{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2025,6,24]],"date-time":"2025-06-24T07:10:29Z","timestamp":1750749029919,"version":"3.40.3"},"publisher-location":"Singapore","reference-count":34,"publisher":"Springer Nature Singapore","isbn-type":[{"type":"print","value":"9789819986637"},{"type":"electronic","value":"9789819986644"}],"license":[{"start":{"date-parts":[[2023,12,15]],"date-time":"2023-12-15T00:00:00Z","timestamp":1702598400000},"content-version":"tdm","delay-in-days":0,"URL":"https:\/\/www.springernature.com\/gp\/researchers\/text-and-data-mining"},{"start":{"date-parts":[[2023,12,15]],"date-time":"2023-12-15T00:00:00Z","timestamp":1702598400000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/www.springernature.com\/gp\/researchers\/text-and-data-mining"}],"content-domain":{"domain":["link.springer.com"],"crossmark-restriction":false},"short-container-title":[],"published-print":{"date-parts":[[2024]]},"DOI":"10.1007\/978-981-99-8664-4_6","type":"book-chapter","created":{"date-parts":[[2023,12,14]],"date-time":"2023-12-14T06:05:13Z","timestamp":1702533913000},"page":"92-111","update-policy":"https:\/\/doi.org\/10.1007\/springer_crossmark_policy","source":"Crossref","is-referenced-by-count":1,"title":["SeHBPL: Behavioral Semantics-Based Patch Presence Test for\u00a0Binaries"],"prefix":"10.1007","author":[{"given":"Jintao","family":"Huang","sequence":"first","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Gaosheng","family":"Wang","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Zhiqiang","family":"Shi","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Fei","family":"Lv","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Weidong","family":"Zhang","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Shichao","family":"Lv","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]}],"member":"297","published-online":{"date-parts":[[2023,12,15]]},"reference":[{"key":"6_CR1","unstructured":"Synopsys, I.: 2022 open source security and analysis report (2022). https:\/\/www.synopsys.com\/software-integrity\/resources\/analyst-reports\/open-source-security-risk-analysis.html. Accessed 15 Apr 2022"},{"key":"6_CR2","doi-asserted-by":"crossref","unstructured":"Jang, J., Agrawal, A., Brumley, D.: Redebug: finding unpatched code clones in entire OS distributions. In: IEEE Symposium on Security and Privacy, pp. 48\u201362. IEEE (2012)","DOI":"10.1109\/SP.2012.13"},{"key":"6_CR3","doi-asserted-by":"crossref","unstructured":"Kim, S., Woo, S., Lee, H., Oh, H.: Vuddy: a scalable approach for vulnerable code clone discovery. In: IEEE Symposium on Security and Privacy (SP), pp. 595\u2013614. IEEE (2017)","DOI":"10.1109\/SP.2017.62"},{"key":"6_CR4","doi-asserted-by":"crossref","unstructured":"Li, Z., Zou, D., Xu, S., Jin, H., Qi, H., Hu, J.: Vulpecker: an automated vulnerability detection system based on code similarity analysis. In: Proceedings of the 32nd Annual Conference on Computer Security Applications, pp. 201\u2013213 (2016)","DOI":"10.1145\/2991079.2991102"},{"key":"6_CR5","unstructured":"Synopsys, I.: The heartbleed bug (2020). https:\/\/heartbleed.com\/. Accessed 8 Apr 2022"},{"key":"6_CR6","unstructured":"Ltd. N. Half a million widely trusted websites vulnerable to heartbleed bug (2014). https:\/\/news.netcraft.com\/archives\/2014\/04\/08\/half-a-million-widely-trusted-websites-vulnerable-to-heartbleed-bug.html. Accessed 8 Apr 2022"},{"key":"6_CR7","doi-asserted-by":"crossref","unstructured":"Duan, R., Bijlani, A., Xu, M., Kim, T., Lee, W.: Identifying open-source license violation and 1-day security risk at large scale. In: Proceedings of the 2017 ACM SIGSAC Conference on Computer and Communications Security, pp. 2169\u20132185 (2017)","DOI":"10.1145\/3133956.3134048"},{"key":"6_CR8","doi-asserted-by":"crossref","unstructured":"Xu, Y., Xu, Z., Chen, B., Song, F., Liu, Y., Liu, T.: Patch based vulnerability matching for binary programs. In: Proceedings of the 29th ACM SIGSOFT International Symposium on Software Testing and Analysis, pp. 376\u2013387 (2020)","DOI":"10.1145\/3395363.3397361"},{"key":"6_CR9","doi-asserted-by":"crossref","unstructured":"Jiang, Z., et al.: PDiff: semantic-based patch presence testing for downstream kernels. In; Proceedings of the 2020 ACM SIGSAC Conference on Computer and Communications Security, pp. 1149\u20131163 (2020)","DOI":"10.1145\/3372297.3417240"},{"key":"6_CR10","doi-asserted-by":"crossref","unstructured":"Sun, P., Yan, Q., Zhou, H., Li, J.: Osprey: a fast and accurate patch presence test framework for binaries. Comput. Commun. 