{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,9,5]],"date-time":"2026-09-05T17:31:52Z","timestamp":1788629512909,"version":"build-2803163510"},"reference-count":29,"publisher":"IEEE","content-domain":{"domain":[],"crossmark-restriction":false},"short-container-title":[],"published-print":{"date-parts":[[2013,10]]},"DOI":"10.1109\/wcre.2013.6671278","type":"proceedings-article","created":{"date-parts":[[2013,12,3]],"date-time":"2013-12-03T22:00:42Z","timestamp":1386108042000},"page":"32-41","source":"Crossref","is-referenced-by-count":10,"title":["MemPick: High-level data structure detection in C\/C&amp;#x002B;&amp;#x002B; binaries"],"prefix":"10.1109","author":[{"given":"Istvan","family":"Haller","sequence":"first","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Asia","family":"Slowinska","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Herbert","family":"Bos","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]}],"member":"263","reference":[{"key":"19","author":"wyk","year":"1991","journal-title":"Data Structures and C Programs 2nd Ed (Addison-Wesley Series in Computer Science)"},{"key":"17","doi-asserted-by":"publisher","DOI":"10.1145\/292540.292553"},{"key":"18","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-540-78791-4_2"},{"key":"15","doi-asserted-by":"publisher","DOI":"10.1145\/1111583.1111585"},{"key":"16","article-title":"Analyzing memory accesses in x86 binary executables","author":"balakrishnan","year":"2004","journal-title":"Proc Conf on Compiler Construction"},{"key":"13","year":"2011","journal-title":"Intel Pin-A Dynamic Binary Instrumentation Tool"},{"key":"14","author":"chen","year":"2013","journal-title":"Detecting Custom Memory Allocators in C Binaries"},{"key":"11","doi-asserted-by":"publisher","DOI":"10.1145\/1950365.1950396"},{"key":"12","article-title":"Automated whitebox fuzz testing","author":"godefroid","year":"2008","journal-title":"Proceedings of the 15th Annual Network and Dis-Tributed System Security Symposium"},{"key":"21","doi-asserted-by":"publisher","DOI":"10.1145\/237721.237724"},{"key":"20","author":"cormen","year":"2001","journal-title":"Introduction to Algorithms"},{"key":"22","doi-asserted-by":"publisher","DOI":"10.1145\/292540.292552"},{"key":"23","doi-asserted-by":"publisher","DOI":"10.1109\/TSE.2006.125"},{"key":"24","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-540-73368-3_25"},{"key":"25","doi-asserted-by":"publisher","DOI":"10.1145\/1375581.1375624"},{"key":"26","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-642-36742-7_25"},{"key":"27","doi-asserted-by":"publisher","DOI":"10.1145\/1190216.1190225"},{"key":"28","article-title":"Siggraph: Brute force scanning of kernel data structure instances using graph-based signatures","author":"lin","year":"2011","journal-title":"Proc of 18th Annual Network & Distributed System Security Symposium"},{"key":"29","article-title":"Tracking rootkit footprints with a practical memory analysis system","volume":"2012","author":"cui","year":"0","journal-title":"Proc of the 21st USENIX Conference on Security Symposium Ser SSYM12"},{"key":"3","doi-asserted-by":"publisher","DOI":"10.1145\/1146238.1146268"},{"key":"2","doi-asserted-by":"publisher","DOI":"10.1016\/j.scico.2007.01.015"},{"key":"10","article-title":"Digging for data structures","author":"cozzie","year":"2008","journal-title":"Proc Second USENIX Symp Operating Systems Design and Implementation"},{"key":"1","doi-asserted-by":"crossref","DOI":"10.1145\/1669112.1669122","article-title":"DDT: Design and evaluation of a dynamic program analysis for optimizing data structure usage","author":"jung","year":"2009","journal-title":"Proc of the 42nd Annual IEEE\/ACM International Symposium on Microarchitecture"},{"key":"7","article-title":"Automatic reverse engineering of data structures from binary execution","author":"lin","year":"2010","journal-title":"Proc of the 17th Annual Network and Distributed System Security Symposium"},{"key":"6","doi-asserted-by":"publisher","DOI":"10.1214\/09-AOAS263"},{"key":"5","doi-asserted-by":"publisher","DOI":"10.1214\/009053607000000217"},{"key":"4","doi-asserted-by":"publisher","DOI":"10.1037\/h0070888"},{"key":"9","article-title":"TIE: Principled reverse engineering of types in binary programs","author":"lee","year":"2011","journal-title":"Proc of the 18th Annual Network & Distributed System Security Symposium"},{"key":"8","article-title":"Howard: A dynamic excavator for reverse engineering data structures","author":"slowinska","year":"2011","journal-title":"Proc of the 18th Annual Network & Distributed System Security Symposium"}],"event":{"name":"2013 20th Working Conference on Reverse Engineering (WCRE)","location":"Koblenz, Germany","start":{"date-parts":[[2013,10,14]]},"end":{"date-parts":[[2013,10,17]]}},"container-title":["2013 20th Working Conference on Reverse Engineering (WCRE)"],"original-title":[],"link":[{"URL":"http:\/\/xplorestaging.ieee.org\/ielx7\/6656028\/6671267\/06671278.pdf?arnumber=6671278","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2017,6,22]],"date-time":"2017-06-22T03:35:29Z","timestamp":1498102529000},"score":1,"resource":{"primary":{"URL":"http:\/\/ieeexplore.ieee.org\/document\/6671278\/"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2013,10]]},"references-count":29,"URL":"https:\/\/doi.org\/10.1109\/wcre.2013.6671278","relation":{},"subject":[],"published":{"date-parts":[[2013,10]]}}}