{"id":"https://openalex.org/W4414886040","doi":"https://doi.org/10.1145/3786583.3786873","title":"CASCADE: LLM-powered JavaScript Deobfuscator at Google","display_name":"CASCADE: LLM-powered JavaScript Deobfuscator at Google","publication_year":2026,"publication_date":"2026-04-12","ids":{"openalex":"https://openalex.org/W4414886040","doi":"https://doi.org/10.1145/3786583.3786873"},"language":"en","primary_location":{"id":"doi:10.1145/3786583.3786873","is_oa":true,"landing_page_url":"https://doi.org/10.1145/3786583.3786873","pdf_url":null,"source":null,"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the IEEE/ACM 48th International Conference on Software Engineering: Software Engineering in Practice","raw_type":"proceedings-article"},"type":"conference-paper","indexed_in":["arxiv","crossref","datacite"],"open_access":{"is_oa":true,"oa_status":"gold","oa_url":"https://doi.org/10.1145/3786583.3786873","any_repository_has_fulltext":true},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5055870001","display_name":"Shan Jiang","orcid":"https://orcid.org/0000-0002-4727-4856"},"institutions":[{"id":"https://openalex.org/I86519309","display_name":"The University of Texas at Austin","ror":"https://ror.org/00hj54h04","country_code":"US","type":"education","lineage":["https://openalex.org/I86519309"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Shan Jiang","raw_affiliation_strings":["The University of Texas at Austin, Austin, Texas, USA"],"raw_orcid":"https://orcid.org/0009-0002-0466-1028","affiliations":[{"raw_affiliation_string":"The University of Texas at Austin, Austin, Texas, USA","institution_ids":["https://openalex.org/I86519309"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5119874895","display_name":"Pranoy Kovuri","orcid":null},"institutions":[{"id":"https://openalex.org/I1291425158","display_name":"Google (United States)","ror":"https://ror.org/00njsd438","country_code":"US","type":"company","lineage":["https://openalex.org/I1291425158","https://openalex.org/I4210128969"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Pranoy Kovuri","raw_affiliation_strings":["Google Inc, Sunnyvale, California, USA"],"raw_orcid":"https://orcid.org/0000-0002-4621-638X","affiliations":[{"raw_affiliation_string":"Google Inc, Sunnyvale, California, USA","institution_ids":["https://openalex.org/I1291425158"]}]},{"author_position":"middle","author":{"id":null,"display_name":"David Tao","orcid":"https://orcid.org/0009-0005-2440-4389"},"institutions":[{"id":"https://openalex.org/I1291425158","display_name":"Google (United States)","ror":"https://ror.org/00njsd438","country_code":"US","type":"company","lineage":["https://openalex.org/I1291425158","https://openalex.org/I4210128969"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"David Tao","raw_affiliation_strings":["Google Inc, Sunnyvale, California, USA"],"raw_orcid":"https://orcid.org/0009-0005-2440-4389","affiliations":[{"raw_affiliation_string":"Google Inc, Sunnyvale, California, USA","institution_ids":["https://openalex.org/I1291425158"]}]},{"author_position":"last","author":{"id":null,"display_name":"Zhixun Tan","orcid":"https://orcid.org/0009-0007-7120-4907"},"institutions":[{"id":"https://openalex.org/I1291425158","display_name":"Google (United States)","ror":"https://ror.org/00njsd438","country_code":"US","type":"company","lineage":["https://openalex.org/I1291425158","https://openalex.org/I4210128969"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Zhixun Tan","raw_affiliation_strings":["Google Inc, Sunnyvale, California, USA"],"raw_orcid":"https://orcid.org/0009-0007-7120-4907","affiliations":[{"raw_affiliation_string":"Google Inc, Sunnyvale, California, USA","institution_ids":["https://openalex.org/I1291425158"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":2,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":null,"has_fulltext":false,"cited_by_count":2,"citation_normalized_percentile":null,"cited_by_percentile_year":null,"biblio":{"volume":null,"issue":null,"first_page":"292","last_page":"302"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T12479","display_name":"Web Application Security Vulnerabilities","score":0.930899977684021,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T12479","display_name":"Web Application Security