173, 95\u2013106, 2021. https:\/\/www.sciencedirect.com\/science\/article\/pii\/S0140366421001079","DOI":"10.1016\/j.comcom.2021.03.011"},{"key":"6_CR11","unstructured":"Costin, A., Zaddach, J., Francillon, A., Balzarotti, D.: $$\\{$$Large-Scale$$\\}$$ analysis of the security of embedded firmwares. In: 23rd USENIX Security Symposium (USENIX Security 14), pp. 95\u2013110 (2014)"},{"key":"6_CR12","doi-asserted-by":"crossref","unstructured":"Eschweiler, S., Yakdan, K., Gerhards-Padilla, E.: discovRE: efficient cross-architecture identification of bugs in binary code. In: NDSS, vol. 52, pp. 58\u201379 (2016)","DOI":"10.14722\/ndss.2016.23185"},{"key":"6_CR13","doi-asserted-by":"crossref","unstructured":"Feng, Q., Zhou, R., Xu, C., Cheng, Y., Testa, B., Yin, H.: Scalable graph-based bug search for firmware images. In: Proceedings of the 2016 ACM SIGSAC Conference on Computer and Communications Security, pp. 480\u2013491 (2016)","DOI":"10.1145\/2976749.2978370"},{"key":"6_CR14","doi-asserted-by":"crossref","unstructured":"Khoo, W.M., Mycroft, A., Anderson, R.: Rendezvous: a search engine for binary code. In: 2013 10th Working Conference on Mining Software Repositories (MSR), pp. 329\u2013338. IEEE (2013)","DOI":"10.1109\/MSR.2013.6624046"},{"key":"6_CR15","doi-asserted-by":"crossref","unstructured":"Tian, Y., Lawall, J., Lo, D.: Identifying Linux bug fixing patches. In: 34th International Conference on Software Engineering (ICSE), pp. 386\u2013396. IEEE (2012)","DOI":"10.1109\/ICSE.2012.6227176"},{"key":"6_CR16","unstructured":"GNU, \"Optimize options for GCC\" (2022). https:\/\/gcc.gnu.org\/onlinedocs\/gcc\/Optimize-Options.html. Accessed 8 Apr 2022"},{"key":"6_CR17","doi-asserted-by":"crossref","unstructured":"Shoshitaishvili, Y., et al.: SoK: (State of) the art of war: offensive techniques in binary analysis. In: IEEE Symposium on Security and Privacy (2016)","DOI":"10.1109\/SP.2016.17"},{"key":"6_CR18","unstructured":"Chen, J., Hu, W., Zhang, L., Hao, D., Khurshid, S., Zhang, L.: Learning to accelerate symbolic execution via code transformation. In: 32nd European Conference on Object-Oriented Programming (ECOOP 2018). Schloss Dagstuhl-Leibniz-Zentrum fuer Informatik (2018)"},{"key":"6_CR19","doi-asserted-by":"crossref","unstructured":"Zhang, C., Groce, A., Alipour, M. A.: Using test case reduction and prioritization to improve symbolic execution. In: Proceedings of the 2014 International Symposium on Software Testing and Analysis, pp. 160\u2013170 (2014)","DOI":"10.1145\/2610384.2610392"},{"key":"6_CR20","doi-asserted-by":"crossref","unstructured":"Liu, B., et al.: $$\\alpha $$diff: cross-version binary code similarity detection with DNN. In: Proceedings of the 33rd ACM\/IEEE International Conference on Automated Software Engineering, pp. 667\u2013678 (2018)","DOI":"10.1145\/3238147.3238199"},{"key":"6_CR21","doi-asserted-by":"crossref","unstructured":"Wang, X., Jhi, Y.-C., Zhu, S., Liu, P.: Detecting software theft via system call based birthmarks. In: Annual Computer Security Applications Conference, pp. 149\u2013158. IEEE (2009)","DOI":"10.1109\/ACSAC.2009.24"},{"key":"6_CR22","doi-asserted-by":"crossref","unstructured":"S\u00e6bj\u00f8rnsen, A., Willcock, J., Panas, T., Quinlan, D., Su, Z.: Detecting code clones in binary executables. In: Proceedings of the Eighteenth International Symposium on Software Testing and Analysis, pp. 117\u2013128 (2009)","DOI":"10.1145\/1572272.1572287"},{"key":"6_CR23","unstructured":"zynamics, \"Bindiff\" (2004). https:\/\/www.zynamics.com\/bindiff.html. Accessed 