex.org/keywords/binary-number","display_name":"Binary number","score":0.4934999942779541},{"id":"https://openalex.org/keywords/control-flow-graph","display_name":"Control flow graph","score":0.4781000018119812},{"id":"https://openalex.org/keywords/semantics","display_name":"Semantics (computer science)","score":0.43529999256134033},{"id":"https://openalex.org/keywords/code","display_name":"Code (set theory)","score":0.40290001034736633},{"id":"https://openalex.org/keywords/set","display_name":"Set (abstract data type)","score":0.3741999864578247},{"id":"https://openalex.org/keywords/control-flow","display_name":"Control flow","score":0.3614000082015991}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.7567999958992004},{"id":"https://openalex.org/C40305131","wikidata":"https://www.wikidata.org/wiki/Q2616305","display_name":"Obfuscation","level":2,"score":0.7117999792098999},{"id":"https://openalex.org/C63435697","wikidata":"https://www.wikidata.org/wiki/Q864135","display_name":"Binary code","level":3,"score":0.545199990272522},{"id":"https://openalex.org/C132525143","wikidata":"https://www.wikidata.org/wiki/Q141488","display_name":"Graph","level":2,"score":0.5382999777793884},{"id":"https://openalex.org/C48372109","wikidata":"https://www.wikidata.org/wiki/Q3913","display_name":"Binary number","level":2,"score":0.4934999942779541},{"id":"https://openalex.org/C27458966","wikidata":"https://www.wikidata.org/wiki/Q1187693","display_name":"Control flow graph","level":2,"score":0.4781000018119812},{"id":"https://openalex.org/C184337299","wikidata":"https://www.wikidata.org/wiki/Q1437428","display_name":"Semantics (computer science)","level":2,"score":0.43529999256134033},{"id":"https://openalex.org/C80444323","wikidata":"https://www.wikidata.org/wiki/Q2878974","display_name":"Theoretical computer science","level":1,"score":0.41179999709129333},{"id":"https://openalex.org/C2776760102","wikidata":"https://www.wikidata.org/wiki/Q5139990","display_name":"Code (set theory)","level":3,"score":0.40290001034736633},{"id":"https://openalex.org/C177264268","wikidata":"https://www.wikidata.org/wiki/Q1514741","display_name":"Set (abstract data type)","level":2,"score":0.3741999864578247},{"id":"https://openalex.org/C124101348","wikidata":"https://www.wikidata.org/wiki/Q172491","display_name":"Data mining","level":1,"score":0.3686000108718872},{"id":"https://openalex.org/C160191386","wikidata":"https://www.wikidata.org/wiki/Q868299","display_name":"Control flow","level":2,"score":0.3614000082015991},{"id":"https://openalex.org/C81669768","wikidata":"https://www.wikidata.org/wiki/Q2359161","display_name":"Precision and recall","level":2,"score":0.35659998655319214},{"id":"https://openalex.org/C130318100","wikidata":"https://www.wikidata.org/wiki/Q2268914","display_name":"Semantic similarity","level":2,"score":0.35269999504089355},{"id":"https://openalex.org/C43126263","wikidata":"https://www.wikidata.org/wiki/Q128751","display_name":"Source code","level":2,"score":0.34779998660087585},{"id":"https://openalex.org/C97686452","wikidata":"https://www.wikidata.org/wiki/Q7604153","display_name":"Static analysis","level":2,"score":0.34709998965263367},{"id":"https://openalex.org/C88468194","wikidata":"https://www.wikidata.org/wiki/Q1172416","display_name":"Data-flow analysis","level":3,"score":0.3296999931335449},{"id":"https://openalex.org/C2777210771","wikidata":"https://www.wikidata.org/wiki/Q4927124","display_name":"Block (permutation group theory)","level":2,"score":0.3215000033378601},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.3138999938964844},{"id":"https://openalex.org/C541664917","wikidata":"https://www.wikidata.org/wiki/Q14001","display_name":"Malware","level":2,"score":0.3082999885082245},{"id":"https://openalex.org/C65180967","wikidata":"https://www.wikidata.org/wiki/Q130901","display_name":"Binary relation","level":2,"score":0.30000001192092896},{"id":"https://openalex.org/C103278499","wikidata":"https://www.wikidata.org/wiki/Q254465","display_name":"Similarity (geometry)","level":3,"score":0.2939000129699707},{"id":"https://openalex.org/C2778971978","wikidata":"https://www.wikidata.org/wiki/Q2287075","display_name":"Binary translation","level":3,"score":0.2694000005722046},{"id":"https://openalex.org/C137287247","wikidata":"https://www.wikidata.org/wiki/Q1329550","display_name":"Static program analysis","level":4,"score":0.2632000148296356},{"id":"https://openalex.org/C2778648169","wikidata":"https://www.wikidata.org/wiki/Q967768","display_name":"Compatibility (geochemistry)","level":2,"score":0.26190000772476196},{"id":"https://openalex.org/C95713431","wikidata":"https://www.wikidata.org/wiki/Q631425","display_name":"Vulnerability (computing)","level":2,"score":0.2526000142097473}],"mesh":[],"locations_count":2,"locations":[{"id":"doi:10.1145/3746252.3761266","is_oa":false,"landing_page_url":"https://doi.org/10.1145/3746252.3761266","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the 34th ACM International Conference on Information and Knowledge