{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,2,24]],"date-time":"2026-02-24T16:52:10Z","timestamp":1771951930499,"version":"3.50.1"},"reference-count":69,"publisher":"IEEE","license":[{"start":{"date-parts":[[2026,1,31]],"date-time":"2026-01-31T00:00:00Z","timestamp":1769817600000},"content-version":"stm-asf","delay-in-days":0,"URL":"https:\/\/doi.org\/10.15223\/policy-029"},{"start":{"date-parts":[[2026,1,31]],"date-time":"2026-01-31T00:00:00Z","timestamp":1769817600000},"content-version":"stm-asf","delay-in-days":0,"URL":"https:\/\/doi.org\/10.15223\/policy-037"}],"funder":[{"DOI":"10.13039\/100005125","name":"EMI","doi-asserted-by":"publisher","id":[{"id":"10.13039\/100005125","id-type":"DOI","asserted-by":"publisher"}]}],"content-domain":{"domain":[],"crossmark-restriction":false},"short-container-title":[],"published-print":{"date-parts":[[2026,1,31]]},"DOI":"10.1109\/cgo68049.2026.11395233","type":"proceedings-article","created":{"date-parts":[[2026,2,23]],"date-time":"2026-02-23T20:46:32Z","timestamp":1771879592000},"page":"375-389","source":"Crossref","is-referenced-by-count":1,"title":["Binary Diffing via Library Signatures"],"prefix":"10.1109","author":[{"given":"Andrei","family":"Rimsa","sequence":"first","affiliation":[{"name":"CEFET-MG,Belo Horizonte,Brazil"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Anderson Faustino","family":"Da Silva","sequence":"additional","affiliation":[{"name":"UEM,Maringá,Brazil"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Camilo","family":"Santana","sequence":"additional","affiliation":[{"name":"UFMG,Belo Horizonte,Brazil"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Fernando Magno Quint\u00e3o","family":"Pereira","sequence":"additional","affiliation":[{"name":"UFMG,Belo Horizonte,Brazil"}],"role":[{"role":"author","vocabulary":"crossref"}]}],"member":"263","reference":[{"key":"ref1","volume-title":"Bindiff","author":"Dullien","year":"2011"},{"key":"ref2","doi-asserted-by":"crossref","DOI":"10.1145\/3647444.3652439","article-title":"Malware analysis types & techniques: A survey","volume-title":"ICIMMI","author":"Arora"},{"key":"ref3","article-title":"Deducing similarities in java sources from bytecodes","volume-title":"1998 USENIX Annual Technical Conference (USENIX ATC 98)","author":"Baker"},{"key":"ref4","doi-asserted-by":"publisher","DOI":"10.1145\/2430553.2430557"},{"key":"ref5","article-title":"Efficient, Transparent, and Comprehensive Runtime Code Manipulation","volume-title":"Ph.D. dissertation","author":"Bruening","year":"2004"},{"key":"ref6","first-page":"3451","article-title":"Obfuscation-resilient executable payload extraction from packed malware","volume-title":"30th USENIX Security Symposium (USENIX Security 21)","author":"Cheng"},{"key":"ref7","author":"Collyer","year":"2023","journal-title":"Faser: Binary code similarity search through the use of intermediate representations"},{"key":"ref8","volume-title":"Krish Coppieters A cross-platform binary diff","year":"1995"},{"key":"ref9","doi-asserted-by":"publisher","DOI":"10.1016\/j.cola.2022.101171"},{"key":"ref10","doi-asserted-by":"publisher","DOI":"10.1145\/3579990.3580012"},{"key":"ref11","doi-asserted-by":"publisher","DOI":"10.1109\/sp.2019.00003"},{"key":"ref12","doi-asserted-by":"publisher","DOI":"10.14722\/ndss.2020.24311"},{"key":"ref13","first-page":"1","article-title":"Graph-based comparison of executable objects","volume-title":"Symposium sur la S\u00e9curit\u00e9 des Technologies de l\u2019Information et des