{"id":"https://openalex.org/W7166661539","doi":"https://doi.org/10.1145/3808188","title":"Unveiling the Fragility of Binary Code Similarity Detection via Targeted Attacks with Model Explanations","display_name":"Unveiling the Fragility of Binary Code Similarity Detection via Targeted Attacks with Model Explanations","publication_year":2026,"publication_date":"2026-06-30","ids":{"openalex":"https://openalex.org/W7166661539","doi":"https://doi.org/10.1145/3808188"},"language":"en","primary_location":{"id":"doi:10.1145/3808188","is_oa":true,"landing_page_url":"https://doi.org/10.1145/3808188","pdf_url":null,"source":{"id":"https://openalex.org/S4404663975","display_name":"Proceedings of the ACM on software engineering.","issn_l":"2994-970X","issn":["2994-970X"],"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/P4310319798","host_organization_name":"Association for Computing Machinery","host_organization_lineage":["https://openalex.org/P4310319798"],"host_organization_lineage_names":["Association for Computing Machinery"],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the ACM on Software Engineering","raw_type":"journal-article"},"type":"article","indexed_in":["crossref"],"open_access":{"is_oa":true,"oa_status":"hybrid","oa_url":"https://doi.org/10.1145/3808188","any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5100622966","display_name":"Mingjie Chen","orcid":"https://orcid.org/0009-0003-8274-0685"},"institutions":[{"id":"https://openalex.org/I76130692","display_name":"Zhejiang University","ror":"https://ror.org/00a2xv884","country_code":"CN","type":"education","lineage":["https://openalex.org/I76130692"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Mingjie Chen","raw_affiliation_strings":["Zhejiang University, Hangzhou, China"],"raw_orcid":"https://orcid.org/0009-0009-6103-5681","affiliations":[{"raw_affiliation_string":"Zhejiang University, Hangzhou, China","institution_ids":["https://openalex.org/I76130692"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5102340815","display_name":"Tiancheng Zhu","orcid":null},"institutions":[{"id":"https://openalex.org/I47720641","display_name":"Huazhong University of Science and Technology","ror":"https://ror.org/00p991c53","country_code":"CN","type":"education","lineage":["https://openalex.org/I47720641"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Tiancheng Zhu","raw_affiliation_strings":["Huazhong University of Science and Technology, Wuhan, China"],"raw_orcid":"https://orcid.org/0009-0008-5323-1562","affiliations":[{"raw_affiliation_string":"Huazhong University of Science and Technology, Wuhan, China","institution_ids":["https://openalex.org/I47720641"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5102892645","display_name":"Mingxue Zhang","orcid":"https://orcid.org/0000-0001-8863-8751"},"institutions":[{"id":"https://openalex.org/I76130692","display_name":"Zhejiang University","ror":"https://ror.org/00a2xv884","country_code":"CN","type":"education","lineage":["https://openalex.org/I76130692"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Mingxue Zhang","raw_affiliation_strings":["Hangzhou High-Tech Zone (Binjiang) Institute of Blockchain and Data Security, Hangzhou, China","Zhejiang University, The State Key Laboratory of Blockchain and Data Security, Hangzhou, China"],"raw_orcid":"https://orcid.org/0000-0001-8863-8751","affiliations":[{"raw_affiliation_string":"Hangzhou High-Tech Zone (Binjiang) Institute of Blockchain and Data Security, Hangzhou, China","institution_ids":[]},{"raw_affiliation_string":"Zhejiang University, The State Key Laboratory of Blockchain and Data Security, Hangzhou, China","institution_ids":["https://openalex.org/I76130692"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5101935489","display_name":"Yiling He","orcid":"https://orcid.org/0000-0002-5977-1489"},"institutions":[{"id":"https://openalex.org/I45129253","display_name":"University College London","ror":"https://ror.org/02jx3x895","country_code":"GB","type":"education","lineage":["https://openalex.org/I124357947","https://openalex.org/I45129253"]}],"countries":["GB"],"is_corresponding":false,"raw_author_name":"Yiling He","raw_affiliation_strings":["University College London, London, United Kingdom"],"raw_orcid":"https://orcid.org/0000-0002-5977-1489","affiliations":[{"raw_affiliation_string":"University College London, London, United Kingdom","institution_ids":["https://openalex.org/I45129253"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5103527114","display_name":"Ming\u2010Han