{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,3,17]],"date-time":"2026-03-17T02:12:46Z","timestamp":1773713566058,"version":"3.50.1"},"reference-count":61,"publisher":"Institute of Electrical and Electronics Engineers (IEEE)","issue":"2","license":[{"start":{"date-parts":[[2026,3,1]],"date-time":"2026-03-01T00:00:00Z","timestamp":1772323200000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/ieeexplore.ieee.org\/Xplorehelp\/downloads\/license-information\/IEEE.html"},{"start":{"date-parts":[[2026,3,1]],"date-time":"2026-03-01T00:00:00Z","timestamp":1772323200000},"content-version":"am","delay-in-days":0,"URL":"https:\/\/ieeexplore.ieee.org\/Xplorehelp\/downloads\/license-information\/IEEE.html"},{"start":{"date-parts":[[2026,3,1]],"date-time":"2026-03-01T00:00:00Z","timestamp":1772323200000},"content-version":"stm-asf","delay-in-days":0,"URL":"https:\/\/doi.org\/10.15223\/policy-029"},{"start":{"date-parts":[[2026,3,1]],"date-time":"2026-03-01T00:00:00Z","timestamp":1772323200000},"content-version":"stm-asf","delay-in-days":0,"URL":"https:\/\/doi.org\/10.15223\/policy-037"}],"funder":[{"name":"NSF","award":["CNS-2245753"],"award-info":[{"award-number":["CNS-2245753"]}]},{"name":"NSF","award":["DGE-2409851"],"award-info":[{"award-number":["DGE-2409851"]}]},{"name":"NSF","award":["CNS-2019340"],"award-info":[{"award-number":["CNS-2019340"]}]},{"name":"NSF","award":["ECCS-2140175"],"award-info":[{"award-number":["ECCS-2140175"]}]}],"content-domain":{"domain":[],"crossmark-restriction":false},"short-container-title":["IEEE Trans. Dependable and Secure Comput."],"published-print":{"date-parts":[[2026,3]]},"DOI":"10.1109\/tdsc.2025.3626483","type":"journal-article","created":{"date-parts":[[2025,10,28]],"date-time":"2025-10-28T17:40:21Z","timestamp":1761673221000},"page":"2320-2335","source":"Crossref","is-referenced-by-count":0,"title":["DeepSanitizer: Combining Heuristic Rules and Deep Learning Models to Spot Silent Buffer Overflows in Binary"],"prefix":"10.1109","volume":"23","author":[{"ORCID":"https:\/\/orcid.org\/0009-0008-4689-6806","authenticated-orcid":false,"given":"Zhilong","family":"Wang","sequence":"first","affiliation":[{"name":"Pennsylvania State University, State College, PA, USA"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Chen","family":"Cao","sequence":"additional","affiliation":[{"name":"Pennsylvania State University, State College, PA, USA"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-7178-8072","authenticated-orcid":false,"given":"Li","family":"Yu","sequence":"additional","affiliation":[{"name":"Pennsylvania State University, State College, PA, USA"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"ORCID":"https:\/\/orcid.org\/0000-0003-3448-4878","authenticated-orcid":false,"given":"Suhang","family":"Wang","sequence":"additional","affiliation":[{"name":"Pennsylvania State University, State College, PA, USA"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-0321-2338","authenticated-orcid":false,"given":"Xiaoyan","family":"Sun","sequence":"additional","affiliation":[{"name":"Worcester Polytechnic Institute, Worcester, MA, USA"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-5091-8464","authenticated-orcid":false,"given":"Peng","family":"Liu","sequence":"additional","affiliation":[{"name":"Pennsylvania State University, State College, PA, USA"}],"role":[{"role":"author","vocabulary":"crossref"}]}],"member":"263","reference":[{"key":"ref1","doi-asserted-by":"publisher","DOI":"10.1109\/SP.2013.13"},{"key":"ref2","doi-asserted-by":"publisher","DOI":"10.1145\/1102120.1102165"},{"key":"ref3","doi-asserted-by":"publisher","DOI":"10.1145\/2810103.2813644"},{"key":"ref4","first-page":"337","article-title":"Control