{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2025,4,5]],"date-time":"2025-04-05T19:43:52Z","timestamp":1743882232539,"version":"3.37.3"},"reference-count":41,"publisher":"Institute of Electrical and Electronics Engineers (IEEE)","license":[{"start":{"date-parts":[[2020,1,1]],"date-time":"2020-01-01T00:00:00Z","timestamp":1577836800000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/creativecommons.org\/licenses\/by\/4.0\/legalcode"}],"funder":[{"name":"National Key Research and Development Project of China","award":["2017YFB0802900"],"award-info":[{"award-number":["2017YFB0802900"]}]}],"content-domain":{"domain":[],"crossmark-restriction":false},"short-container-title":["IEEE Access"],"published-print":{"date-parts":[[2020]]},"DOI":"10.1109\/access.2020.2990197","type":"journal-article","created":{"date-parts":[[2020,4,24]],"date-time":"2020-04-24T19:35:25Z","timestamp":1587756925000},"page":"78713-78725","source":"Crossref","is-referenced-by-count":4,"title":["Scalable Static Detection of Use-After-Free Vulnerabilities in Binary Code"],"prefix":"10.1109","volume":"8","author":[{"ORCID":"https:\/\/orcid.org\/0000-0001-5241-0157","authenticated-orcid":false,"given":"Kailong","family":"Zhu","sequence":"first","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-8502-9907","authenticated-orcid":false,"given":"Yuliang","family":"Lu","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Hui","family":"Huang","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]}],"member":"263","reference":[{"key":"ref39","first-page":"941","article-title":"Enforcing forward-edge control-flow integrity in GCC & LLVM","author":"tice","year":"2014","journal-title":"Proc 23rd USENIX Secur Symp USENIX Secur"},{"key":"ref38","doi-asserted-by":"publisher","DOI":"10.14722\/ndss.2014.23287"},{"key":"ref33","doi-asserted-by":"publisher","DOI":"10.1145\/1133981.1134000"},{"key":"ref32","first-page":"177","article-title":"Cling: A memory allocator to mitigate dangling pointers","author":"akritidis","year":"2010","journal-title":"Proc Usenix Secur Symp"},{"key":"ref31","doi-asserted-by":"publisher","DOI":"10.1145\/3134600.3134620"},{"key":"ref30","doi-asserted-by":"publisher","DOI":"10.1145\/1837855.1806657"},{"journal-title":"Exploit Mitigation Improvements in Windows 8","year":"2012","author":"johnson","key":"ref37"},{"key":"ref36","doi-asserted-by":"publisher","DOI":"10.1145\/3064176.3064211"},{"key":"ref35","doi-asserted-by":"publisher","DOI":"10.14722\/ndss.2015.23190"},{"key":"ref34","doi-asserted-by":"publisher","DOI":"10.1145\/1866307.1866371"},{"journal-title":"Hack of Google Adobe Conducted Through Zero-Day IE Flaw","year":"2010","author":"zetter","key":"ref10"},{"key":"ref40","first-page":"112","article-title":"Cyclone: A type-safe dialect of C","volume":"23","author":"grossman","year":"2005","journal-title":"C\/C++ Users J"},{"key":"ref11","first-page":"125","article-title":"Purify: Fast detection of memory leaks and access errors","author":"hastings","year":"1992","journal-title":"Proc Winter Usenix Conf"},{"key":"ref12","doi-asserted-by":"publisher","DOI":"10.1145\/1273442.1250746"},{"key":"ref13","first-page":"309","article-title":"AddressSanitizer: A fast address sanity checker","author":"serebryany","year":"2012","journal-title":"Proc USENIX Annu Tech Conf"},{"key":"ref14","doi-asserted-by":"publisher","DOI":"10.1145\/1321631.1321673"},{"key":"ref15","doi-asserted-by":"publisher","DOI":"10.1007\/s00165-014-0326-7"},{"key":"ref16","doi-asserted-by":"publisher","DOI":"10.1007\/s11416-014-0203-1"},{"key":"ref17","doi-asserted-by":"publisher","DOI":"10.1109\/MC.2012.345"},{"journal-title":"The Interactive Disassembler","year":"2019","key":"ref18"},{"journal-title":"Binnavi","year":"2019","key":"ref19"},{"key":"ref28","doi-asserted-by":"publisher","DOI":"10.1145\/3175492"},{"key":"ref4","doi-asserted-by":"publisher","DOI":"10.14722\/ndss.2015.23238"},{"key":"ref27","doi-asserted-by":"publisher","DOI":"10.1016\/j.future.2017.01.019"},{"key":"ref3","doi-asserted-by":"publisher","DOI":"10.1145\/2810103.2813671"},{"key":"ref6","doi-asserted-by":"publisher","DOI":"10.1145\/2810103.2813637"},{"key":"ref29","doi-asserted-by":"publisher","DOI":"10.1109\/ACCESS.2019.2918139"},{"journal-title":"The info leak era on software exploitation","year":"2012","author":"serna","key":"ref5"},{"journal-title":"Virtunoid A kvm Guest $\\rightarrow $ Host Privilege Escalation Exploit","year":"2011","author":"elhage","key":"ref8"},{"key":"ref7","doi-asserted-by":"publisher","DOI":"10.1145\/2338965.2336769"},{"journal-title":"National Vulnerability Database","year":"2019","key":"ref2"},{"key":"ref9","doi-asserted-by":"publisher","DOI":"10.1145\/3092703.3092729"},{"key":"ref1","doi-asserted-by":"publisher","DOI":"10.1145\/2660267.2662394"},{"key":"ref20","first-page":"829","article-title":"Construction approach for control flow graph from binaries using hybrid analysis","volume":"53","author":"zhu","year":"2019","journal-title":"J Zhejiang Univ (Eng Sci )"},{"article-title":"Constructing precise control flow graphs from binaries","year":"2009","author":"xu","key":"ref22"},{"key":"ref21","doi-asserted-by":"publisher","DOI":"10.1049\/iet-sen.2014.0185"},{"article-title":"Finding the needle in the heap: Combining binary analysis techniques to trigger use-after-free","year":"2017","author":"feist","key":"ref24"},{"key":"ref41","doi-asserted-by":"publisher","DOI":"10.1145\/565816.503286"},{"key":"ref23","first-page":"601","article-title":"Machine-independent optimizations","author":"aho","year":"2006","journal-title":"Compilers Principles Techniques and Tools"},{"key":"ref26","doi-asserted-by":"publisher","DOI":"10.1016\/j.diin.2015.01.011"},{"key":"ref25","doi-asserted-by":"publisher","DOI":"10.1016\/j.diin.2016.04.002"}],"container-title":["IEEE Access"],"original-title":[],"link":[{"URL":"http:\/\/xplorestaging.ieee.org\/ielx7\/6287639\/8948470\/09078095.pdf?arnumber=9078095","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2021,12,17]],"date-time":"2021-12-17T19:51:38Z","timestamp":1639770698000},"score":1,"resource":{"primary":{"URL":"https:\/\/ieeexplore.ieee.org\/document\/9078095\/"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2020]]},"references-count":41,"URL":"https:\/\/doi.org\/10.1109\/access.2020.2990197","relation":{},"ISSN":["2169-3536"],"issn-type":[{"type":"electronic","value":"2169-3536"}],"subject":[],"published":{"date-parts":[[2020]]}}}