{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,9,25]],"date-time":"2026-09-25T08:43:06Z","timestamp":1790325786741,"version":"4.1.0"},"publisher-location":"New York, NY, USA","reference-count":41,"publisher":"ACM","license":[{"start":{"date-parts":[[2010,7,12]],"date-time":"2010-07-12T00:00:00Z","timestamp":1278892800000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/www.acm.org\/publications\/policies\/copyright_policy#Background"}],"content-domain":{"domain":["dl.acm.org"],"crossmark-restriction":true},"short-container-title":[],"published-print":{"date-parts":[[2010,7,12]]},"DOI":"10.1145\/1831708.1831722","type":"proceedings-article","created":{"date-parts":[[2010,7,12]],"date-time":"2010-07-12T13:31:10Z","timestamp":1278941470000},"page":"107-118","update-policy":"https:\/\/doi.org\/10.1145\/crossmark-policy","source":"Crossref","is-referenced-by-count":17,"title":["Automatic detection of unsafe component loadings"],"prefix":"10.1145","author":[{"given":"Taeho","family":"Kwon","sequence":"first","affiliation":[{"name":"University of California - Davis, Davis, CA, USA"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Zhendong","family":"Su","sequence":"additional","affiliation":[{"name":"University of California - Davis, , Davis, CA, USA"}],"role":[{"vocabulary":"crossref","role":"author"}]}],"member":"320","published-online":{"date-parts":[[2010,7,12]]},"reference":[{"key":"e_1_3_2_1_1_1","unstructured":"About the security content of Safari 3.1.2 for Windows. http:\/\/support.apple.com\/kb\/HT2092.  About the security content of Safari 3.1.2 for Windows. http:\/\/support.apple.com\/kb\/HT2092."},{"key":"e_1_3_2_1_2_1","unstructured":"About Windows Resource Protection. http:\/\/msdn.microsoft.com\/en-us\/library\/aa382503(VS.85).aspx.  About Windows Resource Protection. http:\/\/msdn.microsoft.com\/en-us\/library\/aa382503(VS.85).aspx."},{"key":"e_1_3_2_1_3_1","unstructured":"About Windows Resource Protection. http:\/\/www.dependencywalker.com\/help\/html\/dependency_types.htm.  About Windows Resource Protection. http:\/\/www.dependencywalker.com\/help\/html\/dependency_types.htm."},{"key":"e_1_3_2_1_4_1","volume-title":"Proc. NDSS","author":"Brumley D.","year":"2007","unstructured":"D. Brumley , D. X. Song , T. Chiueh , R. Johnson , and H. Lin . RICH: Automatically protecting against integer-based vulnerabilities . In Proc. NDSS , 2007 . D. Brumley, D. X. Song, T. Chiueh, R. Johnson, and H. Lin. RICH: Automatically protecting against integer-based vulnerabilities. In Proc. NDSS, 2007."},{"key":"e_1_3_2_1_5_1","volume-title":"Proc. OSDI","author":"Cadar C.","year":"2008","unstructured":"C. Cadar , D. Dunbar , and D. R. Engler . KLEE: Unassisted and automatic generation of high-coverage tests for complex systems programs . In Proc. OSDI , 2008 . C. Cadar, D. Dunbar, and D. R. Engler. KLEE: Unassisted and automatic generation of high-coverage tests for complex systems programs. In Proc. OSDI, 2008."