flow integrity for COTS binaries","volume-title":"Proc. 22nd USENIX Secur. Symp.","author":"Zhang"},{"key":"ref5","doi-asserted-by":"publisher","DOI":"10.1145\/2810103.2813673"},{"key":"ref6","doi-asserted-by":"publisher","DOI":"10.1145\/3243734.3243797"},{"key":"ref7","article-title":"Control flow guard","year":"2016"},{"key":"ref8","article-title":"Clang control flow integrity","year":"2021"},{"key":"ref9","article-title":"Android control flow integrity","year":"2021"},{"key":"ref10","article-title":"Chromium control flow integrity","year":"2021"},{"key":"ref11","doi-asserted-by":"publisher","DOI":"10.1145\/1315245.1315313"},{"key":"ref12","doi-asserted-by":"publisher","DOI":"10.1145\/1966913.1966919"},{"key":"ref13","doi-asserted-by":"publisher","DOI":"10.1109\/SP.2015.51"},{"key":"ref14","article-title":"The advanced Return-into-lib(c) exploits","year":"2001"},{"key":"ref15","article-title":"Non-control-Data attacks are realistic threats","volume-title":"Proc. 14th USENIX Secur. Symp.","author":"Chen"},{"key":"ref16","doi-asserted-by":"publisher","DOI":"10.1109\/SP.2016.62"},{"key":"ref17","doi-asserted-by":"publisher","DOI":"10.1145\/3243734.3243739"},{"key":"ref18","doi-asserted-by":"publisher","DOI":"10.1109\/EuroSP.2019.00018"},{"key":"ref19","doi-asserted-by":"publisher","DOI":"10.1109\/SecDev.2019.00022"},{"key":"ref20","first-page":"1397","article-title":"Viper: Spotting syscall-guard variables for data-only attacks","volume-title":"Proc. 32nd USENIX Secur. Symp.","author":"Ye"},{"key":"ref21","first-page":"1433","article-title":"Not all data are created equal: Data and pointer prioritization for scalable protection against data-oriented attacks","volume-title":"Proc. 32nd USENIX Secur. Symp.","author":"Ahmed"},{"key":"ref22","first-page":"309","article-title":"$\\lbrace AddressSanitizer\\rbrace${AddressSanitizer}: A fast address sanity checker","volume-title":"Proc. 2012 USENIX Annu. Tech. Conf.","author":"Serebryany"},{"key":"ref23","doi-asserted-by":"publisher","DOI":"10.1109\/CGO.2011.5764689"},{"key":"ref24","doi-asserted-by":"publisher","DOI":"10.1109\/SecDev45635.2020.00019"},{"key":"ref25","doi-asserted-by":"publisher","DOI":"10.1109\/SP40000.2020.00009"},{"key":"ref26","first-page":"841","article-title":"MTSan: A feasible and practical memory sanitizer for fuzzing COTS binaries","volume-title":"Proc. 32nd USENIX Secur. Symp.","author":"Chen"},{"key":"ref27","doi-asserted-by":"publisher","DOI":"10.1109\/SP.2019.00010"},{"key":"ref28","first-page":"805","article-title":"FloatZone: Accelerating memory error detection using the floating point unit","volume-title":"Proc. 32nd USENIX Secur. Symp.","author":"Gorter"},{"key":"ref29","doi-asserted-by":"publisher","DOI":"10.1145\/1273442.1250746"},{"key":"ref30","first-page":"611","article-title":"Recognizing functions in binaries with neural networks","volume-title":"Proc. 24th USENIX Secur. Symp.","author":"Shin"},{"key":"ref31","first-page":"99","article-title":"Neural nets can learn function type signatures from binaries","volume-title":"Proc. 26th USENIX Secur. Symp.","author":"Chua"},{"key":"ref32","first-page":"1787","article-title":"DEEPVSA: Facilitating value-set analysis with deep learning for postmortem program analysis","volume-title":"Proc. 28th USENIX Secur. Symp.","author":"Guo"},{"key":"ref33","doi-asserted-by":"publisher","DOI":"10.1109\/SP.2019.00003"},{"key":"ref34","doi-asserted-by":"publisher","DOI":"10.1145\/3460120.3484587"},{"key":"ref35","doi-asserted-by":"publisher","DOI":"10.1145\/3133956.3134018"},{"key":"ref36","doi-asserted-by":"publisher","DOI":"10.1109\/DSN.2019.00020"},{"key":"ref37","doi-asserted-by":"publisher","DOI":"10.1109\/ACCESS.2019.2917668"},{"key":"ref38","doi-asserted-by":"publisher","DOI":"10.1109\/SANER48275.2020.9054857"},{"key":"ref39","article-title":"Graph