{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,10,22]],"date-time":"2026-10-22T02:56:42Z","timestamp":1792637802227,"version":"4.5.0"},"publisher-location":"New York, NY, USA","reference-count":86,"publisher":"ACM","license":[{"start":{"date-parts":[[2020,10,30]],"date-time":"2020-10-30T00:00:00Z","timestamp":1604016000000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/www.acm.org\/publications\/policies\/copyright_policy#Background"}],"content-domain":{"domain":["dl.acm.org"],"crossmark-restriction":true},"short-container-title":[],"published-print":{"date-parts":[[2020,10,30]]},"DOI":"10.1145\/3372297.3423357","type":"proceedings-article","created":{"date-parts":[[2021,3,4]],"date-time":"2021-03-04T16:21:21Z","timestamp":1614874881000},"page":"1185-1202","update-policy":"https:\/\/doi.org\/10.1145\/crossmark-policy","source":"Crossref","is-referenced-by-count":10,"title":["iDEA: Static Analysis on the Security of Apple Kernel Drivers"],"prefix":"10.1145","author":[{"given":"Xiaolong","family":"Bai","sequence":"first","affiliation":[{"name":"Orion Security Lab, Alibaba Group, Beijing, China"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Luyi","family":"Xing","sequence":"additional","affiliation":[{"name":"Indiana University Bloomington, Bloomington, IN, USA"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Min","family":"Zheng","sequence":"additional","affiliation":[{"name":"Orion Security Lab, Alibaba Group, Beijing, China"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Fuping","family":"Qu","sequence":"additional","affiliation":[{"name":"Orion Security Lab, Alibaba Group, Beijing, China"}],"role":[{"vocabulary":"crossref","role":"author"}]}],"member":"320","published-online":{"date-parts":[[2020,11,2]]},"reference":[{"key":"e_1_3_2_2_1_1","unstructured":"Adam Donenfeld. 2018. Viewer Discretion Advised: (De)coding an iOS Kernel Vulnerability. http:\/\/phrack.org\/papers\/viewer_discretion_advised.html.  Adam Donenfeld. 2018. Viewer Discretion Advised: (De)coding an iOS Kernel Vulnerability. http:\/\/phrack.org\/papers\/viewer_discretion_advised.html."},{"key":"e_1_3_2_2_2_1","unstructured":"anonymous author. 2020. iDEA Supporting Website. https:\/\/sites.google.com\/view\/idea-apple-driver.  anonymous author. 2020. iDEA Supporting Website. https:\/\/sites.google.com\/view\/idea-apple-driver."},{"key":"e_1_3_2_2_3_1","unstructured":"Apple Inc. 2004. The libkern Base Classes. (2004). http:\/\/mirror.informatimago.com\/next\/developer.apple.com\/documentation\/DeviceDrivers\/Conceptual\/IOKitFundamentals\/BaseClasses\/chapter_6_section_2.html.  Apple Inc. 2004. The libkern Base Classes. (2004). http:\/\/mirror.informatimago.com\/next\/developer.apple.com\/documentation\/DeviceDrivers\/Conceptual\/IOKitFundamentals\/BaseClasses\/chapter_6_section_2.html."