{"id":"https://openalex.org/W7160610425","doi":"https://doi.org/10.1186/s42400-026-00596-1","title":"CryptoBinaryRz: a binary detection framework based on regional centralization dynamic analysis of cryptographic misuse","display_name":"CryptoBinaryRz: a binary detection framework based on regional centralization dynamic analysis of cryptographic misuse","publication_year":2026,"publication_date":"2026-05-08","ids":{"openalex":"https://openalex.org/W7160610425","doi":"https://doi.org/10.1186/s42400-026-00596-1"},"language":"en","primary_location":{"id":"doi:10.1186/s42400-026-00596-1","is_oa":true,"landing_page_url":"https://doi.org/10.1186/s42400-026-00596-1","pdf_url":"https://link.springer.com/content/pdf/10.1186/s42400-026-00596-1.pdf","source":{"id":"https://openalex.org/S3035238565","display_name":"Cybersecurity","issn_l":"2523-3246","issn":["2523-3246"],"is_oa":true,"is_in_doaj":true,"is_core":true,"host_organization":"https://openalex.org/P4310319965","host_organization_name":"Springer Nature","host_organization_lineage":["https://openalex.org/P4310319965"],"host_organization_lineage_names":["Springer Nature"],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Cybersecurity","raw_type":"journal-article"},"type":"article","indexed_in":["crossref","doaj"],"open_access":{"is_oa":true,"oa_status":"diamond","oa_url":"https://link.springer.com/content/pdf/10.1186/s42400-026-00596-1.pdf","any_repository_has_fulltext":true},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5135689001","display_name":"Xi Luo","orcid":null},"institutions":[{"id":"https://openalex.org/I4210106808","display_name":"Guangzhou Institute of Advanced Technology","ror":"https://ror.org/01vcw4681","country_code":"CN","type":"education","lineage":["https://openalex.org/I4210106808"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Xi Luo","raw_affiliation_strings":["Cyberspace Institute of Advanced Technology, Guangzhou University, 72 Zhiming Road, Longhu Subdistrict, Guangzhou, 510555, Guangdong, China"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Cyberspace Institute of Advanced Technology, Guangzhou University, 72 Zhiming Road, Longhu Subdistrict, Guangzhou, 510555, Guangdong, China","institution_ids":["https://openalex.org/I4210106808"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5126906504","display_name":"Z. Zhang","orcid":null},"institutions":[{"id":"https://openalex.org/I4210106808","display_name":"Guangzhou Institute of Advanced Technology","ror":"https://ror.org/01vcw4681","country_code":"CN","type":"education","lineage":["https://openalex.org/I4210106808"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Zecheng Zhang","raw_affiliation_strings":["Cyberspace Institute of Advanced Technology, Guangzhou University, 72 Zhiming Road, Longhu Subdistrict, Guangzhou, 510555, Guangdong, China"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Cyberspace Institute of Advanced Technology, Guangzhou University, 72 Zhiming Road, Longhu Subdistrict, Guangzhou, 510555, Guangdong, China","institution_ids":["https://openalex.org/I4210106808"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5100411650","display_name":"Lihua Yin","orcid":"https://orcid.org/0000-0001-8829-4442"},"institutions":[{"id":"https://openalex.org/I4210106808","display_name":"Guangzhou Institute of Advanced Technology","ror":"https://ror.org/01vcw4681","country_code":"CN","type":"education","lineage":["https://openalex.org/I4210106808"]}],"countries":["CN"],"is_corresponding":true,"raw_author_name":"Lihua Yin","raw_affiliation_strings":["Cyberspace Institute of Advanced Technology, Guangzhou University, 72 Zhiming Road, Longhu Subdistrict, Guangzhou, 510555, Guangdong, China"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Cyberspace Institute of Advanced Technology, Guangzhou University, 72 Zhiming Road, Longhu Subdistrict, Guangzhou, 510555, Guangdong, China","institution_ids":["https://openalex.org/I4210106808"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5081221505","display_name":"Shi Jia","orcid":null},"institutions":[{"id":"https://openalex.org/I4210156404","display_name":"Institute of