{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,5,9]],"date-time":"2026-05-09T06:49:06Z","timestamp":1778309346461,"version":"3.51.4"},"reference-count":86,"publisher":"Institute of Electrical and Electronics Engineers (IEEE)","issue":"4","license":[{"start":{"date-parts":[[2023,4,1]],"date-time":"2023-04-01T00:00:00Z","timestamp":1680307200000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/ieeexplore.ieee.org\/Xplorehelp\/downloads\/license-information\/IEEE.html"},{"start":{"date-parts":[[2023,4,1]],"date-time":"2023-04-01T00:00:00Z","timestamp":1680307200000},"content-version":"stm-asf","delay-in-days":0,"URL":"https:\/\/doi.org\/10.15223\/policy-029"},{"start":{"date-parts":[[2023,4,1]],"date-time":"2023-04-01T00:00:00Z","timestamp":1680307200000},"content-version":"stm-asf","delay-in-days":0,"URL":"https:\/\/doi.org\/10.15223\/policy-037"}],"funder":[{"name":"Intergovernmental International Cooperation on Scientific and Technological Innovation","award":["2021YFE011941"],"award-info":[{"award-number":["2021YFE011941"]}]},{"name":"Hong Kong RGC","award":["152239\/18E"],"award-info":[{"award-number":["152239\/18E"]}]}],"content-domain":{"domain":[],"crossmark-restriction":false},"short-container-title":["IIEEE Trans. Software Eng."],"published-print":{"date-parts":[[2023,4,1]]},"DOI":"10.1109\/tse.2022.3187811","type":"journal-article","created":{"date-parts":[[2022,7,4]],"date-time":"2022-07-04T20:02:03Z","timestamp":1656964923000},"page":"1683-1703","source":"Crossref","is-referenced-by-count":4,"title":["A Comprehensive Study on ARM Disassembly Tools"],"prefix":"10.1109","volume":"49","author":[{"ORCID":"https:\/\/orcid.org\/0000-0003-2196-6894","authenticated-orcid":false,"given":"Muhui","family":"Jiang","sequence":"first","affiliation":[{"name":"Zhejiang University, Hangzhou, China"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Qinming","family":"Dai","sequence":"additional","affiliation":[{"name":"Zhejiang University, Hangzhou, China"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Wenlong","family":"Zhang","sequence":"additional","affiliation":[{"name":"Zhejiang University, Hangzhou, China"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-0178-0171","authenticated-orcid":false,"given":"Rui","family":"Chang","sequence":"additional","affiliation":[{"name":"Zhejiang University, Hangzhou, China"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"ORCID":"https:\/\/orcid.org\/0000-0001-7610-4736","authenticated-orcid":false,"given":"Yajin","family":"Zhou","sequence":"additional","affiliation":[{"name":"Zhejiang University, Hangzhou, China"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-9082-3208","authenticated-orcid":false,"given":"Xiapu","family":"Luo","sequence":"additional","affiliation":[{"name":"Hong Kong Polytechnic University, Hong Kong SAR, China"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Ruoyu","family":"Wang","sequence":"additional","affiliation":[{"name":"Arizona State University, Tempe, AZ, USA"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"ORCID":"https:\/\/orcid.org\/0000-0001-7300-9215","authenticated-orcid":false,"given":"Yang","family":"Liu","sequence":"additional","affiliation":[{"name":"Nanyang Technological University, Singapore"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Kui","family":"Ren","sequence":"additional","affiliation":[{"name":"Zhejiang