},{"key":"e_1_3_2_1_6_1","doi-asserted-by":"publisher","DOI":"10.1145\/1180405.1180445"},{"key":"e_1_3_2_1_7_1","volume-title":"Proc. NDSS","author":"Chari S.","year":"2010","unstructured":"S. Chari , S. Halevi , and W. Venema . Where do you want to go today? escalating privileges by pathname manipulation . In Proc. NDSS , 2010 . S. Chari, S. Halevi, and W. Venema. Where do you want to go today? escalating privileges by pathname manipulation. In Proc. NDSS, 2010."},{"key":"e_1_3_2_1_8_1","volume-title":"Proc. Usenix Security Symposium","author":"Chen S.","year":"2005","unstructured":"S. Chen , J. Xu , E. C. Sezer , P. Gauriar , and R. K. Iyer . Non-control-data attacks are realistic threats . In Proc. Usenix Security Symposium , 2005 . S. Chen, J. Xu, E. C. Sezer, P. Gauriar, and R. K. Iyer. Non-control-data attacks are realistic threats. In Proc. Usenix Security Symposium, 2005."},{"key":"e_1_3_2_1_9_1","unstructured":"CVE-2009-0415. http:\/\/cve.mitre.org\/cgi-bin\/cvenamecgi?name=CVE-2009-0415.  CVE-2009-0415. http:\/\/cve.mitre.org\/cgi-bin\/cvenamecgi?name=CVE-2009-0415."},{"key":"e_1_3_2_1_10_1","doi-asserted-by":"publisher","DOI":"10.1145\/1134285.1134309"},{"key":"e_1_3_2_1_11_1","unstructured":"dlopen man page. http:\/\/linux.die.net\/man\/3\/dlopen.  dlopen man page. http:\/\/linux.die.net\/man\/3\/dlopen."},{"key":"e_1_3_2_1_12_1","unstructured":"Dynamic-Link Library Search Order. http:\/\/msdn.microsoft.com\/en-us\/library\/ms682586(VS.85).aspx.  Dynamic-Link Library Search Order. http:\/\/msdn.microsoft.com\/en-us\/library\/ms682586(VS.85).aspx."},{"key":"e_1_3_2_1_13_1","volume-title":"Proc. NDSS","author":"Godefroid P.","year":"2008","unstructured":"P. Godefroid , M. Y. Levin , and D. A. Molnar . Automated whitebox fuzz testing . In Proc. NDSS , 2008 . P. Godefroid, M. Y. Levin, and D. A. Molnar. Automated whitebox fuzz testing. In Proc. NDSS, 2008."},{"key":"e_1_3_2_1_14_1","volume-title":"Proc. Usenix Security Symposium","author":"Goldberg I.","year":"1996","unstructured":"I. Goldberg , D. Wagner , R. Thomas , and E. A. Brewer . A secure environment for untrusted helper applications confining the Wily Hacker . In Proc. Usenix Security Symposium , 1996 . I. Goldberg, D. Wagner, R. Thomas, and E. A. Brewer. A secure environment for untrusted helper applications confining the Wily Hacker. In Proc. Usenix Security Symposium, 1996."},{"key":"e_1_3_2_1_15_1","volume-title":"Proc. W2SP","author":"Grier C.","year":"2009","unstructured":"C. Grier , S. T. King , and D. Wallach . How I learned to stop worrying and love plugins . In Proc. W2SP , 2009 . C. Grier, S. T. King, and D. Wallach. How I learned to stop worrying and love plugins. In Proc. W2SP, 2009."},{"key":"e_1_3_2_1_16_1","doi-asserted-by":"publisher","DOI":"10.1109\/SP.2008.19"},{"key":"e_1_3_2_1_17_1","volume-title":"The Developer's Guide to Debugging","author":"Grtker T.","year":"2008","unstructured":"T. Grtker , U. Holtmann , H. Keding , and M. Wloka . The Developer's Guide to Debugging . Springer , 2008 . T. Grtker, U. Holtmann, H. Keding, and M. Wloka. The Developer's Guide to Debugging. Springer, 2008."},{"key":"e_1_3_2_1_18_1","unstructured":"IDA Pro Disassembler. http:\/\/www.hex-rays.com\/idapro\/.  IDA Pro Disassembler. http:\/\/www.hex-rays.com\/idapro\/."},{"key":"e_1_3_2_1_19_1","unstructured":"IE's unsafe DLL loading. http:\/\/www.milw0rm.com\/exploits\/2929.  