15 Apr 2022"},{"key":"6_CR24","doi-asserted-by":"crossref","unstructured":"Bourquin, M., King, A., Robbins, E.: Binslayer: accurate comparison of binary executables. In: Proceedings of the 2nd ACM SIGPLAN Program Protection and Reverse Engineering Workshop, pp. 1\u201310 (2013)","DOI":"10.1145\/2430553.2430557"},{"key":"6_CR25","doi-asserted-by":"crossref","unstructured":"Xu, X., Liu, C., Feng, Q., Yin, H., Song, L., Song, D.: Neural network-based graph embedding for cross-platform binary code similarity detection. In: Proceedings of the 2017 ACM SIGSAC Conference on Computer and Communications Security, pp. 363\u2013376 (2017)","DOI":"10.1145\/3133956.3134018"},{"key":"6_CR26","doi-asserted-by":"crossref","unstructured":"Ding, S.H., Fung, B.C., Charland, P.: Asm2vec: boosting static representation robustness for binary clone search against code obfuscation and compiler optimization. In: IEEE Symposium on Security and Privacy (SP), pp. 472\u2013489. IEEE (2019)","DOI":"10.1109\/SP.2019.00003"},{"key":"6_CR27","doi-asserted-by":"crossref","unstructured":"Duan, Y., Li, X., Wang, J., Yin, H.: DeepBinDiff: learning program-wide code representations for binary diffing. In: Network and Distributed System Security Symposium (2020)","DOI":"10.14722\/ndss.2020.24311"},{"key":"6_CR28","doi-asserted-by":"crossref","unstructured":"Yu, Z., Cao, R., Tang, Q., Nie, S., Huang, J., Wu, S.: Order matters: semantic-aware neural networks for binary code similarity detection. In: AAAI Conference on Artificial Intelligence (2020)","DOI":"10.1609\/aaai.v34i01.5466"},{"issue":"1","key":"6_CR29","doi-asserted-by":"publisher","first-page":"1","DOI":"10.1186\/s42400-021-00085-7","volume":"4","author":"G Ban","year":"2021","unstructured":"Ban, G., Xu, L., Xiao, Y., Li, X., Yuan, Z., Huo, W.: B2smatcher: fine-grained version identification of open-source software in binary files. Cybersecurity 4(1), 1\u201321 (2021)","journal-title":"Cybersecurity"},{"key":"6_CR30","doi-asserted-by":"crossref","unstructured":"Backes, M., Bugiel, S., Derr, E.: Reliable third-party library detection in android and its security applications. In: Proceedings of the 2016 ACM SIGSAC Conference on Computer and Communications Security, pp. 356\u2013367 (2016)","DOI":"10.1145\/2976749.2978333"},{"key":"6_CR31","series-title":"Lecture Notes in Computer Science","doi-asserted-by":"publisher","first-page":"369","DOI":"10.1007\/3-540-48184-2_32","volume-title":"Advances in Cryptology \u2014 CRYPTO \u201987","author":"RC Merkle","year":"1988","unstructured":"Merkle, R.C.: A digital signature based on a conventional encryption function. In: Pomerance, C. (ed.) CRYPTO 1987. LNCS, vol. 293, pp. 369\u2013378. Springer, Heidelberg (1988). https:\/\/doi.org\/10.1007\/3-540-48184-2_32"},{"key":"6_CR32","doi-asserted-by":"crossref","unstructured":"Ma, Z., Wang, H., Guo, Y., Chen, X.: LibRadar: fast and accurate detection of third-party libraries in android apps. In: Proceedings of the 38th International Conference on Software Engineering Companion, pp. 653\u2013656 (2016)","DOI":"10.1145\/2889160.2889178"},{"key":"6_CR33","unstructured":"Bhoraskar, R., et al.: Brahmastra: driving apps to test the security of third-party components. In: 23rd USENIX Security Symposium (USENIX Security 14), pp. 1021\u20131036 (2014)"},{"key":"6_CR34","unstructured":"Zhang, H., Qian, Z.: Precise and accurate patch presence test for binaries. In: 27th USENIX Security Symposium (USENIX Security 18), pp. 887\u2013902 (2018)"}],"container-title":["Lecture Notes in Computer Science","Dependable Software Engineering. Theories, Tools, and Applications"],"original-title":[],"language":"en","link":[{"URL":"https:\/\/link.springer.com\/content\/pdf\/10.1007\/978-981-99-8664-4_6","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2023,12,14]],"date-time":"2023-12-14T06:05:37Z","timestamp":1702533937000},"score":1,"resource":{"primary":{"URL":"https:\/\/link.springer.com\/10.1007\/978-981-99-8664-4_6"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2023,12,15]]},"ISBN":["9789819986637","9789819986644"],"references-count":34,"URL":"https:\/\/doi.org\/10.1007\/978-981-99-8664-4_6","relation":{},"ISSN":["0302-9743","1611-3349"],"issn-type":[{"type":"print","value":"0302-9743"},{"type":"electronic","value":"1611-3349"}],"subject":[],"published":{"date-parts":[[2023,12,15]]},"assertion":[{"value":"15 