{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,10,2]],"date-time":"2026-10-02T10:28:54Z","timestamp":1790936934476,"version":"4.1.0"},"publisher-location":"New York, NY, USA","reference-count":76,"publisher":"ACM","license":[{"start":{"date-parts":[[2020,10,30]],"date-time":"2020-10-30T00:00:00Z","timestamp":1604016000000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/www.acm.org\/publications\/policies\/copyright_policy#Background"}],"funder":[{"name":"National Science Foundation","award":["CNS-1850434"],"award-info":[{"award-number":["CNS-1850434"]}]},{"name":"National Natural Science Foundation of China","award":["61672394"],"award-info":[{"award-number":["61672394"]}]}],"content-domain":{"domain":["dl.acm.org"],"crossmark-restriction":true},"short-container-title":[],"published-print":{"date-parts":[[2020,10,30]]},"DOI":"10.1145\/3372297.3423342","type":"proceedings-article","created":{"date-parts":[[2021,3,4]],"date-time":"2021-03-04T16:20:06Z","timestamp":1614874806000},"page":"149-165","update-policy":"https:\/\/doi.org\/10.1145\/crossmark-policy","source":"Crossref","is-referenced-by-count":24,"title":["PatchScope: Memory Object Centric Patch Diffing"],"prefix":"10.1145","author":[{"given":"Lei","family":"Zhao","sequence":"first","affiliation":[{"name":"Wuhan University, Wuhan, China"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Yuncong","family":"Zhu","sequence":"additional","affiliation":[{"name":"Wuhan University, Wuhan, China"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Jiang","family":"Ming","sequence":"additional","affiliation":[{"name":"University of Texas at Arlington, Arlington, TX, USA"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Yichen","family":"Zhang","sequence":"additional","affiliation":[{"name":"Wuhan University, Wuhan, China"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Haotian","family":"Zhang","sequence":"additional","affiliation":[{"name":"University of Texas at Arlington, Arlington, TX, USA"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Heng","family":"Yin","sequence":"additional","affiliation":[{"name":"University of California, Riverside, Riverside, CA, USA"}],"role":[{"vocabulary":"crossref","role":"author"}]}],"member":"320","published-online":{"date-parts":[[2020,11,2]]},"reference":[{"key":"e_1_3_2_2_1_1","volume-title":"Proceedings of the 14th USENIX Security Symposium.","author":"Altekar Gautam","year":"2005"},{"key":"e_1_3_2_2_2_1","doi-asserted-by":"publisher","DOI":"10.1145\/2660267.2660329"},{"key":"e_1_3_2_2_3_1","unstructured":"Ionut Arghire. 2019. Patches for Internet Explorer Zero-Day Causing Problems for Many Users. https:\/\/www.securityweek.com\/patches-internet-explorer-zero-day-causing-problems-many-users.  Ionut Arghire. 2019. Patches for Internet Explorer Zero-Day Causing Problems for Many Users. https:\/\/www.securityweek.com\/patches-internet-explorer-zero-day-causing-problems-many-users."