Lin","orcid":"https://orcid.org/0009-0004-5776-4789"},"institutions":[{"id":"https://openalex.org/I4210121988","display_name":"Film Independent","ror":"https://ror.org/036cy3843","country_code":"US","type":"nonprofit","lineage":["https://openalex.org/I4210121988"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Minghao Lin","raw_affiliation_strings":["Independent Researcher, Los Angeles, USA"],"raw_orcid":"https://orcid.org/0009-0004-5776-4789","affiliations":[{"raw_affiliation_string":"Independent Researcher, Los Angeles, USA","institution_ids":["https://openalex.org/I4210121988"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5100781844","display_name":"Penghui Li","orcid":"https://orcid.org/0000-0002-3077-5697"},"institutions":[{"id":"https://openalex.org/I78577930","display_name":"Columbia University","ror":"https://ror.org/00hj8s172","country_code":"US","type":"education","lineage":["https://openalex.org/I78577930"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Penghui Li","raw_affiliation_strings":["Columbia University, New York, USA"],"raw_orcid":"https://orcid.org/0000-0002-3077-5697","affiliations":[{"raw_affiliation_string":"Columbia University, New York, USA","institution_ids":["https://openalex.org/I78577930"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5000596496","display_name":"Kui Ren","orcid":"https://orcid.org/0000-0003-3441-6277"},"institutions":[{"id":"https://openalex.org/I76130692","display_name":"Zhejiang University","ror":"https://ror.org/00a2xv884","country_code":"CN","type":"education","lineage":["https://openalex.org/I76130692"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Kui Ren","raw_affiliation_strings":["Zhejiang University, The State Key Laboratory of Blockchain and Data Security, Hangzhou, China"],"raw_orcid":"https://orcid.org/0000-0003-3441-6277","affiliations":[{"raw_affiliation_string":"Zhejiang University, The State Key Laboratory of Blockchain and Data Security, Hangzhou, China","institution_ids":["https://openalex.org/I76130692"]}]}],"institutions":[],"countries_distinct_count":3,"institutions_distinct_count":5,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":0.0,"has_fulltext":false,"cited_by_count":0,"citation_normalized_percentile":{"value":0.89244859,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":null,"biblio":{"volume":"3","issue":"FSE","first_page":"4116","last_page":"4139"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10260","display_name":"Software Engineering Research","score":0.4424999952316284,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T10260","display_name":"Software Engineering Research","score":0.4424999952316284,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":0.19920000433921814,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":0.1809999942779541,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/robustness","display_name":"Robustness (evolution)","score":0.6331999897956848},{"id":"https://openalex.org/keywords/fragility","display_name":"Fragility","score":0.5138000249862671},{"id":"https://openalex.org/keywords/adversarial-system","display_name":"Adversarial system","score":0.42570000886917114},{"id":"https://openalex.org/keywords/code","display_name":"Code (set theory)","score":0.3707999885082245},{"id":"https://openalex.org/keywords/rare-events","display_name":"Rare events","score":0.36000001430511475},{"id":"https://openalex.org/keywords/heuristic","display_name":"Heuristic","score":0.34779998660087585},{"id":"https://openalex.org/keywords/vulnerability","display_name":"Vulnerability (computing)","score":0.34439998865127563}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.7300999760627747},{"id":"https://openalex.org/C63479239","wikidata":"https://www.wikidata.org/wiki/Q7353546","display_name":"Robustness (evolution)","level":3,"score":0.6331999897956848},{"id":"https://openalex.org/C119857082","wikidata":"https://www.wikidata.org/wiki/Q2539","display_name":"Machine learning","level":1,"score":0.5171999931335449},{"id":"https://openalex.org/C80191262","wikidata":"https://www.wikidata.org/wiki/Q5477668","display_name":"Fragility","level":2,"score":0.5138000249862671},{"id":"https://openalex.org/C37736160","wikidata":"https://www.wikidata.org/wiki/Q1801315","display_name":"Adversarial system","level":2,"score":0.42570000886917114},{"id":"https://openalex.org/C124101348","wikidata":"https://www.wikidata.org/wiki/Q172491","display_name":"Data