},{"key":"e_1_3_2_2_4_1","unstructured":"Apple Inc. 2014a. The Base Classes. https:\/\/developer.apple.com\/library\/archive\/documentation\/DeviceDrivers\/Conceptual\/IOKitFundamentals\/BaseClasses\/BaseClasses.html.  Apple Inc. 2014a. The Base Classes. https:\/\/developer.apple.com\/library\/archive\/documentation\/DeviceDrivers\/Conceptual\/IOKitFundamentals\/BaseClasses\/BaseClasses.html."},{"key":"e_1_3_2_2_5_1","unstructured":"Apple Inc. 2014b. Introduction to I\/O Kit Fundamentals. https:\/\/developer.apple.com\/library\/archive\/documentation\/DeviceDrivers\/Conceptual\/IOKitFundamentals\/Introduction\/Introduction.html.  Apple Inc. 2014b. Introduction to I\/O Kit Fundamentals. https:\/\/developer.apple.com\/library\/archive\/documentation\/DeviceDrivers\/Conceptual\/IOKitFundamentals\/Introduction\/Introduction.html."},{"key":"e_1_3_2_2_6_1","unstructured":"Apple Inc. 2018a. About Information Property List Files. https:\/\/developer.apple.com\/library\/archive\/documentation\/General\/Reference\/InfoPlistKeyReference\/Articles\/AboutInformationPropertyListFiles.html.  Apple Inc. 2018a. About Information Property List Files. https:\/\/developer.apple.com\/library\/archive\/documentation\/General\/Reference\/InfoPlistKeyReference\/Articles\/AboutInformationPropertyListFiles.html."},{"key":"e_1_3_2_2_7_1","unstructured":"Apple Inc. 2018b. XNU source code. (2018). https:\/\/opensource.apple.com\/source\/xnu\/.  Apple Inc. 2018b. XNU source code. (2018). https:\/\/opensource.apple.com\/source\/xnu\/."},{"key":"e_1_3_2_2_8_1","unstructured":"Apple Inc. 2019 a. Apple security updates. (2019). https:\/\/support.apple.com\/en-us\/HT201222.  Apple Inc. 2019 a. Apple security updates. (2019). https:\/\/support.apple.com\/en-us\/HT201222."},{"key":"e_1_3_2_2_9_1","unstructured":"Apple Inc. 2019 b. Kernel. https:\/\/developer.apple.com\/documentation\/kernel.  Apple Inc. 2019 b. Kernel. https:\/\/developer.apple.com\/documentation\/kernel."},{"key":"e_1_3_2_2_10_1","unstructured":"Apple Inc. 2020 a. CFBundleIdentifier. https:\/\/developer.apple.com\/documentation\/bundleresources\/information_property_list\/cfbundleidentifier.  Apple Inc. 2020 a. CFBundleIdentifier. https:\/\/developer.apple.com\/documentation\/bundleresources\/information_property_list\/cfbundleidentifier."},{"key":"e_1_3_2_2_11_1","unstructured":"Apple Inc. 2020 b. fromPath(const char * const IORegistryPlane * char * int *). https:\/\/developer.apple.com\/documentation\/kernel\/ioregistryentry\/1810742-frompath.  Apple Inc. 2020 b. fromPath(const char * const IORegistryPlane * char * int *). https:\/\/developer.apple.com\/documentation\/kernel\/ioregistryentry\/1810742-frompath."},{"key":"e_1_3_2_2_12_1","unstructured":"Apple Inc. 2020 c. Identify the ports on your Mac. https:\/\/support.apple.com\/en-us\/HT201736.  Apple Inc. 2020 c. Identify the ports on your Mac. https:\/\/support.apple.com\/en-us\/HT201736."