University, Hangzhou, China"}],"role":[{"role":"author","vocabulary":"crossref"}]}],"member":"263","reference":[{"key":"ref13","article-title":"HALucinator: Firmware re-hosting through abstraction layer emulation","author":"clements","year":"2020","journal-title":"Proc 29th USENIX Secur Symp"},{"key":"ref57","article-title":"Android Open Source Project","year":"0"},{"key":"ref12","article-title":"P2IM: Scalable and hardware-independent firmware testing via automatic peripheral interface modeling","author":"feng","year":"2020","journal-title":"Proc 29th USENIX Secur Symp"},{"key":"ref56","article-title":"Buildroot: Making Embedded Linux Easy","year":"0"},{"key":"ref15","doi-asserted-by":"publisher","DOI":"10.1145\/3173162.3177157"},{"key":"ref59","first-page":"3","article-title":"Obfuscating C++ programs via control flow flattening","volume":"30","author":"l\u00e1szl\u00f3","year":"2009","journal-title":"Annales Universitatis Scientiarum Budapestinensis de Rolando Eötvös Nominatae Sectio Computatorica"},{"key":"ref14","doi-asserted-by":"publisher","DOI":"10.1109\/SP40001.2021.00018"},{"key":"ref58","article-title":"Debian Popularity Contest","year":"0"},{"key":"ref53","doi-asserted-by":"publisher","DOI":"10.1109\/BWCCA.2010.85"},{"key":"ref52","first-page":"99","article-title":"Neural nets can learn function type signatures from binaries","author":"chua","year":"2017","journal-title":"Proc 26th USENIX Secur Symp"},{"key":"ref11","doi-asserted-by":"publisher","DOI":"10.14722\/ndss.2014.23229"},{"key":"ref55","article-title":"ARM Mbed OS","year":"0"},{"key":"ref10","doi-asserted-by":"publisher","DOI":"10.1145\/2897845.2897900"},{"key":"ref54","article-title":"The FreeRTOS Kernel","year":"0"},{"key":"ref17","doi-asserted-by":"publisher","DOI":"10.1145\/3133956.3134018"},{"key":"ref16","doi-asserted-by":"publisher","DOI":"10.1145\/2976749.2978370"},{"key":"ref19","doi-asserted-by":"publisher","DOI":"10.1109\/SP.2015.49"},{"key":"ref18","first-page":"412","article-title":"RevARM: A platform-agnostic ARM binary rewriter for security applications","author":"taegyu","year":"2017","journal-title":"Proc 37th Annu Comput Secur Appl Conf"},{"key":"ref51","first-page":"177","article-title":"Compiler-agnostic function detection in binaries","author":"dennis","year":"2017","journal-title":"Proc 2nd IEEE Eur Symp Secur Privacy"},{"key":"ref50","first-page":"845","article-title":"BYTEWEIGHT: Learning to recognize functions in binary code","author":"bao","year":"2014","journal-title":"Proc 23th USENIX Conf Secur Symp"},{"key":"ref46","article-title":"Issues submitted to Radare2","year":"0"},{"key":"ref45","article-title":"Issues submitted to Ghidra","year":"0"},{"key":"ref48","doi-asserted-by":"publisher","DOI":"10.1109\/WCRE.2002.1173063"},{"key":"ref47","first-page":"211","article-title":"A binary rewriting defense against stack based buffer overflow attacks","author":"prasad","year":"2003","journal-title":"Proc USENIX Annu Tech Conf"},{"key":"ref42","article-title":"Procedure Call Standard for the ARM Architecture","year":"0"},{"key":"ref86","doi-asserted-by":"publisher","DOI":"10.1145\/2818000.2818016"},{"key":"ref41","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-642-22110-1_37"},{"key":"ref85","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-319-20550-2_8"},{"key":"ref44","article-title":"Issues submitted to BAP","year":"0"},{"key":"ref43","article-title":"Issues submitted to Binary