Communications","author":"Dullien"},{"key":"ref14","volume-title":"The Ghidra Book: The Definitive Guide","author":"Eagle","year":"2020"},{"key":"ref15","volume-title":"Capstone engine","author":"Quynh","year":"2024"},{"key":"ref16","doi-asserted-by":"publisher","DOI":"10.1145\/3708493.3712680"},{"key":"ref17","first-page":"161","article-title":"Structural comparison of executable objects","volume-title":"Detection of Intrusions and Malware & Vulnerability Assessment (DIMVA)","author":"Flake","year":"2004"},{"key":"ref18","volume-title":"Gnu general public license","year":"2007"},{"key":"ref19","doi-asserted-by":"publisher","DOI":"10.1145\/3446371"},{"key":"ref20","article-title":"Code is not natural language: Unlock the power of semantics-oriented graph representation for binary code similarity detection","author":"He","year":"2024","journal-title":"Security. USENIX"},{"key":"ref21","first-page":"495","article-title":"Binsim: Binary similarity measurement for detecting software vulnerabilities","volume-title":"ICSE","author":"Huang"},{"key":"ref22","doi-asserted-by":"publisher","DOI":"10.1145\/359581.359603"},{"key":"ref23","volume-title":"Dadidroid: An obfuscation resilient tool for detecting android malware via weighted directed call graph modelling","author":"Ikram","year":"2019"},{"key":"ref24","volume-title":"535 f.3d 1373 (fed. cir. 2008)","author":"Katzer","year":"2008"},{"key":"ref25","doi-asserted-by":"publisher","DOI":"10.1109\/SPRO.2015.10"},{"key":"ref26","doi-asserted-by":"publisher","DOI":"10.1145\/3600160.3600194"},{"key":"ref27","first-page":"351","article-title":"Effective and efficient malware detection at the end host","volume-title":"SSYM","author":"Kolbitsch"},{"key":"ref28","volume-title":"Towards generic deobfuscation of windows api calls","author":"Kotov","year":"2020"},{"key":"ref29","doi-asserted-by":"publisher","DOI":"10.1109\/tse.2005.120"},{"issue":"1","key":"ref30","first-page":"3","article-title":"Obfuscating c++ programs via control flow flattening","volume":"30","author":"L\u00e1szl\u00f3","year":"2009","journal-title":"Annales Universitatis Scientarum Budapestinensis de Rolando E\u00f6tv\u00f6s Nominatae, Sectio Computatorica"},{"key":"ref31","doi-asserted-by":"publisher","DOI":"10.1145\/3460120.3484587"},{"key":"ref32","doi-asserted-by":"publisher","DOI":"10.3390\/app13169056"},{"key":"ref33","doi-asserted-by":"publisher","DOI":"10.1145\/1065010.1065034"},{"key":"ref34","volume-title":"SAFE: Self-attentive function embeddings for binary similarity","author":"Massarelli","year":"2019"},{"key":"ref35","volume-title":"Obfuscating linux symbols: a novel approach to evade static analysis in linux malware","author":"Mather","year":"2024"},{"key":"ref36","first-page":"253","article-title":"Binsim: trace-based semantic binary diffing via system call sliced segment equivalence checking","volume-title":"Security Symposium","author":"Ming"},{"key":"ref37","doi-asserted-by":"publisher","DOI":"10.1016\/j.ijcip.2022.100552"},{"key":"ref38","doi-asserted-by":"publisher","DOI":"10.1145\/1250734.1250746"},{"key":"ref39","author":"Nguyen","year":"2024","journal-title":"Obfuscate api calls in mach-o binary"},{"key":"ref40","volume-title":"Thread-based obfuscation through control-flow mangling","author":"Omar","year":"2013"},{"key":"ref41","doi-asserted-by":"publisher","DOI":"10.1145\/2490428.2490454"},{"key":"ref42","doi-asserted-by":"publisher","DOI":"10.1109\/sp.2015.49"},{"key":"ref43","doi-asserted-by":"publisher","DOI":"10.1145\/3453483.3454035"},{"issue":"2","key":"ref44","first-page":"358","article-title":"Classes