},{"key":"e_1_3_2_2_13_1","unstructured":"Apple Inc. 2020 d. Introducing Xcode 12. https:\/\/developer.apple.com\/xcode\/.  Apple Inc. 2020 d. Introducing Xcode 12. https:\/\/developer.apple.com\/xcode\/."},{"key":"e_1_3_2_2_14_1","doi-asserted-by":"crossref","unstructured":"Apple Inc. 2020 e. IOHIDFamily-1446.80.2. https:\/\/opensource.apple.com\/source\/IOHIDFamily\/IOHIDFamily-1446.80.2\/.  Apple Inc. 2020 e. IOHIDFamily-1446.80.2. https:\/\/opensource.apple.com\/source\/IOHIDFamily\/IOHIDFamily-1446.80.2\/.","DOI":"10.1158\/1538-7445.AM2020-1446"},{"key":"e_1_3_2_2_15_1","unstructured":"Apple Inc. 2020 f. IOLocks.h. https:\/\/opensource.apple.com\/source\/xnu\/xnu-6153.61.1\/iokit\/IOKit\/IOLocks.h.auto.html.  Apple Inc. 2020 f. IOLocks.h. https:\/\/opensource.apple.com\/source\/xnu\/xnu-6153.61.1\/iokit\/IOKit\/IOLocks.h.auto.html."},{"key":"e_1_3_2_2_16_1","unstructured":"Apple Inc. 2020 g. IONetworkingFamily-139.60.1. https:\/\/opensource.apple.com\/source\/IONetworkingFamily\/IONetworkingFamily-139.60.1\/.  Apple Inc. 2020 g. IONetworkingFamily-139.60.1. https:\/\/opensource.apple.com\/source\/IONetworkingFamily\/IONetworkingFamily-139.60.1\/."},{"key":"e_1_3_2_2_17_1","unstructured":"Apple Inc. 2020 h. IOPCIFamily-370.81.1. https:\/\/opensource.apple.com\/source\/IOPCIFamily\/IOPCIFamily-370.81.1\/.  Apple Inc. 2020 h. IOPCIFamily-370.81.1. https:\/\/opensource.apple.com\/source\/IOPCIFamily\/IOPCIFamily-370.81.1\/."},{"key":"e_1_3_2_2_18_1","unstructured":"Apple Inc. 2020 i. IOStorageFamily-238.0.1. https:\/\/opensource.apple.com\/source\/IOStorageFamily\/IOStorageFamily-238.0.1\/.  Apple Inc. 2020 i. IOStorageFamily-238.0.1. https:\/\/opensource.apple.com\/source\/IOStorageFamily\/IOStorageFamily-238.0.1\/."},{"key":"e_1_3_2_2_19_1","unstructured":"Apple Inc. 2020 j. OSMetaClassBase. https:\/\/developer.apple.com\/documentation\/kernel\/osmetaclassbase.  Apple Inc. 2020 j. OSMetaClassBase. https:\/\/developer.apple.com\/documentation\/kernel\/osmetaclassbase."},{"key":"e_1_3_2_2_20_1","unstructured":"Apple Inc. 2020 k. propertyMatching. https:\/\/developer.apple.com\/documentation\/kernel\/ioservice\/1810622-propertymatching.  Apple Inc. 2020 k. propertyMatching. https:\/\/developer.apple.com\/documentation\/kernel\/ioservice\/1810622-propertymatching."},{"key":"e_1_3_2_2_21_1","unstructured":"Apple Inc. 2020 l. release. https:\/\/developer.apple.com\/documentation\/kernel\/osobject\/1941151-release.  Apple Inc. 2020 l. release. https:\/\/developer.apple.com\/documentation\/kernel\/osobject\/1941151-release."},{"key":"e_1_3_2_2_22_1","unstructured":"Apple Inc. 2020 m. resourceMatching(const char * OSDictionary *). https:\/\/developer.apple.com\/documentation\/kernel\/ioservice\/1810840-resourcematching.  Apple Inc. 2020 m. resourceMatching(const char * OSDictionary *). https:\/\/developer.apple.com\/documentation\/kernel\/ioservice\/1810840-resourcematching."