},{"key":"e_1_3_2_2_4_1","volume-title":"Proceedings of the 32nd International Conference on ICT Systems Security and Privacy Protection (IFIP SEC'17).","author":"Avery Jeffrey"},{"key":"e_1_3_2_2_5_1","volume-title":"Proceedings of the 16th Annual Network and Distributed System Security Symposium (NDSS'09)","author":"Bayer Ulrich","year":"2009"},{"key":"e_1_3_2_2_6_1","volume-title":"Proceedings of 29th USENIX Security Symposium (USENIX Security'20)","author":"Blazytko Tim","year":"2020"},{"key":"e_1_3_2_2_7_1","doi-asserted-by":"publisher","DOI":"10.1145\/2430553.2430557"},{"key":"e_1_3_2_2_8_1","doi-asserted-by":"publisher","DOI":"10.1109\/SP.2008.17"},{"key":"e_1_3_2_2_9_1","doi-asserted-by":"publisher","DOI":"10.1145\/1315245.1315286"},{"key":"e_1_3_2_2_10_1","doi-asserted-by":"publisher","DOI":"10.1145\/3243734.3243849"},{"key":"e_1_3_2_2_11_1","doi-asserted-by":"publisher","DOI":"10.1145\/277650.277719"},{"key":"e_1_3_2_2_12_1","doi-asserted-by":"publisher","DOI":"10.1109\/SP.2010.12"},{"key":"e_1_3_2_2_13_1","doi-asserted-by":"publisher","DOI":"10.1109\/MSP.2012.113"},{"key":"e_1_3_2_2_14_1","doi-asserted-by":"publisher","DOI":"10.1145\/1294261.1294274"},{"key":"e_1_3_2_2_15_1","doi-asserted-by":"publisher","DOI":"10.1145\/2908080.2908126"},{"key":"e_1_3_2_2_16_1","doi-asserted-by":"publisher","DOI":"10.1145\/3173162.3177157"},{"key":"e_1_3_2_2_17_1","doi-asserted-by":"publisher","DOI":"10.1145\/3274694.3274712"},{"key":"e_1_3_2_2_18_1","doi-asserted-by":"publisher","DOI":"10.1109\/SP.2019.00003"},{"key":"e_1_3_2_2_19_1","doi-asserted-by":"publisher","DOI":"10.14722\/ndss.2020.24311"},{"key":"e_1_3_2_2_20_1","volume-title":"Proceedings of the 23rd USENIX Security Symposium (USENIX Security'14)","author":"Egele Manuel","year":"2014"},{"key":"e_1_3_2_2_21_1","doi-asserted-by":"publisher","DOI":"10.14722\/ndss.2016.23185"},{"key":"e_1_3_2_2_22_1","doi-asserted-by":"publisher","DOI":"10.1145\/2976749.2978370"},{"key":"e_1_3_2_2_23_1","doi-asserted-by":"publisher","DOI":"10.1109\/SP.2010.11"},{"key":"e_1_3_2_2_24_1","unstructured":"Ulf Frisk. 2018. Total Meltdown? http:\/\/blog.frizk.net\/2018\/03\/total-meltdown.html.  Ulf Frisk. 2018. Total Meltdown? http:\/\/blog.frizk.net\/2018\/03\/total-meltdown.html."},{"key":"e_1_3_2_2_25_1","volume-title":"BinHunt: Automatically Finding Semantic Differences in Binary Programs. In Poceedings of the 10th International Conference on Information and Communications Security (ICICS'08)","author":"Gao Debin","year":"2008"},{"key":"e_1_3_2_2_26_1","doi-asserted-by":"publisher","DOI":"10.1145\/3236024.3275524"},{"key":"e_1_3_2_2_27_1","unstructured":"Google LLC. 2011. BinDiff: Graph Comparison for Binary Files. https:\/\/www.zynamics.com\/bindiff.html.  Google LLC. 2011. BinDiff: Graph Comparison for Binary Files. https:\/\/www.zynamics.com\/bindiff.html."},{"key":"e_1_3_2_2_28_1","doi-asserted-by":"publisher","DOI":"10.1145\/2610384.2610407"},{"key":"e_1_3_2_2_29_1","volume-title":"Proceedings of the 16th ACM Conference on Computer and Communications Security (CCS'09)","author":"Hu Xin"},{"key":"e_1_3_2_2_30_1","doi-asserted-by":"publisher","DOI":"10.1109\/SP.2011.41"},{"key":"e_1_3_2_2_31_1","unstructured":"Mateusz Jurczyk. 2017. Using Binary Diffing to Discover Windows Kernel Memory Disclosure Bugs. Google Project Zero Team Blog.  Mateusz Jurczyk. 2017. Using Binary Diffing to Discover Windows Kernel Memory Disclosure Bugs. Google Project Zero Team Blog."