of recursively enumerable sets and their decision problems","volume-title":"Transactions of the American Mathematical Society","volume":"74","author":"Rice","year":"1953"},{"key":"ref45","volume-title":"Libsig\u2019s artifacts","author":"Rimsa","year":"2025"},{"key":"ref46","doi-asserted-by":"publisher","DOI":"10.1002\/spe.2907"},{"key":"ref47","doi-asserted-by":"publisher","DOI":"10.1145\/2522968.2522972"},{"key":"ref48","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-540-87403-4_36"},{"key":"ref49","volume-title":"A museum of API obfuscation on Win32 Technical report, Symantec Security Response","author":"Suenaga","year":"2009"},{"key":"ref50","volume-title":"Address space layout randomization (aslr)","author":"Team","year":"2003"},{"key":"ref51","doi-asserted-by":"publisher","DOI":"10.1145\/3721481"},{"key":"ref52","volume-title":"Versata software, inc. v. ameriprise financial, inc., 2014 u.s. dist. lexis 166695 (e.d. tex. dec. 1, 2014)","author":"Ameriprise","year":"2014"},{"key":"ref53","doi-asserted-by":"publisher","DOI":"10.1145\/3533767.3534367"},{"key":"ref54","doi-asserted-by":"publisher","DOI":"10.1145\/3569933"},{"key":"ref55","first-page":"1","article-title":"Bmat-a binary matching tool for stale profile propagation","volume":"2","author":"Wang","year":"2000","journal-title":"The Journal of Instruction-Level Parallelism"},{"key":"ref56","doi-asserted-by":"publisher","DOI":"10.1145\/3133956.3134018"},{"key":"ref57","doi-asserted-by":"publisher","DOI":"10.1145\/3395363.3397361"},{"key":"ref58","doi-asserted-by":"publisher","DOI":"10.1109\/dsn48987.2021.00036"},{"key":"ref59","doi-asserted-by":"publisher","DOI":"10.1145\/3604611"},{"key":"ref60","doi-asserted-by":"publisher","DOI":"10.1145\/3604608"},{"key":"ref61","doi-asserted-by":"publisher","DOI":"10.1109\/icpc.2019.00021"},{"key":"ref62","doi-asserted-by":"publisher","DOI":"10.1609\/aaai.v34i01.5466"},{"key":"ref63","first-page":"358","article-title":"Malware detection via machine learning based on binary code analysis","volume-title":"ICSME","author":"Zhang"},{"key":"ref64","doi-asserted-by":"publisher","DOI":"10.1109\/icse.2019.00086"},{"key":"ref65","doi-asserted-by":"publisher","DOI":"10.1145\/3579990.3580007"},{"key":"ref66","doi-asserted-by":"publisher","DOI":"10.1145\/3701992"},{"key":"ref67","doi-asserted-by":"publisher","DOI":"10.1109\/tse.2023.3240118"},{"key":"ref68","first-page":"329","article-title":"Dynamic binary analysis and instrumentation","volume-title":"SEKE","author":"Zhang"},{"key":"ref69","doi-asserted-by":"publisher","DOI":"10.1016\/j.cola.2021.101062"}],"event":{"name":"2026 IEEE\/ACM International Symposium on Code Generation and Optimization (CGO)","location":"Sydney, Australia","start":{"date-parts":[[2026,1,31]]},"end":{"date-parts":[[2026,2,4]]}},"container-title":["2026 IEEE\/ACM International Symposium on Code Generation and Optimization (CGO)"],"original-title":[],"link":[{"URL":"http:\/\/xplorestaging.ieee.org\/ielx8\/11395173\/11394837\/11395233.pdf?arnumber=11395233","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2026,2,24]],"date-time":"2026-02-24T07:42:41Z","timestamp":1771918961000},"score":1,"resource":{"primary":{"URL":"https:\/\/ieeexplore.ieee.org\/document\/11395233\/"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2026,1,31]]},"references-count":69,"URL":"https:\/\/doi.org\/10.1109\/cgo68049.2026.11395233","relation":{},"subject":[],"published":{"date-parts":[[2026,1,31]]}}}