Information Engineering","ror":"https://ror.org/04r53se39","country_code":"CN","type":"facility","lineage":["https://openalex.org/I19820366","https://openalex.org/I4210156404"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Shijie Jia","raw_affiliation_strings":["State Key Laboratory of Cyberspace Security Defense, Institute of Information Engineering, Chinese Academy of Sciences, 19 Shucun Road, Haidian District, Beijing, 100085, China"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"State Key Laboratory of Cyberspace Security Defense, Institute of Information Engineering, Chinese Academy of Sciences, 19 Shucun Road, Haidian District, Beijing, 100085, China","institution_ids":["https://openalex.org/I4210156404"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5135716393","display_name":"Runda Huang","orcid":null},"institutions":[{"id":"https://openalex.org/I4210106808","display_name":"Guangzhou Institute of Advanced Technology","ror":"https://ror.org/01vcw4681","country_code":"CN","type":"education","lineage":["https://openalex.org/I4210106808"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Runda Huang","raw_affiliation_strings":["Cyberspace Institute of Advanced Technology, Guangzhou University, 72 Zhiming Road, Longhu Subdistrict, Guangzhou, 510555, Guangdong, China"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Cyberspace Institute of Advanced Technology, Guangzhou University, 72 Zhiming Road, Longhu Subdistrict, Guangzhou, 510555, Guangdong, China","institution_ids":["https://openalex.org/I4210106808"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5032563085","display_name":"Haiyang Zhang","orcid":"https://orcid.org/0000-0002-8617-6482"},"institutions":[{"id":"https://openalex.org/I4210106808","display_name":"Guangzhou Institute of Advanced Technology","ror":"https://ror.org/01vcw4681","country_code":"CN","type":"education","lineage":["https://openalex.org/I4210106808"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Haiyang Zhang","raw_affiliation_strings":["Cyberspace Institute of Advanced Technology, Guangzhou University, 72 Zhiming Road, Longhu Subdistrict, Guangzhou, 510555, Guangdong, China"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Cyberspace Institute of Advanced Technology, Guangzhou University, 72 Zhiming Road, Longhu Subdistrict, Guangzhou, 510555, Guangdong, China","institution_ids":["https://openalex.org/I4210106808"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":2,"corresponding_author_ids":["https://openalex.org/A5100411650"],"corresponding_institution_ids":["https://openalex.org/I4210106808"],"apc_list":null,"apc_paid":null,"fwci":0.0,"has_fulltext":true,"cited_by_count":0,"citation_normalized_percentile":{"value":0.55985387,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":null,"biblio":{"volume":"9","issue":"1","first_page":null,"last_page":null},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11986","display_name":"Scientific Computing and Data Management","score":0.5432000160217285,"subfield":{"id":"https://openalex.org/subfields/1802","display_name":"Information Systems and Management"},"field":{"id":"https://openalex.org/fields/18","display_name":"Decision Sciences"},"domain":{"id":"https://openalex.org/domains/2","display_name":"Social Sciences"}},"topics":[{"id":"https://openalex.org/T11986","display_name":"Scientific Computing and Data Management","score":0.5432000160217285,"subfield":{"id":"https://openalex.org/subfields/1802","display_name":"Information Systems and Management"},"field":{"id":"https://openalex.org/fields/18","display_name":"Decision Sciences"},"domain":{"id":"https://openalex.org/domains/2","display_name":"Social Sciences"}},{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":0.10199999809265137,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11424","display_name":"Security and Verification in Computing","score":0.061400000005960464,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/cryptography","display_name":"Cryptography","score":0.6748999953269958},{"id":"https://openalex.org/keywords/cryptographic-primitive","display_name":"Cryptographic