Ninja","year":"0"},{"key":"ref49","doi-asserted-by":"publisher","DOI":"10.1016\/S0167-6423(01)00014-4"},{"key":"ref8","doi-asserted-by":"publisher","DOI":"10.14722\/ndss.2015.23294"},{"key":"ref7","doi-asserted-by":"publisher","DOI":"10.1145\/3133956.3134050"},{"key":"ref9","first-page":"15","article-title":"BlackIoT: IoT botnet of high wattage devices can disrupt the power grid","author":"soltan","year":"2018","journal-title":"Proc 27th USENIX Secur Symp"},{"key":"ref4","first-page":"1093","article-title":"Understanding the Mirai botnet","author":"antonakakis","year":"2017","journal-title":"Proc 26th USENIX Secur Symp"},{"key":"ref3","article-title":"DDoS attack that disrupted internet was largest of its kind in history, experts say","year":"0"},{"key":"ref6","doi-asserted-by":"publisher","DOI":"10.14722\/ndss.2016.23415"},{"key":"ref5","first-page":"95","article-title":"A large-scale analysis of the security of embedded firmwares","author":"costin","year":"2014","journal-title":"Proc 23rd USENIX Secur Symp"},{"key":"ref82","first-page":"678","article-title":"BinGo: Cross-architecture cross-OS binary search","author":"mahinthan","year":"2016","journal-title":"Proc of the ACM SIGSOFT Int'l Symp on the Foundations of Softw Eng"},{"key":"ref81","doi-asserted-by":"publisher","DOI":"10.1145\/1356058.1356069"},{"key":"ref40","article-title":"Radare2","year":"0"},{"key":"ref84","doi-asserted-by":"publisher","DOI":"10.1109\/TSE.2018.2827379"},{"key":"ref83","first-page":"462","article-title":"SPAIN: Security patch analysis for binaries towards understanding the pain and pills","author":"zhengzi","year":"2017","journal-title":"Proc 39th Int Conf Softw Eng"},{"key":"ref80","first-page":"1","article-title":"Dynamic taint analysis: Automatic detection, analysis, and signature generation of exploit attacks on commodity software","author":"newsome","year":"2005","journal-title":"Proc 12th Netw Distrib Syst Secur Symp"},{"key":"ref35","article-title":"Hopper Disassembler","year":"0"},{"key":"ref79","doi-asserted-by":"publisher","DOI":"10.1109\/DSN.2017.29"},{"key":"ref34","article-title":"IDA Pro","year":"0"},{"key":"ref78","article-title":"Static disassembly of obfuscated binaries","author":"kruegel","year":"2004","journal-title":"Proc 13th USENIX Secur Symp"},{"key":"ref37","article-title":"Ghidra: A Software Reverse Engineering(SRE) Suite of Tools Developed by NSA","year":"0"},{"key":"ref36","article-title":"Binary Ninja: A New Kind of Reversing Platform","year":"0"},{"key":"ref31","doi-asserted-by":"publisher","DOI":"10.1145\/2627393.2627395"},{"key":"ref75","first-page":"1063","article-title":"Static analysis of binary executables using structural SVMs","author":"karampatziakis","year":"2010","journal-title":"Proc 23rd Int Conf Neural Inf Process Syst"},{"key":"ref30","first-page":"337","article-title":"Control flow integrity for COTS binaries","author":"zhang","year":"2013","journal-title":"Proc 22nd USENIX Secur Symp"},{"key":"ref74","doi-asserted-by":"publisher","DOI":"10.1145\/2024569.2024571"},{"key":"ref33","doi-asserted-by":"publisher","DOI":"10.1109\/SPRO.2015.10"},{"key":"ref77","article-title":"Paradyn Project. Dyninst: Putting the Performance in High Performance Computing","year":"0"},{"key":"ref32","article-title":"OpenWRT","year":"0"},{"key":"ref76","first-page":"611","article-title":"Recognizing functions in binaries with neural networks","author":"shin","year":"2015","journal-title":"Proc 24th USENIX Conf Secur Symp"},{"key":"ref2","article-title":"Mirai