IE's unsafe DLL loading. http:\/\/www.milw0rm.com\/exploits\/2929."},{"key":"e_1_3_2_1_20_1","unstructured":"Killbit. http:\/\/support.microsoft.com\/kb\/240797.  Killbit. http:\/\/support.microsoft.com\/kb\/240797."},{"key":"e_1_3_2_1_21_1","volume-title":"Proc. Usenix Security Symposium","author":"Larochelle D.","year":"2001","unstructured":"D. Larochelle and D. Evans . Statically detecting likely buffer overflow vulnerabilities . In Proc. Usenix Security Symposium , 2001 . D. Larochelle and D. Evans. Statically detecting likely buffer overflow vulnerabilities. In Proc. Usenix Security Symposium, 2001."},{"key":"e_1_3_2_1_22_1","unstructured":"ldd man page. http:\/\/linux.die.net\/man\/1\/ldd.  ldd man page. http:\/\/linux.die.net\/man\/1\/ldd."},{"key":"e_1_3_2_1_23_1","doi-asserted-by":"publisher","DOI":"10.1145\/1065010.1065034"},{"key":"e_1_3_2_1_24_1","unstructured":"Microsoft Portable Executable and Common Object File Format Specification. http:\/\/www.microsoft.com\/whdc\/system\/platform\/firmware\/PECOFF.mspx.  Microsoft Portable Executable and Common Object File Format Specification. http:\/\/www.microsoft.com\/whdc\/system\/platform\/firmware\/PECOFF.mspx."},{"key":"e_1_3_2_1_25_1","unstructured":"Microsoft Security Bulletin MS09-014. http:\/\/www.microsoft.com\/technet\/security\/Bulletin\/MS09-014.mspx.  Microsoft Security Bulletin MS09-014. http:\/\/www.microsoft.com\/technet\/security\/Bulletin\/MS09-014.mspx."},{"key":"e_1_3_2_1_26_1","unstructured":"Microsoft Security Bulletin MS09-015. http:\/\/www.microsoft.com\/technet\/security\/Bulletin\/MS09-015.mspx.  Microsoft Security Bulletin MS09-015. http:\/\/www.microsoft.com\/technet\/security\/Bulletin\/MS09-015.mspx."},{"key":"e_1_3_2_1_27_1","doi-asserted-by":"publisher","DOI":"10.5555\/1855768.1855773"},{"key":"e_1_3_2_1_28_1","unstructured":"MS09-014: Addressing the Safari Carpet Bomb vulnerability. http:\/\/blogs.technet.com\/srd\/archive\/2009\/04\/14\/ms09-014-addressing-the-safari-carpet-bomb-vulnerability.aspx.  MS09-014: Addressing the Safari Carpet Bomb vulnerability. http:\/\/blogs.technet.com\/srd\/archive\/2009\/04\/14\/ms09-014-addressing-the-safari-carpet-bomb-vulnerability.aspx."},{"key":"e_1_3_2_1_29_1","volume-title":"Proc. NDSS","author":"Ruwase O.","year":"2004","unstructured":"O. Ruwase and M. S. Lam . A practical dynamic buffer overflow detector . In Proc. NDSS , 2004 . O. Ruwase and M. S. Lam. A practical dynamic buffer overflow detector. In Proc. NDSS, 2004."},{"key":"e_1_3_2_1_30_1","doi-asserted-by":"publisher","DOI":"10.1145\/1572272.1572299"},{"key":"e_1_3_2_1_31_1","unstructured":"Secure Linux Programming. https:\/\/foss.in\/2006\/cfp\/slides\/Secure_Linux_Programming_145.pdf.  Secure Linux Programming. https:\/\/foss.in\/2006\/cfp\/slides\/Secure_Linux_Programming_145.pdf."},{"key":"e_1_3_2_1_32_1","unstructured":"Side-by-side Assemblies. http:\/\/msdn.microsoft.com\/en-us\/library\/aa376307(VS.85).aspx.  Side-by-side Assemblies. http:\/\/msdn.microsoft.com\/en-us\/library\/aa376307(VS.85).aspx."},{"key":"e_1_3_2_1_33_1","unstructured":"The End of DLL Hell. http:\/\/msdn.microsoft.com\/en-us\/library\/ms811694.aspx.  