primitive","score":0.6366000175476074},{"id":"https://openalex.org/keywords/credibility","display_name":"Credibility","score":0.5867999792098999},{"id":"https://openalex.org/keywords/scalability","display_name":"Scalability","score":0.5625},{"id":"https://openalex.org/keywords/context","display_name":"Context (archaeology)","score":0.4745999872684479},{"id":"https://openalex.org/keywords/static-analysis","display_name":"Static analysis","score":0.4406000077724457},{"id":"https://openalex.org/keywords/misuse-detection","display_name":"Misuse detection","score":0.4348999857902527},{"id":"https://openalex.org/keywords/cryptographic-protocol","display_name":"Cryptographic protocol","score":0.41909998655319214},{"id":"https://openalex.org/keywords/graph","display_name":"Graph","score":0.3977000117301941}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.8026999831199646},{"id":"https://openalex.org/C178489894","wikidata":"https://www.wikidata.org/wiki/Q8789","display_name":"Cryptography","level":2,"score":0.6748999953269958},{"id":"https://openalex.org/C15927051","wikidata":"https://www.wikidata.org/wiki/Q246593","display_name":"Cryptographic primitive","level":4,"score":0.6366000175476074},{"id":"https://openalex.org/C2780224610","wikidata":"https://www.wikidata.org/wiki/Q1530061","display_name":"Credibility","level":2,"score":0.5867999792098999},{"id":"https://openalex.org/C48044578","wikidata":"https://www.wikidata.org/wiki/Q727490","display_name":"Scalability","level":2,"score":0.5625},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.510200023651123},{"id":"https://openalex.org/C2779343474","wikidata":"https://www.wikidata.org/wiki/Q3109175","display_name":"Context (archaeology)","level":2,"score":0.4745999872684479},{"id":"https://openalex.org/C97686452","wikidata":"https://www.wikidata.org/wiki/Q7604153","display_name":"Static analysis","level":2,"score":0.4406000077724457},{"id":"https://openalex.org/C2776973144","wikidata":"https://www.wikidata.org/wiki/Q6880649","display_name":"Misuse detection","level":4,"score":0.4348999857902527},{"id":"https://openalex.org/C33884865","wikidata":"https://www.wikidata.org/wiki/Q1254335","display_name":"Cryptographic protocol","level":3,"score":0.41909998655319214},{"id":"https://openalex.org/C80444323","wikidata":"https://www.wikidata.org/wiki/Q2878974","display_name":"Theoretical computer science","level":1,"score":0.4041000008583069},{"id":"https://openalex.org/C132525143","wikidata":"https://www.wikidata.org/wiki/Q141488","display_name":"Graph","level":2,"score":0.3977000117301941},{"id":"https://openalex.org/C38369872","wikidata":"https://www.wikidata.org/wiki/Q7445009","display_name":"Security analysis","level":2,"score":0.3840000033378601},{"id":"https://openalex.org/C2777735758","wikidata":"https://www.wikidata.org/wiki/Q817765","display_name":"Path (computing)","level":2,"score":0.3734000027179718},{"id":"https://openalex.org/C120314980","wikidata":"https://www.wikidata.org/wiki/Q180634","display_name":"Distributed computing","level":1,"score":0.35600000619888306},{"id":"https://openalex.org/C124101348","wikidata":"https://www.wikidata.org/wiki/Q172491","display_name":"Data mining","level":1,"score":0.33410000801086426},{"id":"https://openalex.org/C35525427","wikidata":"https://www.wikidata.org/wiki/Q745881","display_name":"Intrusion detection system","level":2,"score":0.3325999975204468},{"id":"https://openalex.org/C106937863","wikidata":"https://www.wikidata.org/wiki/Q7236518","display_name":"Power graph analysis","level":3,"score":0.3271999955177307},{"id":"https://openalex.org/C2777904410","wikidata":"https://www.wikidata.org/wiki/Q7397","display_name":"Software","level":2,"score":0.31839999556541443},{"id":"https://openalex.org/C48372109","wikidata":"https://www.wikidata.org/wiki/Q3913","display_name":"Binary number","level":2,"score":0.3179999887943268},{"id":"https://openalex.org/C137822555","wikidata":"https://www.wikidata.org/wiki/Q2587068","display_name":"Information sensitivity","level":2,"score":0.29350000619888306},{"id":"https://openalex.org/C26517878","wikidata":"https://www.wikidata.org/wiki/Q228039","display_name":"Key (lock)","level":2,"score":0.29280000925064087},{"id":"https://openalex.org/C182590292","wikidata":"https://www.wikidata.org/wiki/Q989632","display_name":"Network security","level":2,"score":0.2854999899864197},{"id":"https://openalex.org/C88230418","wikidata":"https://www.wikidata.org/wiki/Q131476","display_name":"Graph theory","level":2,"score":0.27079999446868896},{"id":"https://openalex.org/C1009929","wikidata":"https://www.wikidata.org/wiki/Q179550","display_name":"Software bug","level":3,"score":0.26440000534057617},{"id":"https://openalex.org/C2776401178","wikidata":"https://www.wikidata.org/wiki/Q12050496","display_name":"Feature (linguistics)","level":2,"score":0.26440000534057617},{"id":"https://openalex.org/C153701036","wikidata":"https://www.wikidata.org/wiki/Q659974","display_name":"Trustworthiness","level":2,"score":0.25049999356269836}],"mesh":[],"locations_count":2,"locations":[{"id":"doi:10.1186/s42400-026-00596-1","is_oa":true,"landing_page_url":"https://doi.org/10.1186/s42400-026-00596-1","pdf_url":"https://link.springer.com/content/pdf/10.1186/s42400-026-00596-1.pdf","source":{"id":"https://openalex.org/S3035238565","display_name":"Cybersecurity","issn_l":"2523-3246","issn":["2523-3246"],"is_oa":true,"is_in_doaj":true,"is_core":true,"host_organization":"https://openalex.org/P4310319965","host_organization_name":"Springer Nature","host_organization_lineage":["https://openalex.org/P4310319965"],"host_organization_lineage_names":["Springer Nature"],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Cybersecurity","raw_type":"journal-article"},{"id":"pmh:oai:doaj.org/article:460d543f4962432592bbf046abee861e","is_oa":true,"landing_page_url":"https://doaj.org/article/460d543f4962432592bbf046abee861e","pdf_url":null,"source":{"id":"https://openalex.org/S4306401280","display_name":"DOAJ (DOAJ: Directory of Open Access Journals)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":null,"host_organization_name":null,"host_organization_lineage":[],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by-sa","license_id":"https://openalex.org/licenses/cc-by-sa","version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":"Cybersecurity, Vol 9, Iss 1 (2026)","raw_type":"article"}],"best_oa_location":{"id":"doi:10.1186/s42400-026-00596-1","is_oa":true,"landing_page_url":"https://doi.org/10.1186/s42400-026-00596-1","pdf_url":"https://link.springer.com/content/pdf/10.1186/s42400-026-00596-1.pdf","source":{"id":"https://openalex.org/S3035238565","display_name":"Cybersecurity","issn_l":"2523-3246","issn":["2523-3246"],"is_oa":true,"is_in_doaj":true,"is_core":true,"host_organization":"https://openalex.org/P4310319965","host_organization_name":"Springer Nature","host_organization_lineage":["https://openalex.org/P4310319965"],"host_organization_lineage_names":["Springer Nature"],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Cybersecurity","raw_type":"journal-article"},"sustainable_development_goals":[{"score":0.6929605007171631,"id":"https://metadata.un.org/sdg/16","display_name":"Peace, Justice and strong institutions"}],"awards":[{"id":"https://openalex.org/G4937362321","display_name":null,"funder_award_id":"2022YFB3104100","funder_id":"https://openalex.org/F4320321001","funder_display_name":"National Natural Science Foundation of China"},{"id":"https://openalex.org/G8640138845","display_name":null,"funder_award_id":"U25B2026","funder_id":"https://openalex.org/F4320321001","funder_display_name":"National Natural Science Foundation of China"}],"funders":[{"id":"https://openalex.org/F4320306076","display_name":"National Science Foundation","ror":"https://ror.org/021nxhr62"},{"id":"https://openalex.org/F4320321001","display_name":"National Natural Science Foundation of