Vulnerabilities","score":0.930899977684021,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/javascript","display_name":"JavaScript","score":0.7821999788284302},{"id":"https://openalex.org/keywords/obfuscation","display_name":"Obfuscation","score":0.6676999926567078},{"id":"https://openalex.org/keywords/compiler","display_name":"Compiler","score":0.58160001039505},{"id":"https://openalex.org/keywords/program-comprehension","display_name":"Program comprehension","score":0.49639999866485596},{"id":"https://openalex.org/keywords/malware","display_name":"Malware","score":0.48260000348091125},{"id":"https://openalex.org/keywords/software","display_name":"Software","score":0.46470001339912415},{"id":"https://openalex.org/keywords/static-program-analysis","display_name":"Static program analysis","score":0.4571000039577484},{"id":"https://openalex.org/keywords/static-analysis","display_name":"Static analysis","score":0.4309999942779541},{"id":"https://openalex.org/keywords/reverse-engineering","display_name":"Reverse engineering","score":0.4077000021934509}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.8598999977111816},{"id":"https://openalex.org/C544833334","wikidata":"https://www.wikidata.org/wiki/Q2005","display_name":"JavaScript","level":2,"score":0.7821999788284302},{"id":"https://openalex.org/C40305131","wikidata":"https://www.wikidata.org/wiki/Q2616305","display_name":"Obfuscation","level":2,"score":0.6676999926567078},{"id":"https://openalex.org/C199360897","wikidata":"https://www.wikidata.org/wiki/Q9143","display_name":"Programming language","level":1,"score":0.6362000107765198},{"id":"https://openalex.org/C169590947","wikidata":"https://www.wikidata.org/wiki/Q47506","display_name":"Compiler","level":2,"score":0.58160001039505},{"id":"https://openalex.org/C2777561058","wikidata":"https://www.wikidata.org/wiki/Q2652119","display_name":"Program comprehension","level":4,"score":0.49639999866485596},{"id":"https://openalex.org/C541664917","wikidata":"https://www.wikidata.org/wiki/Q14001","display_name":"Malware","level":2,"score":0.48260000348091125},{"id":"https://openalex.org/C2777904410","wikidata":"https://www.wikidata.org/wiki/Q7397","display_name":"Software","level":2,"score":0.46470001339912415},{"id":"https://openalex.org/C137287247","wikidata":"https://www.wikidata.org/wiki/Q1329550","display_name":"Static program analysis","level":4,"score":0.4571000039577484},{"id":"https://openalex.org/C97686452","wikidata":"https://www.wikidata.org/wiki/Q7604153","display_name":"Static analysis","level":2,"score":0.4309999942779541},{"id":"https://openalex.org/C207850805","wikidata":"https://www.wikidata.org/wiki/Q269608","display_name":"Reverse engineering","level":2,"score":0.4077000021934509},{"id":"https://openalex.org/C115903868","wikidata":"https://www.wikidata.org/wiki/Q80993","display_name":"Software engineering","level":1,"score":0.4009999930858612},{"id":"https://openalex.org/C43126263","wikidata":"https://www.wikidata.org/wiki/Q128751","display_name":"Source code","level":2,"score":0.37209999561309814},{"id":"https://openalex.org/C77660490","wikidata":"https://www.wikidata.org/wiki/Q244916","display_name":"Intermediate language","level":3,"score":0.36629998683929443},{"id":"https://openalex.org/C2776760102","wikidata":"https://www.wikidata.org/wiki/Q5139990","display_name":"Code (set theory)","level":3,"score":0.33980000019073486},{"id":"https://openalex.org/C133162039","wikidata":"https://www.wikidata.org/wiki/Q1061077","display_name":"Code generation","level":3,"score":0.3142000138759613},{"id":"https://openalex.org/C2778361913","wikidata":"https://www.wikidata.org/wiki/Q7248437","display_name":"Program transformation","level":2,"score":0.3102000057697296},{"id":"https://openalex.org/C199519371","wikidata":"https://www.wikidata.org/wiki/Q942695","display_name":"Source lines of code","level":3,"score":0.3052000105381012},{"id":"https://openalex.org/C118643609","wikidata":"https://www.wikidata.org/wiki/Q189210","display_name":"Web application","level":2,"score":0.29409998655319214},{"id":"https://openalex.org/C184337299","wikidata":"https://www.wikidata.org/wiki/Q1437428","display_name":"Semantics (computer science)","level":2,"score":0.27469998598098755},{"id":"https://openalex.org/C117447612","wikidata":"https://www.wikidata.org/wiki/Q1412670","display_name":"Software quality","level":4,"score":0.2709999978542328},{"id":"https://openalex.org/C111919701","wikidata":"https://www.wikidata.org/wiki/Q9135","display_name":"Operating system","level":1,"score":0.27090001106262207},{"id":"https://openalex.org/C179518139","wikidata":"https://www.wikidata.org/wiki/Q5140297","display_name":"Coding (social sciences)","level":2,"score":0.2599000036716461},{"id":"https://openalex.org/C2776359362","wikidata":"https://www.wikidata.org/wiki/Q2145286","display_name":"Representation (politics)","level":3,"score":0.2578999996185303},{"id":"https://openalex.org/C20574231","wikidata":"https://www.wikidata.org/wiki/Q844605","display_name":"Backward compatibility","level":2,"score":0.2526000142097473}],"mesh":[],"locations_count":4,"locations":[{"id":"doi:10.1145/3786583.3786873","is_oa":true,"landing_page_url":"https://doi.org/10.1145/3786583.3786873","pdf_url":null,"source":null,"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the IEEE/ACM 48th International Conference on Software Engineering: Software Engineering in Practice","raw_type":"proceedings-article"},{"id":"pmh:oai:arXiv.org:2507.17691","is_oa":true,"landing_page_url":"http://arxiv.org/abs/2507.17691","pdf_url":"https://arxiv.org/pdf/2507.17691","source":{"id":"https://openalex.org/S4393918464","display_name":"ArXiv.org","issn_l":"2331-8422","issn":["2331-8422"],"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":null,"host_organization_name":null,"host_organization_lineage":[],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"text"},{"id":"pmh:doi:10.48550/arxiv.2507.17691","is_oa":true,"landing_page_url":null,"pdf_url":null,"source":{"id":"https://openalex.org/S4406922384","display_name":"Open MIND","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":null,"host_organization_name":null,"host_organization_lineage":[],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"Article"},{"id":"doi:10.48550/arxiv.2507.17691","is_oa":true,"landing_page_url":"https://doi.org/10.48550/arxiv.2507.17691","pdf_url":null,"source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":null,"issn":null,"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":null,"is_accepted":false,"is_published":null,"raw_source_name":null,"raw_type":"Preprint"}],"best_oa_location":{"id":"doi:10.1145/3786583.3786873","is_oa":true,"landing_page_url":"https://doi.org/10.1145/3786583.3786873","pdf_url":null,"source":null,"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the IEEE/ACM 48th International Conference on Software Engineering: Software Engineering in Practice","raw_type":"proceedings-article"},"sustainable_development_goals":[],"awards":[],"funders":[],"has_content":{"grobid_xml":false,"pdf":false},"content_urls":null,"referenced_works_count":0,"referenced_works":[],"related_works":[],"abstract_inverted_index":{"Software":[0],"obfuscation,":[1],"particularly":[2],"prevalent":[3,66],"in":[4,118,125],"JavaScript,":[5],"hinders":[6],"code":[7,73],"comprehension":[8],"and":[9,19,83,86,98,112,129],"analysis,":[10,18],"posing":[11],"significant":[12],"challenges":[13],"to":[14,56,104],"software":[15],"testing,":[16],"static":[17,97],"malware":[20],"detection.":[21],"This":[22,91],"paper":[23],"introduces":[24],"CASCADE,":[25],"a":[26,44],"novel":[27],"hybrid":[28],"approach":[29],"that":[30],"integrates":[31],"the":[32,39,64],"advanced":[33],"coding":[34],"capabilities":[35,42],"of":[36,43,95,106],"Gemini":[37,55],"with":[38],"deterministic":[40],"transformation":[41],"compiler":[45],"Intermediate":[46],"Representation":[47],"(IR),":[48],"specifically":[49],"JavaScript":[50,126],"IR":[51],"(JSIR).":[52],"By":[53],"employing":[54],"identify":[57],"critical":[58],"prelude":[59],"functions\u2014the":[60],"foundational":[61],"components":[62],"underlying":[63],"most":[65],"obfuscation":[67],"techniques\u2014and":[68],"leveraging":[69],"JSIR":[70],"for":[71],"subsequent":[72],"transformations,":[74],"CASCADE":[75,114],"effectively":[76],"recovers":[77],"semantic":[78],"elements":[79],"like":[80],"original":[81,88],"strings":[82],"API":[84],"names,":[85],"reveals":[87],"program":[89],"behaviors.":[90],"method":[92],"overcomes":[93],"limitations":[94],"existing":[96],"dynamic":[99],"deobfuscation":[100,127],"techniques,":[101],"eliminating":[102],"hundreds":[103],"thousands":[105],"hard-coded":[107],"rules":[108],"while":[109],"achieving":[110],"reliability":[111],"flexibility.":[113],"is":[115],"already":[116],"deployed":[117],"Google\u2019s":[119],"production":[120],"environment,":[121],"demonstrating":[122],"substantial":[123],"improvements":[124],"efficiency":[128],"reducing":[130],"reverse":[131],"engineering":[132],"efforts.":[133]},"counts_by_year":[{"year":2026,"cited_by_count":2}],"updated_date":"2026-07-21T08:15:58.654021","created_date":"2025-10-07T00:00:00"}