Management","raw_type":"proceedings-article"},{"id":"pmh:oai:arXiv.org:2506.06161","is_oa":true,"landing_page_url":"http://arxiv.org/abs/2506.06161","pdf_url":"https://arxiv.org/pdf/2506.06161","source":{"id":"https://openalex.org/S4393918464","display_name":"ArXiv.org","issn_l":"2331-8422","issn":["2331-8422"],"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":null,"host_organization_name":null,"host_organization_lineage":[],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"text"}],"best_oa_location":{"id":"pmh:oai:arXiv.org:2506.06161","is_oa":true,"landing_page_url":"http://arxiv.org/abs/2506.06161","pdf_url":"https://arxiv.org/pdf/2506.06161","source":{"id":"https://openalex.org/S4393918464","display_name":"ArXiv.org","issn_l":"2331-8422","issn":["2331-8422"],"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":null,"host_organization_name":null,"host_organization_lineage":[],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"text"},"sustainable_development_goals":[],"awards":[{"id":"https://openalex.org/G1769245271","display_name":null,"funder_award_id":"62272315","funder_id":"https://openalex.org/F4320321001","funder_display_name":"National Natural Science Foundation of China"}],"funders":[{"id":"https://openalex.org/F4320321001","display_name":"National Natural Science Foundation of China","ror":"https://ror.org/01h0zpd94"}],"has_content":{"grobid_xml":false,"pdf":false},"content_urls":null,"referenced_works_count":43,"referenced_works":["https://openalex.org/W1967185446","https://openalex.org/W2012604743","https://openalex.org/W2111379929","https://openalex.org/W2439280908","https://openalex.org/W2514974017","https://openalex.org/W2532962075","https://openalex.org/W2559784535","https://openalex.org/W2579698096","https://openalex.org/W2618635610","https://openalex.org/W2627063456","https://openalex.org/W2749008552","https://openalex.org/W2768051178","https://openalex.org/W2962830343","https://openalex.org/W2963350250","https://openalex.org/W2969343988","https://openalex.org/W2997915791","https://openalex.org/W3109206613","https://openalex.org/W3118658046","https://openalex.org/W3133719257","https://openalex.org/W3153398259","https://openalex.org/W3160056598","https://openalex.org/W3193122818","https://openalex.org/W3206706367","https://openalex.org/W4285490409","https://openalex.org/W4285586654","https://openalex.org/W4311166089","https://openalex.org/W4312324806","https://openalex.org/W4313203541","https://openalex.org/W4381050433","https://openalex.org/W4381050443","https://openalex.org/W4383221378","https://openalex.org/W4383888895","https://openalex.org/W4384154511","https://openalex.org/W4385627058","https://openalex.org/W4387008271","https://openalex.org/W4394745170","https://openalex.org/W4394862931","https://openalex.org/W4399850504","https://openalex.org/W4400798708","https://openalex.org/W4402443079","https://openalex.org/W4402443222","https://openalex.org/W4403536423","https://openalex.org/W4407278800"],"related_works":[],"abstract_inverted_index":{"Binary":[0],"code":[1,29,37,73,180],"similarity":[2,120],"analysis":[3,12],"(BCSA)":[4],"serves":[5],"as":[6,15,114],"a":[7,173,197],"foundational":[8],"technique":[9],"for":[10],"binary":[11,28,72,102,179],"tasks":[13],"such":[14],"vulnerability":[16,164,192],"detection":[17],"and":[18,31,94,96,110,116,169],"malware":[19],"identification.":[20],"Existing":[21],"graph":[22],"based":[23,60],"BCSA":[24,58],"approaches":[25,133,186],"capture":[26],"more":[27,76,121,174],"semantics":[30,79],"demonstrate":[32],"remarkable":[33],"performance.":[34,48],"However,":[35],"when":[36,147],"obfuscation":[38,106,151],"is":[39,69],"applied,":[40],"the":[41,135,155,184],"unstable":[42],"control":[43,81],"flow":[44,82],"structure":[45],"degrades":[46],"their":[47,118],"To":[49],"address":[50],"this":[51,188],"issue,":[52],"we":[53],"develop":[54],"ORCAS,":[55],"an":[56,70,142,160],"Obfuscation-Resilient":[57],"model":[59],"on":[61,128,177],"Dominance":[62],"Enhanced":[63],"Semantic":[64],"Graph":[65],"(DESG).":[66],"The":[67],"DESG":[68],"original":[71,161],"representation,":[74],"capturing":[75],"binaries'":[77],"implicit":[78],"without":[80],"structure,":[83],"including":[84],"inter-instruction":[85],"relations":[86,91],"(e.g.,":[87],"def-use),":[88],"inter-basic":[89],"block":[90,98],"(i.e.,":[92],"dominance":[93],"post-dominance),":[95],"instruction-basic":[97],"relations.":[99],"ORCAS":[100,129,140,182],"takes":[101],"functions":[103],"from":[104],"different":[105],"options,":[107],"optimization":[108],"levels,":[109],"instruction":[111],"set":[112],"architectures":[113],"input":[115],"scores":[117],"semantic":[119],"robustly.":[122],"Extensive":[123],"experiments":[124],"have":[125],"been":[126,167],"conducted":[127],"against":[130],"eight":[131],"baseline":[132],"over":[134,187],"BinKit":[136],"dataset.":[137],"For":[138],"example,":[139],"achieves":[141],"average":[143],"12.1%":[144],"PR-AUC":[145],"improvement":[146,199],"using":[148],"combined":[149],"three":[150],"options":[152],"compared":[153],"to":[154,171,196],"state-of-the-art":[156,185],"approaches.":[157],"In":[158],"addition,":[159],"obfuscated":[162,178],"real-world":[163,191],"dataset":[165,193],"has":[166],"constructed":[168],"released":[170,190],"facilitate":[172],"comprehensive":[175],"research":[176],"analysis.":[181],"outperforms":[183],"newly":[189],"by":[194],"up":[195],"recall":[198],"of":[200],"43%.":[201]},"counts_by_year":[{"year":2026,"cited_by_count":1}],"updated_date":"2026-06-11T09:08:48.828518","created_date":"2025-10-10T00:00:00"}