},{"key":"e_1_3_2_2_23_1","unstructured":"Apple Inc. 2020 n. retain. https:\/\/developer.apple.com\/documentation\/kernel\/osobject\/1941154-retain.  Apple Inc. 2020 n. retain. https:\/\/developer.apple.com\/documentation\/kernel\/osobject\/1941154-retain."},{"key":"e_1_3_2_2_24_1","unstructured":"Apple Inc. 2020 o. runAction. https:\/\/developer.apple.com\/documentation\/kernel\/iocommandgate\/1811576-runaction.  Apple Inc. 2020 o. runAction. https:\/\/developer.apple.com\/documentation\/kernel\/iocommandgate\/1811576-runaction."},{"key":"e_1_3_2_2_25_1","volume-title":"2020","author":"Apple Inc.","year":"1811"},{"key":"e_1_3_2_2_26_1","doi-asserted-by":"publisher","DOI":"10.1145\/1218063.1217943"},{"key":"e_1_3_2_2_27_1","unstructured":"bazad. 2018. ida_kernelcache: An IDA Toolkit for analyzing iOS kernelcaches. https:\/\/github.com\/bazad\/ida_kernelcache.  bazad. 2018. ida_kernelcache: An IDA Toolkit for analyzing iOS kernelcaches. https:\/\/github.com\/bazad\/ida_kernelcache."},{"key":"e_1_3_2_2_28_1","volume-title":"pwn4fun","author":"Beer Ian","year":"2014"},{"key":"e_1_3_2_2_29_1","doi-asserted-by":"publisher","DOI":"10.1145\/1961296.1950396"},{"key":"e_1_3_2_2_30_1","unstructured":"CodeSourcery Compaq EDG HP IBM Intel Red Hat and SGI. 2019. 5.1 External Names (a.k.a. Mangling). https:\/\/itanium-cxx-abi.github.io\/cxx-abi\/abi.html.  CodeSourcery Compaq EDG HP IBM Intel Red Hat and SGI. 2019. 5.1 External Names (a.k.a. Mangling). https:\/\/itanium-cxx-abi.github.io\/cxx-abi\/abi.html."},{"key":"e_1_3_2_2_31_1","unstructured":"David Dewey and Jonathon T Giffin. 2012. Static detection of C+ vtable escape vulnerabilities in binary code.. In NDSS .  David Dewey and Jonathon T Giffin. 2012. Static detection of C+ vtable escape vulnerabilities in binary code.. In NDSS ."},{"key":"e_1_3_2_2_32_1","doi-asserted-by":"publisher","DOI":"10.1109\/ARES.2015.61"},{"key":"e_1_3_2_2_34_1","unstructured":"Manuel Egele Christopher Kruegel Engin Kirda and Giovanni Vigna. 2011. PiOS: Detecting Privacy Leaks in iOS Applications.. In NDSS. 177--183.  Manuel Egele Christopher Kruegel Engin Kirda and Giovanni Vigna. 2011. PiOS: Detecting Privacy Leaks in iOS Applications.. In NDSS. 177--183."},{"key":"e_1_3_2_2_35_1","volume-title":"The annotated C+ reference manual","author":"Ellis Margaret A"},{"key":"e_1_3_2_2_36_1","volume-title":"Exploiting the iOS kernel. Black Hat USA","year":"2011"},{"key":"e_1_3_2_2_37_1","unstructured":"Flanker. 2016. The Python Bites your Apple Fuzzing and exploiting OSX Kernel bugs. https:\/\/papers.put.as\/papers\/macosx\/2016\/xkungfoo.pdf.  Flanker. 2016. The Python Bites your Apple Fuzzing and exploiting OSX Kernel bugs. https:\/\/papers.put.as\/papers\/macosx\/2016\/xkungfoo.pdf."