mining","level":1,"score":0.37700000405311584},{"id":"https://openalex.org/C2776760102","wikidata":"https://www.wikidata.org/wiki/Q5139990","display_name":"Code (set theory)","level":3,"score":0.3707999885082245},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.36800000071525574},{"id":"https://openalex.org/C2777317252","wikidata":"https://www.wikidata.org/wiki/Q18393516","display_name":"Rare events","level":2,"score":0.36000001430511475},{"id":"https://openalex.org/C173801870","wikidata":"https://www.wikidata.org/wiki/Q201413","display_name":"Heuristic","level":2,"score":0.34779998660087585},{"id":"https://openalex.org/C95713431","wikidata":"https://www.wikidata.org/wiki/Q631425","display_name":"Vulnerability (computing)","level":2,"score":0.34439998865127563},{"id":"https://openalex.org/C48372109","wikidata":"https://www.wikidata.org/wiki/Q3913","display_name":"Binary number","level":2,"score":0.33250001072883606},{"id":"https://openalex.org/C43126263","wikidata":"https://www.wikidata.org/wiki/Q128751","display_name":"Source code","level":2,"score":0.3276999890804291},{"id":"https://openalex.org/C2777904410","wikidata":"https://www.wikidata.org/wiki/Q7397","display_name":"Software","level":2,"score":0.2883000075817108},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.28189998865127563},{"id":"https://openalex.org/C2780719617","wikidata":"https://www.wikidata.org/wiki/Q1030752","display_name":"Salient","level":2,"score":0.2773999869823456},{"id":"https://openalex.org/C152124472","wikidata":"https://www.wikidata.org/wiki/Q1204361","display_name":"Redundancy (engineering)","level":2,"score":0.27410000562667847},{"id":"https://openalex.org/C2780505938","wikidata":"https://www.wikidata.org/wiki/Q17093282","display_name":"Unavailability","level":2,"score":0.26260000467300415},{"id":"https://openalex.org/C2776836416","wikidata":"https://www.wikidata.org/wiki/Q1364844","display_name":"False alarm","level":2,"score":0.26249998807907104},{"id":"https://openalex.org/C140547941","wikidata":"https://www.wikidata.org/wiki/Q7797194","display_name":"Threat model","level":2,"score":0.260699987411499}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1145/3808188","is_oa":true,"landing_page_url":"https://doi.org/10.1145/3808188","pdf_url":null,"source":{"id":"https://openalex.org/S4404663975","display_name":"Proceedings of the ACM on software engineering.","issn_l":"2994-970X","issn":["2994-970X"],"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/P4310319798","host_organization_name":"Association for Computing Machinery","host_organization_lineage":["https://openalex.org/P4310319798"],"host_organization_lineage_names":["Association for Computing Machinery"],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the ACM on Software Engineering","raw_type":"journal-article"}],"best_oa_location":{"id":"doi:10.1145/3808188","is_oa":true,"landing_page_url":"https://doi.org/10.1145/3808188","pdf_url":null,"source":{"id":"https://openalex.org/S4404663975","display_name":"Proceedings of the ACM on software engineering.","issn_l":"2994-970X","issn":["2994-970X"],"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/P4310319798","host_organization_name":"Association for Computing Machinery","host_organization_lineage":["https://openalex.org/P4310319798"],"host_organization_lineage_names":["Association for Computing Machinery"],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the ACM on Software Engineering","raw_type":"journal-article"},"sustainable_development_goals":[],"awards":[{"id":"https://openalex.org/G2382549464","display_name":null,"funder_award_id":"No. 62402423","funder_id":"https://openalex.org/F4320321001","funder_display_name":"National Natural Science Foundation of China"},{"id":"https://openalex.org/G3546321117","display_name":null,"funder_award_id":"No. 226202400143","funder_id":"https://openalex.org/F4320335787","funder_display_name":"Fundamental Research Funds for the Central Universities"}],"funders":[{"id":"https://openalex.org/F4320321001","display_name":"National Natural Science Foundation of China","ror":"https://ror.org/01h0zpd94"},{"id":"https://openalex.org/F4320335787","display_name":"Fundamental Research Funds for the Central