December 2023","order":1,"name":"first_online","label":"First Online","group":{"name":"ChapterHistory","label":"Chapter History"}},{"value":"SETTA","order":1,"name":"conference_acronym","label":"Conference Acronym","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"International Symposium on Dependable Software Engineering: Theories, Tools, and Applications","order":2,"name":"conference_name","label":"Conference Name","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"Nanjing","order":3,"name":"conference_city","label":"Conference City","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"China","order":4,"name":"conference_country","label":"Conference Country","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"2023","order":5,"name":"conference_year","label":"Conference Year","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"27 November 2023","order":7,"name":"conference_start_date","label":"Conference Start Date","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"29 November 2023","order":8,"name":"conference_end_date","label":"Conference End Date","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"9","order":9,"name":"conference_number","label":"Conference Number","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"setta2023","order":10,"name":"conference_id","label":"Conference ID","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"https:\/\/lcs.ios.ac.cn\/setta2023\/","order":11,"name":"conference_url","label":"Conference URL","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"Single-blind","order":1,"name":"type","label":"Type","group":{"name":"ConfEventPeerReviewInformation","label":"Peer Review Information (provided by the conference organizers)"}},{"value":"Easychair","order":2,"name":"conference_management_system","label":"Conference Management System","group":{"name":"ConfEventPeerReviewInformation","label":"Peer Review Information (provided by the conference organizers)"}},{"value":"78","order":3,"name":"number_of_submissions_sent_for_review","label":"Number of Submissions Sent for Review","group":{"name":"ConfEventPeerReviewInformation","label":"Peer Review Information (provided by the conference organizers)"}},{"value":"24","order":4,"name":"number_of_full_papers_accepted","label":"Number of Full Papers Accepted","group":{"name":"ConfEventPeerReviewInformation","label":"Peer Review Information (provided by the conference organizers)"}},{"value":"0","order":5,"name":"number_of_short_papers_accepted","label":"Number of Short Papers Accepted","group":{"name":"ConfEventPeerReviewInformation","label":"Peer Review Information (provided by the conference organizers)"}},{"value":"31% - The value is computed by the equation \"Number of Full Papers Accepted \/ Number of Submissions Sent for Review * 100\" and then rounded to a whole number.","order":6,"name":"acceptance_rate_of_full_papers","label":"Acceptance Rate of Full Papers","group":{"name":"ConfEventPeerReviewInformation","label":"Peer Review Information (provided by the conference organizers)"}},{"value":"3","order":7,"name":"average_number_of_reviews_per_paper","label":"Average Number of Reviews per Paper","group":{"name":"ConfEventPeerReviewInformation","label":"Peer Review Information (provided by the conference organizers)"}},{"value":"7","order":8,"name":"average_number_of_papers_per_reviewer","label":"Average Number of Papers per Reviewer","group":{"name":"ConfEventPeerReviewInformation","label":"Peer Review Information (provided by the conference organizers)"}},{"value":"Yes","order":9,"name":"external_reviewers_involved","label":"External Reviewers Involved","group":{"name":"ConfEventPeerReviewInformation","label":"Peer Review Information (provided by the conference organizers)"}}]}}