},{"key":"e_1_3_2_2_38_1","doi-asserted-by":"publisher","DOI":"10.1109\/WCRE.2011.49"},{"key":"e_1_3_2_2_39_1","doi-asserted-by":"publisher","DOI":"10.1109\/CSMR.2010.43"},{"key":"e_1_3_2_2_40_1","unstructured":"GNU. 2020. Demangling. https:\/\/gcc.gnu.org\/onlinedocs\/libstdc+\/manual\/ext_demangling.html.  GNU. 2020. Demangling. https:\/\/gcc.gnu.org\/onlinedocs\/libstdc+\/manual\/ext_demangling.html."},{"key":"e_1_3_2_2_41_1","doi-asserted-by":"publisher","DOI":"10.1145\/3133956.3134103"},{"key":"e_1_3_2_2_42_1","volume-title":"IDA: About.","year":"2015"},{"key":"e_1_3_2_2_43_1","unstructured":"Ian Beer. 2018. CVE-2017--13861. https:\/\/bugs.chromium.org\/p\/project-zero\/issues\/detail?id=1417.  Ian Beer. 2018. CVE-2017--13861. https:\/\/bugs.chromium.org\/p\/project-zero\/issues\/detail?id=1417."},{"key":"e_1_3_2_2_44_1","unstructured":"Ian Beer. 2019. A very deep dive into iOS Exploit chains found in the wild. https:\/\/googleprojectzero.blogspot.com\/2019\/08\/a-very-deep-dive-into-ios-exploit.html.  Ian Beer. 2019. A very deep dive into iOS Exploit chains found in the wild. https:\/\/googleprojectzero.blogspot.com\/2019\/08\/a-very-deep-dive-into-ios-exploit.html."},{"key":"e_1_3_2_2_45_1","unstructured":"iOS Expert. 2017. Apple's iOS Kernel Patch Protection (KPP) Explained. (2017). https:\/\/yalujailbreak.net\/kernel-patch-protection\/.  iOS Expert. 2017. Apple's iOS Kernel Patch Protection (KPP) Explained. (2017). https:\/\/yalujailbreak.net\/kernel-patch-protection\/."},{"key":"e_1_3_2_2_46_1","volume-title":"https:\/\/ipsw.me\/","author":"Penguin Just","year":"2019"},{"key":"e_1_3_2_2_47_1","volume-title":"Pegasus: The ultimate spyware for iOS and Android.","author":"Lab Kaspersky","year":"2017"},{"key":"e_1_3_2_2_48_1","doi-asserted-by":"publisher","DOI":"10.1145\/2837614.2837674"},{"key":"e_1_3_2_2_49_1","doi-asserted-by":"publisher","DOI":"10.1145\/3173162.3173202"},{"key":"e_1_3_2_2_50_1","volume-title":"Formal Methods in Computer-Aided Design (FMCAD)","author":"Kinder Johannes","year":"2010"},{"key":"e_1_3_2_2_51_1","volume-title":"DR. CHECKER: A Soundy Analysis for Linux Kernel Drivers. In 26th USENIX Security Symposium (USENIX Security 17)","author":"Machiry Aravind","year":"2017"},{"key":"e_1_3_2_2_52_1","unstructured":"Mandt Tarjei. 2013. Attacking the iOS Kernel: A Look at?evasi0n?. http:\/\/www.nislab.no\/content\/download\/38610\/481190\/file\/NISlecture201303.pdf.  Mandt Tarjei. 2013. Attacking the iOS Kernel: A Look at?evasi0n?. http:\/\/www.nislab.no\/content\/download\/38610\/481190\/file\/NISlecture201303.pdf."},{"key":"e_1_3_2_2_53_1","doi-asserted-by":"publisher","DOI":"10.1145\/2592791.2592793"},{"key":"e_1_3_2_2_54_1","unstructured":"Micorsoft. 2019 a. WDF_DRIVER_CONFIG structure. https:\/\/docs.microsoft.com\/en-us\/windows-hardware\/drivers\/ddi\/wdfdriver\/ns-wdfdriver-_wdf_driver_config.  Micorsoft. 2019 a. WDF_DRIVER_CONFIG structure. https:\/\/docs.microsoft.com\/en-us\/windows-hardware\/drivers\/ddi\/wdfdriver\/ns-wdfdriver-_wdf_driver_config."