IoT botnet blamed for ’smashing liberia off the internet’","year":"0"},{"key":"ref1","article-title":"Source code for IoT botnet ‘Mirai’ released","year":"0"},{"key":"ref39","doi-asserted-by":"publisher","DOI":"10.1109\/SP.2016.17"},{"key":"ref38","article-title":"Objdump - Display Information from Object Files","year":"0"},{"key":"ref71","article-title":"Static disassembly of obfuscated binaries","author":"kruegel","year":"2004","journal-title":"Proc 13th Conf USENIX Secur Symp"},{"key":"ref70","doi-asserted-by":"publisher","DOI":"10.1145\/2968455.2968505"},{"key":"ref73","first-page":"798","article-title":"Learning to analyze binary computer code","author":"rosenblum","year":"2008","journal-title":"Proc 23rd AAAI Conf Artif Intell"},{"key":"ref72","doi-asserted-by":"publisher","DOI":"10.1109\/ICSE.2019.00121"},{"key":"ref24","doi-asserted-by":"publisher","DOI":"10.1109\/SP40001.2021.00012"},{"key":"ref68","doi-asserted-by":"publisher","DOI":"10.1109\/SP.2016.60"},{"key":"ref23","first-page":"583","article-title":"An in-depth analysis of disassembly on full-scale x86\/x64 binaries","author":"andriesse","year":"2016","journal-title":"Proc 25th USENIX Secur Symp"},{"key":"ref67","doi-asserted-by":"publisher","DOI":"10.14722\/ndss.2018.23300"},{"key":"ref26","doi-asserted-by":"publisher","DOI":"10.1109\/SP.2016.60"},{"key":"ref25","doi-asserted-by":"publisher","DOI":"10.1145\/3395363.3397377"},{"key":"ref69","doi-asserted-by":"publisher","DOI":"10.14722\/ndss.2017.23225"},{"key":"ref20","doi-asserted-by":"publisher","DOI":"10.14722\/ndss.2016.23185"},{"key":"ref64","article-title":"Clang: Documentation","year":"0"},{"key":"ref63","article-title":"B, BL, BX, BLX, and BXJ","year":"0"},{"key":"ref22","doi-asserted-by":"publisher","DOI":"10.1109\/SP40000.2020.00036"},{"key":"ref66","article-title":"Psutil","year":"0"},{"key":"ref21","doi-asserted-by":"publisher","DOI":"10.1145\/2976749.2978358"},{"key":"ref65","article-title":"GCC: Options That Control Optimization","year":"0"},{"key":"ref28","first-page":"559","article-title":"Practical control flow integrity and randomization for binary executables","author":"zhang","year":"2013","journal-title":"Proc 34th IEEE Symp Secur Privacy"},{"key":"ref27","doi-asserted-by":"publisher","DOI":"10.14722\/ndss.2015.23297"},{"key":"ref29","doi-asserted-by":"publisher","DOI":"10.1145\/3319535.3354244"},{"key":"ref60","article-title":"ARM Mapping Symbols","year":"0"},{"key":"ref62","article-title":"Introduction to the DWARF debugging format","author":"eager","year":"0"},{"key":"ref61","article-title":"Capstone: The Ultimate Disassembly","year":"0"}],"container-title":["IEEE Transactions on Software Engineering"],"original-title":[],"link":[{"URL":"http:\/\/xplorestaging.ieee.org\/ielx7\/32\/10103953\/09814882.pdf?arnumber=9814882","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2023,5,8]],"date-time":"2023-05-08T18:49:36Z","timestamp":1683571776000},"score":1,"resource":{"primary":{"URL":"https:\/\/ieeexplore.ieee.org\/document\/9814882\/"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2023,4,1]]},"references-count":86,"journal-issue":{"issue":"4"},"URL":"https:\/\/doi.org\/10.1109\/tse.2022.3187811","relation":{},"ISSN":["0098-5589","1939-3520","2326-3881"],"issn-type":[{"value":"0098-5589","type":"print"},{"value":"1939-3520","type":"electronic"},{"value":"2326-3881","type":"electronic"}],"subject":[],"published":{"date-parts":[[2023,4,1]]}}}