{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,8,24]],"date-time":"2026-08-24T19:27:21Z","timestamp":1787599641367,"version":"build-2736575974"},"reference-count":63,"publisher":"Institute of Electrical and Electronics Engineers (IEEE)","license":[{"start":{"date-parts":[[2026,1,1]],"date-time":"2026-01-01T00:00:00Z","timestamp":1767225600000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/ieeexplore.ieee.org\/Xplorehelp\/downloads\/license-information\/IEEE.html"},{"start":{"date-parts":[[2026,1,1]],"date-time":"2026-01-01T00:00:00Z","timestamp":1767225600000},"content-version":"stm-asf","delay-in-days":0,"URL":"https:\/\/doi.org\/10.15223\/policy-029"},{"start":{"date-parts":[[2026,1,1]],"date-time":"2026-01-01T00:00:00Z","timestamp":1767225600000},"content-version":"stm-asf","delay-in-days":0,"URL":"https:\/\/doi.org\/10.15223\/policy-037"}],"content-domain":{"domain":[],"crossmark-restriction":false},"short-container-title":["IEEE Trans.Inform.Forensic Secur."],"published-print":{"date-parts":[[2026]]},"DOI":"10.1109\/tifs.2026.3723092","type":"journal-article","created":{"date-parts":[[2026,8,12]],"date-time":"2026-08-12T19:05:39Z","timestamp":1786561539000},"page":"7752-7766","source":"Crossref","is-referenced-by-count":0,"title":["Cross-Architecture Software Vulnerability Analysis in Binary Code"],"prefix":"10.1109","volume":"21","author":[{"ORCID":"https:\/\/orcid.org\/0000-0002-3122-6745","authenticated-orcid":false,"given":"Shigang","family":"Liu","sequence":"first","affiliation":[{"name":"CSIRO Technology RU","place":["Clayton, VIC, Australia"]}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0009-0005-6819-3093","authenticated-orcid":false,"given":"Di","family":"Cao","sequence":"additional","affiliation":[{"name":"Swinburne University of Technology","place":["Hawthorn, VIC, Australia"]}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0003-1355-3870","authenticated-orcid":false,"given":"Chao","family":"Chen","sequence":"additional","affiliation":[{"name":"Information Systems and Supply Chain, RMIT University","place":["Melbourne, VIC, Australia"]}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0003-1534-3658","authenticated-orcid":false,"given":"Zhengdao","family":"Li","sequence":"additional","affiliation":[{"name":"Guangzhou University","place":["Guangzhou, China"]}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-2189-7801","authenticated-orcid":false,"given":"Jun","family":"Zhang","sequence":"additional","affiliation":[{"name":"Swinburne University of Technology","place":["Hawthorn, VIC, Australia"]}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0001-6353-8359","authenticated-orcid":false,"given":"Seyit","family":"Camtepe","sequence":"additional","affiliation":[{"name":"CSIRO Technology RU","place":["Marsfield, NSW, Australia"]}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0001-5252-0831","authenticated-orcid":false,"given":"Yang","family":"Xiang","sequence":"additional","affiliation":[{"name":"Monash University","place":["Clayton, VIC, Australia"]}],"role":[{"vocabulary":"crossref","role":"author"}]}],"member":"263","reference":[{"key":"ref1","first-page":"2105","article-title":"A mixed-methods study of open-source software maintainers on vulnerability management and platform security features","volume-title":"Proc. 34th USENIX Secur. Symp. (USENIX