attention networks","author":"Veli\u010dkovi\u0107","year":"2017"},{"key":"ref40","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-319-46448-0_8"},{"key":"ref41","article-title":"Gated graph sequence neural networks","author":"Li","year":"2015"},{"key":"ref42","doi-asserted-by":"publisher","DOI":"10.3115\/v1\/P15-1150"},{"key":"ref43","doi-asserted-by":"publisher","DOI":"10.1109\/tnnls.2020.2978386"},{"key":"ref44","article-title":"Identifying non-control security-critical data in program binaries with a deep neural model","author":"Wang","year":"2021"},{"key":"ref45","article-title":"Baggy bounds checking: An efficient and backwards-compatible defense against out-of-bounds errors","volume-title":"Proc. USENIX Secur. Symp.","author":"Akritidis"},{"key":"ref46","doi-asserted-by":"publisher","DOI":"10.1145\/3382494.3410675"},{"key":"ref47","article-title":"Learning to represent programs with graphs","author":"Allamanis","year":"2017"},{"key":"ref48","doi-asserted-by":"publisher","DOI":"10.1145\/1064978.1065034"},{"key":"ref49","article-title":"The x86 encoder decoder (XED)","year":"2019"},{"key":"ref50","doi-asserted-by":"publisher","DOI":"10.1145\/3460120.3484587"},{"key":"ref51","article-title":"Spec CPU 2006 int benchmark","year":"2006"},{"key":"ref52","article-title":"CVE details","volume":"16","author":"\u00d6zkan","year":"2017","journal-title":"Retrieved"},{"key":"ref53","article-title":"Linuxflaw"},{"key":"ref54","first-page":"919","article-title":"Understanding the reproducibility of crowd-reported security vulnerabilities","volume-title":"Proc. 27th USENIX Secur. Symp.","author":"Mu"},{"key":"ref55","doi-asserted-by":"publisher","DOI":"10.1109\/TC.2021.3082471"},{"key":"ref56","article-title":"Dynamic process isolation: Research by cloudflare and TU graz","author":"Varda","year":"2021"},{"key":"ref57","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-031-17146-8_9"},{"key":"ref58","first-page":"289","article-title":"Shellos: Enabling fast detection and forensic analysis of code injection attacks","volume-title":"Proc. 20th USENIX Secur. Symp. (USENIX Secur. 11)","author":"Snow","year":"2011"},{"key":"ref59","doi-asserted-by":"publisher","DOI":"10.1109\/ARES.2007.54"},{"key":"ref60","doi-asserted-by":"publisher","DOI":"10.1145\/1315245.1315313"},{"key":"ref61","first-page":"33","article-title":"Ninja: Towards transparent tracing and debugging on arm","volume-title":"Proc. 26th USENIX Secur. Symp.","author":"Ning"}],"container-title":["IEEE Transactions on Dependable and Secure Computing"],"original-title":[],"link":[{"URL":"https:\/\/ieeexplore.ieee.org\/ielam\/8858\/11434575\/11220180-aam.pdf","content-type":"application\/pdf","content-version":"am","intended-application":"syndication"},{"URL":"http:\/\/xplorestaging.ieee.org\/ielx8\/8858\/11434575\/11220180.pdf?arnumber=11220180","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2026,3,17]],"date-time":"2026-03-17T01:15:13Z","timestamp":1773710113000},"score":1,"resource":{"primary":{"URL":"https:\/\/ieeexplore.ieee.org\/document\/11220180\/"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2026,3]]},"references-count":61,"journal-issue":{"issue":"2"},"URL":"https:\/\/doi.org\/10.1109\/tdsc.2025.3626483","relation":{},"ISSN":["1545-5971","1941-0018","2160-9209"],"issn-type":[{"value":"1545-5971","type":"print"},{"value":"1941-0018","type":"electronic"},{"value":"2160-9209","type":"electronic"}],"subject":[],"published":{"date-parts":[[2026,3]]}}}