Universities","ror":null}],"has_content":{"grobid_xml":false,"pdf":false},"content_urls":null,"referenced_works_count":43,"referenced_works":["https://openalex.org/W2070970642","https://openalex.org/W2099425933","https://openalex.org/W2180612164","https://openalex.org/W2282821441","https://openalex.org/W2579698096","https://openalex.org/W2749008552","https://openalex.org/W2799420851","https://openalex.org/W2890991187","https://openalex.org/W2897937925","https://openalex.org/W2949128310","https://openalex.org/W2963165251","https://openalex.org/W2996851481","https://openalex.org/W3015481738","https://openalex.org/W3108623714","https://openalex.org/W3109966548","https://openalex.org/W3116637551","https://openalex.org/W3118658046","https://openalex.org/W3133719257","https://openalex.org/W3168097936","https://openalex.org/W4210700090","https://openalex.org/W4226294137","https://openalex.org/W4237192363","https://openalex.org/W4239035626","https://openalex.org/W4281385582","https://openalex.org/W4285586654","https://openalex.org/W4293999304","https://openalex.org/W4301880089","https://openalex.org/W4313027558","https://openalex.org/W4313203541","https://openalex.org/W4319451764","https://openalex.org/W4383221378","https://openalex.org/W4384154425","https://openalex.org/W4388856819","https://openalex.org/W4391285994","https://openalex.org/W4392182340","https://openalex.org/W4394745954","https://openalex.org/W4402457354","https://openalex.org/W4403918249","https://openalex.org/W4404792849","https://openalex.org/W4408219068","https://openalex.org/W4410356978","https://openalex.org/W4413680173","https://openalex.org/W7155371063"],"related_works":[],"abstract_inverted_index":{"Binary":[0],"code":[1,77,152],"similarity":[2],"detection":[3,17,204],"(BCSD)":[4],"serves":[5],"as":[6],"a":[7,116,142],"fundamental":[8,216],"technique":[9],"for":[10,154,183,227],"various":[11,43],"software":[12],"engineering":[13],"tasks,":[14],"e.g.,":[15],"vulnerability":[16,203],"and":[18,88,205,223],"classification.":[19],"Attacks":[20],"against":[21,59],"such":[22,99],"BCSD":[23,113,221],"models":[24,34,58,114],"have":[25,41,64],"therefore":[26],"drawn":[27],"extensive":[28],"attention,":[29],"aiming":[30],"at":[31],"misleading":[32],"the":[33,54,57,79,110,132,138,157,165,170,181,192,209,224],"to":[35,45,52,74,85,102,136,141,149,189],"generate":[36],"erroneous":[37],"predictions.":[38],"Prior":[39],"works":[40],"explored":[42],"approaches":[44],"generating":[46],"semantic-preserving":[47],"variants,":[48],"i.e.,":[49],"adversarial":[50,60],"samples,":[51],"evaluate":[53],"robustness":[55,217],"of":[56,112,195,212],"attacks.":[61],"However,":[62],"they":[63],"mainly":[65],"relied":[66],"on":[67,128,202],"heuristic":[68],"criteria":[69],"or":[70,176],"iterative":[71],"greedy":[72],"algorithms":[73],"locate":[75],"salient":[76],"influencing":[78],"model":[80,122],"output,":[81],"which":[82],"often":[83],"leads":[84],"inefficient":[86],"search":[87],"high":[89,97],"computational":[90],"cost.":[91],"Moreover,":[92],"when":[93],"processing":[94],"programs":[95],"with":[96],"complexities,":[98],"attacks":[100,130,167],"tend":[101],"be":[103],"time-consuming.":[104],"In":[105,124],"this":[106],"work,":[107],"we":[108,126],"unveil":[109],"fragility":[111],"through":[115],"novel":[117],"attack":[118,133,146,171],"framework":[119],"guided":[120],"by":[121],"explanations.":[123],"particular,":[125],"focus":[127],"targeted":[129],"where":[131],"goal":[134],"is":[135],"mislead":[137],"model\u2019s":[139],"predictions":[140],"specific":[143],"target.":[144],"Our":[145,198],"leverages":[147],"explainers":[148],"pinpoint":[150],"critical":[151],"snippet":[153],"perturbations,":[155],"reducing":[156],"exploration":[158],"overhead.":[159],"The":[160],"evaluation":[161],"results":[162],"demonstrate":[163,208],"that":[164],"proposed":[166],"effectively":[168],"improve":[169],"efficiency,":[172],"while":[173],"maintaining":[174],"comparable":[175],"higher":[177],"success":[178],"rates.":[179],"Importantly,":[180],"speedup":[182],"perturbation":[184],"target":[185],"selection":[186],"achieves":[187],"up":[188],"63.66\u00d7,":[190],"demonstrating":[191],"practical":[193],"value":[194],"explanation-guided":[196],"localization.":[197],"real-world":[199],"case":[200],"studies":[201],"classification":[206],"further":[207],"security":[210],"implications":[211],"our":[213],"attacks,":[214],"highlighting":[215],"limitations":[218],"in":[219],"current":[220],"models,":[222],"urgent":[225],"need":[226],"more":[228],"robust":[229],"designs.":[230]},"counts_by_year":[],"updated_date":"2026-07-02T06:12:58.138171","created_date":"2026-07-01T00:00:00"}