},{"key":"e_1_3_2_2_32_1","volume-title":"Proceedings of the 18th Annual Network and Distributed System Security Symposium (NDSS'11)","author":"Kang Min Gyung","year":"2011"},{"key":"e_1_3_2_2_33_1","volume-title":"Proceedings of the 18th Conference on USENIX Security Symposium (USENIX Security'09)","author":"Kolbitsch Clemens","year":"2009"},{"key":"e_1_3_2_2_34_1","volume-title":"Diaphora: A Free and Open Source Program Diffing Tool","author":"Koret Joxean","year":"2015"},{"key":"e_1_3_2_2_35_1","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-642-31424-7_54"},{"key":"e_1_3_2_2_36_1","doi-asserted-by":"publisher","DOI":"10.1145\/3133956.3134072"},{"key":"e_1_3_2_2_37_1","doi-asserted-by":"publisher","DOI":"10.14722\/ndss.2018.23158"},{"key":"e_1_3_2_2_38_1","doi-asserted-by":"publisher","DOI":"10.1145\/3238147.3238199"},{"key":"e_1_3_2_2_39_1","doi-asserted-by":"publisher","DOI":"10.1145\/2535838.2535888"},{"key":"e_1_3_2_2_40_1","doi-asserted-by":"publisher","DOI":"10.1145\/2635868.2635900"},{"key":"e_1_3_2_2_41_1","doi-asserted-by":"publisher","DOI":"10.1109\/SP40000.2020.00038"},{"key":"e_1_3_2_2_42_1","doi-asserted-by":"publisher","DOI":"10.1145\/3243127.3243131"},{"key":"e_1_3_2_2_43_1","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-030-22038-9_15"},{"key":"e_1_3_2_2_44_1","volume-title":"Proceedings of the 26th USENIX Conference on Security Symposium (USENIX Security'17)","author":"Ming Jiang","year":"2017"},{"key":"e_1_3_2_2_45_1","doi-asserted-by":"publisher","DOI":"10.1007\/s10664-017-9550-0"},{"key":"e_1_3_2_2_46_1","doi-asserted-by":"publisher","DOI":"10.5555\/3277203.3277272"},{"key":"e_1_3_2_2_47_1","unstructured":"Jeong Wook Oh. 2009. Fight against 1-day exploits: Diffing Binaries vs Anti-diffing Binaries. Black Hat USA.  Jeong Wook Oh. 2009. Fight against 1-day exploits: Diffing Binaries vs Anti-diffing Binaries. Black Hat USA."},{"key":"e_1_3_2_2_48_1","volume-title":"Exploit Spotting: Locating Vulnerabilities Out of Vendor Patches Automatically. Black Hat USA.","author":"Oh Jeong Wook","year":"2010"},{"key":"e_1_3_2_2_49_1","unstructured":"Jeong Wook Oh. 2011. DarunGrim: A Patch Analysis and Binary Diffing Tool. http:\/\/www.darungrim.org\/.  Jeong Wook Oh. 2011. DarunGrim: A Patch Analysis and Binary Diffing Tool. http:\/\/www.darungrim.org\/."},{"key":"e_1_3_2_2_50_1","doi-asserted-by":"publisher","DOI":"10.1109\/DSN.2019.00066"},{"key":"e_1_3_2_2_51_1","doi-asserted-by":"publisher","DOI":"10.1145\/1453101.1453131"},{"key":"e_1_3_2_2_52_1","doi-asserted-by":"publisher","DOI":"10.1145\/1993498.1993558"},{"key":"e_1_3_2_2_53_1","doi-asserted-by":"publisher","DOI":"10.1145\/1595696.1595704"},{"key":"e_1_3_2_2_54_1","volume-title":"Proceedings of the 2010 International Conference on Availability, Reliability and Security.","author":"Ramaswamy Ashwin"},{"key":"e_1_3_2_2_55_1","volume-title":"RSA Conference.","author":"Sims Stephen","year":"2016"},{"key":"e_1_3_2_2_56_1","doi-asserted-by":"crossref","unstructured":"Asia Slowinska and Herbert Bos. 2009. Pointless tainting? Evaluating the practicality of pointer tainting. In EuroSys. 61--74.  Asia Slowinska and Herbert Bos. 2009. Pointless tainting? Evaluating the practicality of pointer tainting. In EuroSys. 61--74.","DOI":"10.1145\/1519065.1519073"},{"key":"e_1_3_2_2_57_1","volume-title":"Proceedings of the 18th Annual Network and Distributed System Security Symposium (NDSS'11)","author":"Slowinska Asia","year":"2011"},{"key":"e_1_3_2_2_58_1","doi-asserted-by":"publisher","DOI":"10.1016\/0022-2836(81)90087-5"},{"key":"e_1_3_2_2_59_1","unstructured":"Alexander Sotirov. 2006. Hotpatching and the Rise of Third-Party Patches. BlackHat USA.  Alexander Sotirov. 2006. Hotpatching and the Rise of Third-Party Patches. BlackHat USA."