},{"key":"e_1_3_2_2_55_1","unstructured":"Micorsoft. 2019 b. WdfDriverCreate function. https:\/\/docs.microsoft.com\/en-us\/windows-hardware\/drivers\/ddi\/wdfdriver\/nf-wdfdriver-wdfdrivercreate.  Micorsoft. 2019 b. WdfDriverCreate function. https:\/\/docs.microsoft.com\/en-us\/windows-hardware\/drivers\/ddi\/wdfdriver\/nf-wdfdriver-wdfdrivercreate."},{"key":"e_1_3_2_2_56_1","volume-title":"6 Of The Best Firewire Audio Interfaces","author":"Matter Music","year":"2015"},{"key":"e_1_3_2_2_57_1","volume-title":"26th USENIX Security Symposium (USENIX Security 17)","author":"Pan Jianfeng","year":"2017"},{"key":"e_1_3_2_2_58_1","doi-asserted-by":"publisher","DOI":"10.5555\/3049877.3049889"},{"key":"e_1_3_2_2_59_1","volume-title":"MARX: Uncovering Class Hierarchies in C+ Programs.. In NDSS .","author":"Pawlowski Andre","year":"2017"},{"key":"e_1_3_2_2_60_1","unstructured":"Plaskett Alex and Loureiro James. 2017. Biting the Apple that feeds you - macOS Kernel Fuzzing. https:\/\/labs.f-secure.com\/archive\/biting-the-apple-that-feeds-you-macos-kernel-fuzzing\/.  Plaskett Alex and Loureiro James. 2017. Biting the Apple that feeds you - macOS Kernel Fuzzing. https:\/\/labs.f-secure.com\/archive\/biting-the-apple-that-feeds-you-macos-kernel-fuzzing\/."},{"key":"e_1_3_2_2_61_1","unstructured":"Quarkslab. 2019. Taint analysis on aarch64 binaries? https:\/\/github.com\/JonathanSalwan\/Triton\/issues\/837.  Quarkslab. 2019. Taint analysis on aarch64 binaries? https:\/\/github.com\/JonathanSalwan\/Triton\/issues\/837."},{"key":"e_1_3_2_2_62_1","unstructured":"Quarkslab. 2020. Triton - A DBA Framework. https:\/\/triton.quarkslab.com\/.  Quarkslab. 2020. Triton - A DBA Framework. https:\/\/triton.quarkslab.com\/."},{"key":"e_1_3_2_2_63_1","volume-title":"Swift","author":"Renzelmann Matthew J.","year":"2012"},{"key":"e_1_3_2_2_64_1","volume-title":"https:\/\/www.blackhat.com\/presentations\/bh-dc-07\/Sabanal_Yason\/Paper\/bh-dc-07-Sabanal_Yason-WP.pdf","author":"Sabanal Paul Vincent","year":"2007"},{"key":"e_1_3_2_2_65_1","volume-title":"Symposium sur la s\u00e9curit\u00e9 des technologies de l'information et des communications, SSTIC, France, Rennes. 31--54","author":"Saudel Florent","year":"2015"},{"key":"e_1_3_2_2_66_1","volume-title":"26th USENIX Security Symposium (USENIX Security 17)","author":"Schumilo Sergej","year":"2017"},{"key":"e_1_3_2_2_67_1","doi-asserted-by":"publisher","DOI":"10.1145\/3243734.3243793"},{"key":"e_1_3_2_2_68_1","unstructured":"Semmle. 2020. Semmle. https:\/\/semmle.com\/.  Semmle. 2020. Semmle. https:\/\/semmle.com\/."},{"key":"e_1_3_2_2_69_1","unstructured":"ShiftLeftSecurity. 2020. Joern Documentation. https:\/\/joern.io\/docs\/.  ShiftLeftSecurity. 2020. Joern Documentation. https:\/\/joern.io\/docs\/."