The End of DLL Hell. http:\/\/msdn.microsoft.com\/en-us\/library\/ms811694.aspx."},{"key":"e_1_3_2_1_34_1","unstructured":"The Long-Term Impact of User Account Control. http:\/\/technet.microsoft.com\/en-us\/magazine\/2007.09.securitywatch.aspx.  The Long-Term Impact of User Account Control. http:\/\/technet.microsoft.com\/en-us\/magazine\/2007.09.securitywatch.aspx."},{"key":"e_1_3_2_1_35_1","unstructured":"Trickle. http:\/\/monkey.org\/~marius\/pages\/?page=trickle.  Trickle. http:\/\/monkey.org\/~marius\/pages\/?page=trickle."},{"key":"e_1_3_2_1_36_1","doi-asserted-by":"publisher","DOI":"10.5555\/1855768.1855794"},{"key":"e_1_3_2_1_37_1","volume-title":"Proc. NDSS","author":"Wang T.","year":"2009","unstructured":"T. Wang , T. Wei , Z. Lin , and W. Zou . IntScope: Automatically detecting integer over?ow vulnerability in x86 binary using symbolic execution . In Proc. NDSS , 2009 . T. Wang, T. Wei, Z. Lin, and W. Zou. IntScope: Automatically detecting integer over?ow vulnerability in x86 binary using symbolic execution. In Proc. NDSS, 2009."},{"key":"e_1_3_2_1_38_1","unstructured":"What Goes On Inside Windows 2000: Solving the Mysteries of the Loader. http:\/\/msdn.microsoft.com\/en-us\/magazine\/cc301727.aspx.  What Goes On Inside Windows 2000: Solving the Mysteries of the Loader. http:\/\/msdn.microsoft.com\/en-us\/magazine\/cc301727.aspx."},{"key":"e_1_3_2_1_39_1","volume-title":"Black Hat DC","author":"Whitehouse O.","year":"2007","unstructured":"O. Whitehouse . GS and ASLR in Windows Vista . In Black Hat DC , 2007 . O. Whitehouse. GS and ASLR in Windows Vista. In Black Hat DC, 2007."},{"key":"e_1_3_2_1_40_1","unstructured":"Windows Management Instrumentation. http:\/\/msdn.microsoft.com\/en-us\/library\/aa394582(VS.85).aspx.  Windows Management Instrumentation. http:\/\/msdn.microsoft.com\/en-us\/library\/aa394582(VS.85).aspx."},{"key":"e_1_3_2_1_41_1","doi-asserted-by":"publisher","DOI":"10.1145\/1390630.1390636"}],"event":{"name":"ISSTA '10: International Symposium on Software Testing and Analysis","location":"Trento Italy","acronym":"ISSTA '10","sponsor":["SIGSOFT ACM Special Interest Group on Software Engineering","SIGPLAN ACM Special Interest Group on Programming Languages"]},"container-title":["Proceedings of the 19th international symposium on Software testing and analysis"],"original-title":[],"link":[{"URL":"https:\/\/dl.acm.org\/doi\/10.1145\/1831708.1831722","content-type":"unspecified","content-version":"vor","intended-application":"text-mining"},{"URL":"https:\/\/dl.acm.org\/doi\/pdf\/10.1145\/1831708.1831722","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2025,6,18]],"date-time":"2025-06-18T11:39:42Z","timestamp":1750246782000},"score":1,"resource":{"primary":{"URL":"https:\/\/dl.acm.org\/doi\/10.1145\/1831708.1831722"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2010,7,12]]},"references-count":41,"alternative-id":["10.1145\/1831708.1831722","10.1145\/1831708"],"URL":"https:\/\/doi.org\/10.1145\/1831708.1831722","relation":{},"subject":[],"published":{"date-parts":[[2010,7,12]]},"assertion":[{"value":"2010-07-12","order":2,"name":"published","label":"Published","group":{"name":"publication_history","label":"Publication History"}}]}}