China","ror":"https://ror.org/01h0zpd94"}],"has_content":{"grobid_xml":true,"pdf":true},"content_urls":{"pdf":"https://content.openalex.org/works/W7160610425.pdf","grobid_xml":"https://content.openalex.org/works/W7160610425.grobid-xml"},"referenced_works_count":25,"referenced_works":["https://openalex.org/W1551023902","https://openalex.org/W1572578464","https://openalex.org/W1574570499","https://openalex.org/W1656731780","https://openalex.org/W2129388154","https://openalex.org/W2140809377","https://openalex.org/W2248088716","https://openalex.org/W2262479410","https://openalex.org/W2302114600","https://openalex.org/W2400329213","https://openalex.org/W2536707834","https://openalex.org/W2893210661","https://openalex.org/W2979528578","https://openalex.org/W2985320478","https://openalex.org/W3022144859","https://openalex.org/W3039516369","https://openalex.org/W3182110757","https://openalex.org/W3196322064","https://openalex.org/W4241650197","https://openalex.org/W4243248865","https://openalex.org/W4311165732","https://openalex.org/W4391724777","https://openalex.org/W4392904724","https://openalex.org/W4399119638","https://openalex.org/W4402957840"],"related_works":[],"abstract_inverted_index":{"Abstract":[0],"The":[1],"correct":[2],"application":[3],"of":[4,89],"cryptography":[5],"is":[6],"crucial":[7],"for":[8,72,245],"protecting":[9],"confidentiality,":[10],"integrity,":[11],"and":[12,34,64,86,118,144,161,186,204,217,241],"sensitive":[13],"information":[14],"in":[15,25],"modern":[16],"software":[17],"systems.":[18],"However,":[19],"cryptographic":[20,73,102,138,174,202,246],"APIs":[21],"are":[22,29,38],"frequently":[23],"misused":[24],"practice":[26],"because":[27],"they":[28],"difficult":[30,82],"to":[31,59,126],"apply":[32],"correctly":[33],"their":[35],"security":[36],"implications":[37],"often":[39],"highly":[40],"context":[41],"dependent.":[42],"Existing":[43],"misuse":[44,66,74,103,120,175,220,247],"detection":[45,53,104,215,248],"research":[46],"mainly":[47],"targets":[48],"source":[49],"code,":[50],"while":[51,222],"binary-level":[52,101,236],"remains":[54],"underexplored":[55],"despite":[56],"its":[57],"ability":[58],"access":[60],"concrete":[61],"runtime":[62,184],"states":[63],"validate":[65],"conditions":[67],"more":[68,242],"directly.":[69],"Binary":[70],"analysis":[71,125,180,226,237],"faces":[75],"three":[76],"major":[77],"challenges:":[78],"severe":[79],"path":[80,114],"explosion,":[81],"parameter":[83,131],"provenance":[84,151],"recovery,":[85],"limited":[87],"credibility":[88],"purely":[90],"static":[91],"results.":[92],"To":[93],"address":[94],"these":[95],"challenges,":[96],"we":[97],"present":[98],"CryptoBinaryRz,":[99],"a":[100,178],"framework":[105,157],"that":[106,183,210,235],"combines":[107],"locality-based":[108],"region":[109],"construction,":[110],"context-aware":[111],"dynamic":[112,179],"provenance,":[113],"reuse-aware":[115],"state":[116],"management,":[117],"constraint-based":[119],"verification.":[121,195],"Our":[122],"method":[123],"constrains":[124],"sink-centered":[127],"local":[128,187],"regions,":[129],"recovers":[130],"influence":[132],"through":[133,141],"symbolic":[134],"mutation,":[135],"restores":[136],"nearby":[137],"calling":[139,188],"environments":[140,189],"role":[142],"abstraction,":[143],"reuses":[145],"semantically":[146],"equivalent":[147],"paths":[148],"during":[149,194],"layered":[150],"expansion.":[152],"In":[153],"this":[154],"way,":[155],"the":[156,225],"improves":[158],"both":[159],"scalability":[160],"semantic":[162],"precision":[163],"without":[164],"relying":[165],"on":[166,197],"full":[167],"control-flow":[168],"graph":[169],"construction.":[170],"We":[171],"also":[172],"reformulate":[173],"rules":[176],"under":[177],"setting":[181],"so":[182],"contexts":[185],"can":[190,238],"be":[191],"jointly":[192],"considered":[193],"Experiments":[196],"175":[198],"samples":[199],"with":[200,229],"isolated":[201],"behaviors":[203],"11":[205],"real-world":[206],"GitHub":[207],"projects":[208],"show":[209],"CryptoBinaryRz":[211],"achieves":[212],"over":[213],"95%":[214],"accuracy":[216],"identifies":[218],"204":[219],"instances,":[221],"substantially":[223],"reducing":[224],"cost":[227],"associated":[228],"large":[230],"binaries.":[231],"These":[232],"results":[233],"suggest":[234],"provide":[239],"richer":[240],"trustworthy":[243],"evidence":[244],"than":[249],"source-level":[250],"inspection":[251],"alone.":[252]},"counts_by_year":[],"updated_date":"2026-05-21T06:26:12.895304","created_date":"2026-05-09T00:00:00"}