},{"key":"e_1_3_2_2_60_1","doi-asserted-by":"publisher","DOI":"10.1109\/TSE.2015.2454508"},{"key":"e_1_3_2_2_61_1","unstructured":"Windows Unicorn vulnerability exploited in the wild. [online]. Windows Unicorn vulnerability exploited in the wild. https:\/\/securityaffairs.co\/wordpress\/30402\/security\/unicorn-exploited-in-the-wild.html.  Windows Unicorn vulnerability exploited in the wild. [online]. Windows Unicorn vulnerability exploited in the wild. https:\/\/securityaffairs.co\/wordpress\/30402\/security\/unicorn-exploited-in-the-wild.html."},{"key":"e_1_3_2_2_62_1","unstructured":"Harsimran Walia. 2011. Reversing Microsoft patches to reveal vulnerable code. Nullcon.  Harsimran Walia. 2011. Reversing Microsoft patches to reveal vulnerable code. Nullcon."},{"key":"e_1_3_2_2_63_1","doi-asserted-by":"publisher","DOI":"10.5555\/3155562.3155606"},{"key":"e_1_3_2_2_64_1","doi-asserted-by":"publisher","DOI":"10.1145\/1653662.1653696"},{"key":"e_1_3_2_2_65_1","doi-asserted-by":"publisher","DOI":"10.1109\/DSN.2019.00056"},{"key":"e_1_3_2_2_66_1","doi-asserted-by":"publisher","DOI":"10.1109\/ICSME.2018.00038"},{"key":"e_1_3_2_2_67_1","doi-asserted-by":"publisher","DOI":"10.1145\/1831708.1831740"},{"key":"e_1_3_2_2_68_1","doi-asserted-by":"publisher","DOI":"10.14722\/ndss.2020.24419"},{"key":"e_1_3_2_2_69_1","volume-title":"29th USENIX Security Symposium (USENIX Security 20)","author":"Xiao Yang","year":"2020"},{"key":"e_1_3_2_2_70_1","doi-asserted-by":"publisher","DOI":"10.1109\/SP.2017.56"},{"key":"e_1_3_2_2_71_1","doi-asserted-by":"publisher","DOI":"10.1145\/3133956.3134018"},{"key":"e_1_3_2_2_72_1","doi-asserted-by":"publisher","DOI":"10.1109\/ICSE.2017.49"},{"key":"e_1_3_2_2_73_1","doi-asserted-by":"publisher","DOI":"10.1145\/3133956.3134085"},{"key":"e_1_3_2_2_74_1","volume-title":"27th USENIX Security Symposium (USENIX Security 18)","author":"Zhang Hang","year":"2018"},{"key":"e_1_3_2_2_75_1","doi-asserted-by":"publisher","DOI":"10.14722\/ndss.2018.23331"},{"key":"e_1_3_2_2_76_1","doi-asserted-by":"publisher","DOI":"10.14722\/ndss.2019.23492"}],"event":{"name":"CCS '20: 2020 ACM SIGSAC Conference on Computer and Communications Security","location":"Virtual Event USA","acronym":"CCS '20","sponsor":["SIGSAC ACM Special Interest Group on Security, Audit, and Control"]},"container-title":["Proceedings of the 2020 ACM SIGSAC Conference on Computer and Communications Security"],"original-title":[],"link":[{"URL":"https:\/\/dl.acm.org\/doi\/10.1145\/3372297.3423342","content-type":"unspecified","content-version":"vor","intended-application":"text-mining"},{"URL":"https:\/\/dl.acm.org\/doi\/pdf\/10.1145\/3372297.3423342","content-type":"application\/pdf","content-version":"vor","intended-application":"syndication"},{"URL":"https:\/\/dl.acm.org\/doi\/pdf\/10.1145\/3372297.3423342","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2025,6,17]],"date-time":"2025-06-17T22:02:20Z","timestamp":1750197740000},"score":1,"resource":{"primary":{"URL":"https:\/\/dl.acm.org\/doi\/10.1145\/3372297.3423342"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2020,10,30]]},"references-count":76,"alternative-id":["10.1145\/3372297.3423342","10.1145\/3372297"],"URL":"https:\/\/doi.org\/10.1145\/3372297.3423342","relation":{},"subject":[],"published":{"date-parts":[[2020,10,30]]},"assertion":[{"value":"2020-11-02","order":2,"name":"published","label":"Published","group":{"name":"publication_history","label":"Publication History"}}]}}