Secur.)","author":"Ayala"},{"key":"ref2","doi-asserted-by":"publisher","DOI":"10.1016\/j.csa.2024.100061"},{"key":"ref3","doi-asserted-by":"publisher","DOI":"10.14722\/ndss.2023.24415"},{"key":"ref4","volume-title":"CWE-125: Out-of-Bounds Read. Common Weakness Enumeration (CWE)","year":"2024"},{"key":"ref5","doi-asserted-by":"publisher","DOI":"10.1109\/ICPC.2017.22"},{"key":"ref6","doi-asserted-by":"publisher","DOI":"10.1145\/3769082"},{"key":"ref7","doi-asserted-by":"publisher","DOI":"10.1145\/3432893"},{"key":"ref8","doi-asserted-by":"publisher","DOI":"10.1145\/3133956.3134018"},{"key":"ref9","doi-asserted-by":"publisher","DOI":"10.1145\/3238147.3238199"},{"key":"ref10","doi-asserted-by":"publisher","DOI":"10.1016\/j.cose.2020.102032"},{"key":"ref11","volume-title":"National Vulnerability Database","year":"2023"},{"key":"ref12","doi-asserted-by":"publisher","DOI":"10.1109\/SP.2015.49"},{"key":"ref13","doi-asserted-by":"publisher","DOI":"10.1002\/cpe.5103"},{"key":"ref14","doi-asserted-by":"publisher","DOI":"10.1109\/TSE.2018.2827379"},{"key":"ref15","article-title":"CodeXGLUE: A machine learning benchmark dataset for code understanding and generation","author":"Lu","year":"2021","journal-title":"arXiv:2102.04664"},{"key":"ref16","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-642-22110-1_37"},{"key":"ref17","doi-asserted-by":"publisher","DOI":"10.1145\/3529757"},{"key":"ref18","first-page":"291","article-title":"Charm: Facilitating dynamic analysis of device drivers of mobile systems","volume-title":"Proc. 27th USENIX Secur. Symp.","author":"Talebi"},{"key":"ref19","doi-asserted-by":"publisher","DOI":"10.1145\/3329786"},{"key":"ref20","doi-asserted-by":"publisher","DOI":"10.1145\/3486860"},{"key":"ref21","doi-asserted-by":"publisher","DOI":"10.1109\/COMPSAC48688.2020.0-110"},{"key":"ref22","doi-asserted-by":"publisher","DOI":"10.1145\/3264820.3264821"},{"key":"ref23","doi-asserted-by":"publisher","DOI":"10.1145\/2976749.2978370"},{"key":"ref24","doi-asserted-by":"publisher","DOI":"10.1016\/j.cose.2022.102745"},{"key":"ref25","doi-asserted-by":"publisher","DOI":"10.1109\/TSE.2022.3231621"},{"key":"ref26","first-page":"191","article-title":"Towards cross-architecture binary code vulnerability detection","volume-title":"Proc. 33rd Annu. Int. Conf. Comput. Sci. Softw. Eng.","author":"Shirani"},{"key":"ref27","doi-asserted-by":"publisher","DOI":"10.14722\/ndss.2019.23492"},{"key":"ref28","doi-asserted-by":"publisher","DOI":"10.1145\/3460120.3484541"},{"key":"ref29","doi-asserted-by":"publisher","DOI":"10.1109\/SP40001.2021.00104"},{"key":"ref30","doi-asserted-by":"publisher","DOI":"10.1016\/j.cose.2022.103023"},{"key":"ref31","doi-asserted-by":"publisher","DOI":"10.1145\/3604611"},{"key":"ref32","doi-asserted-by":"publisher","DOI":"10.1109\/TII.2019.2942800"},{"key":"ref33","doi-asserted-by":"publisher","DOI":"10.1145\/3460120.3484587"},{"key":"ref34","first-page":"2099","article-title":"How machine learning is solving the binary function similarity problem","volume-title":"Proc. 31st USENIX Secur. Symp.","author":"Marcelli"},{"key":"ref35","doi-asserted-by":"publisher","DOI":"10.14722\/ndss.2018.23158"},{"key":"ref36","doi-asserted-by":"publisher","DOI":"10.1109\/TII.2018.2821768"},{"key":"ref37","doi-asserted-by":"publisher","DOI":"10.1109\/TFUZZ.2019.2958558"},{"key":"ref38","doi-asserted-by":"publisher","DOI":"10.1145\/2931037.2931047"},{"key":"ref39","doi-asserted-by":"publisher","DOI":"10.1145\/3446371"},{"key":"ref40","doi-asserted-by":"publisher","DOI":"10.1109\/DSN48987.2021.00036"},{"key":"ref41","first-page":"2847","article-title":"ICSFuzz: Manipulating I\/Os and repurposing binary code to enable instrumented fuzzing in $ics$\n control applications","volume-title":"Proc. 30th USENIX Secur. Symp. (USENIX Secur.)","author":"Tychalas"},{"key":"ref42","doi-asserted-by":"publisher","DOI":"10.1016\/j.eswa.2020.114348"},{"key":"ref43","doi-asserted-by":"publisher","DOI":"10.1109\/SP40001.2021.00012"},{"key":"ref44","doi-asserted-by":"publisher","DOI":"10.1016\/j.cose.2022.102607"},{"key":"ref45","volume-title":"The IDA Pro Book","author":"Eagle","year":"2011"},{"key":"ref46","doi-asserted-by":"publisher","DOI":"10.14722\/ndss.2016.23185"},{"key":"ref47","first-page":"15","article-title":"Cosine similarity scoring without score normalization techniques","volume-title":"Proc. Odyssey","author":"Dehak"},{"key":"ref48","doi-asserted-by":"publisher","DOI":"10.1109\/MSR52588.2021.00055"},{"key":"ref49","doi-asserted-by":"publisher","DOI":"10.1109\/ASE51524.2021.9678580"},{"issue":"86","key":"ref50","first-page":"2579","article-title":"Visualizing data using t-SNE","volume":"9","author":"Maaten","year":"2008","journal-title":"J. Mach. Learn. Res."},{"key":"ref51","doi-asserted-by":"publisher","DOI":"10.1017\/S1351324916000334"},{"key":"ref52","first-page":"1759","article-title":"Code is not natural language: Unlock the power of semantics-oriented graph representation for binary code similarity detection","volume-title":"Proc. 33rd USENIX Secur. Symp. (USENIX Secur.)","author":"He"},{"key":"ref53","doi-asserted-by":"publisher","DOI":"10.1109\/TIFS.2025.3636019"},{"key":"ref54","doi-asserted-by":"publisher","DOI":"10.1109\/EuroSP.2017.11"},{"key":"ref55","doi-asserted-by":"publisher","DOI":"10.1145\/3460319.3464804"},{"key":"ref56","doi-asserted-by":"publisher","DOI":"10.1007\/s00521-021-05954-3"},{"key":"ref57","doi-asserted-by":"publisher","DOI":"10.1145\/2991079.2991102"},{"key":"ref58","first-page":"245","article-title":"Learning binary code with deep learning to detect software weakness","volume-title":"Proc. KSII The 9th Int. Conf. Internet Symp.","author":"Lee"},{"key":"ref59","doi-asserted-by":"publisher","DOI":"10.1145\/2857705.2857720"},{"key":"ref60","doi-asserted-by":"publisher","DOI":"10.1002\/spy2.100"},{"key":"ref61","doi-asserted-by":"publisher","DOI":"10.1016\/j.cose.2021.102286"},{"key":"ref62","doi-asserted-by":"publisher","DOI":"10.1145\/3533767.3534367"},{"key":"ref63","doi-asserted-by":"publisher","DOI":"10.1145\/3561385"}],"container-title":["IEEE Transactions on Information Forensics and Security"],"original-title":[],"link":[{"URL":"http:\/\/xplorestaging.ieee.org\/ielx8\/10206\/11313711\/11653427.pdf?arnumber=11653427","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2026,8,24]],"date-time":"2026-08-24T19:13:39Z","timestamp":1787598819000},"score":1,"resource":{"primary":{"URL":"https:\/\/ieeexplore.ieee.org\/document\/11653427\/"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2026]]},"references-count":63,"URL":"https:\/\/doi.org\/10.1109\/tifs.2026.3723092","relation":{},"ISSN":["1556-6013","1556-6021"],"issn-type":[{"value":"1556-6013","type":"print"},{"value":"1556-6021","type":"electronic"}],"subject":[],"published":{"date-parts":[[2026]]}}}