},{"key":"e_1_3_2_2_70_1","volume-title":"https:\/\/github.com\/SilverMoonSecurity\/PassiveFuzzFrameworkOSX","author":"OSX.","year":"2016"},{"key":"e_1_3_2_2_71_1","volume-title":"Black Hat Europe","volume":"2007","author":"Sotirov Alexander","year":"2007"},{"key":"e_1_3_2_2_72_1","unstructured":"Stefan Esser. 2011a. IDA-IOS-Toolkit. https:\/\/github.com\/stefanesser\/IDA-IOS-Toolkit.  Stefan Esser. 2011a. IDA-IOS-Toolkit. https:\/\/github.com\/stefanesser\/IDA-IOS-Toolkit."},{"key":"e_1_3_2_2_73_1","unstructured":"Stefan Esser. 2011b. Targeting the iOS Kernel. https:\/\/papers.put.as\/papers\/ios\/2011\/SysScan-Singapore-Targeting_The_IOS_Kernel.pdf.  Stefan Esser. 2011b. Targeting the iOS Kernel. https:\/\/papers.put.as\/papers\/ios\/2011\/SysScan-Singapore-Targeting_The_IOS_Kernel.pdf."},{"key":"e_1_3_2_2_74_1","volume-title":"Ardalan Amiri Sani, and Zhiyun Qian","author":"Seyed Talebi Seyed Mohammadjavad","year":"2018"},{"key":"e_1_3_2_2_75_1","unstructured":"The Clang Team. 2019. LibClang. https:\/\/clang.llvm.org\/docs\/Tooling.html.  The Clang Team. 2019. LibClang. https:\/\/clang.llvm.org\/docs\/Tooling.html."},{"key":"e_1_3_2_2_76_1","unstructured":"The MITRE Corporation. 2019. CWE-416: Use After Free. https:\/\/cwe.mitre.org\/data\/definitions\/416.html.  The MITRE Corporation. 2019. CWE-416: Use After Free. https:\/\/cwe.mitre.org\/data\/definitions\/416.html."},{"key":"e_1_3_2_2_77_1","unstructured":"The MITRE Corporation. 2020. CWE-787: Out-of-bounds Write. https:\/\/cwe.mitre.org\/data\/definitions\/787.html.  The MITRE Corporation. 2020. CWE-787: Out-of-bounds Write. https:\/\/cwe.mitre.org\/data\/definitions\/787.html."},{"key":"e_1_3_2_2_78_1","volume-title":"Pangu 9 internals. Black Hat USA","author":"Wang Tielei","year":"2016"},{"key":"e_1_3_2_2_79_1","volume-title":"Presented as part of the 10th USENIX Symposium on Operating Systems Design and Implementation (OSDI 12)","author":"Wang Xi"},{"key":"e_1_3_2_2_80_1","doi-asserted-by":"publisher","DOI":"10.1145\/103135.103136"},{"key":"e_1_3_2_2_81_1","doi-asserted-by":"publisher","DOI":"10.1109\/TSE.1984.5010248"},{"key":"e_1_3_2_2_82_1","unstructured":"Wikipedia. 2020 a. Executable and Linkable Format. https:\/\/en.wikipedia.org\/wiki\/Executable_and_Linkable_Format.  Wikipedia. 2020 a. Executable and Linkable Format. https:\/\/en.wikipedia.org\/wiki\/Executable_and_Linkable_Format."},{"key":"e_1_3_2_2_83_1","unstructured":"Wikipedia. 2020 b. Mach-O. https:\/\/en.wikipedia.org\/wiki\/Mach-O.  Wikipedia. 2020 b. Mach-O. https:\/\/en.wikipedia.org\/wiki\/Mach-O."},{"key":"e_1_3_2_2_84_1","unstructured":"Wikipedia. 2020 c. Portable Executable. https:\/\/en.wikipedia.org\/wiki\/Portable_Executable.  Wikipedia. 2020 c. Portable Executable. https:\/\/en.wikipedia.org\/wiki\/Portable_Executable."},{"key":"e_1_3_2_2_85_1","unstructured":"Xiaolong Bai Min (Spark) Zheng. 2018. Eating The Core of an Apple: How to Analyze and Find Bugs in MacOS and iOS Kernel Drivers. https:\/\/conference.hitb.org\/hitbsecconf2018ams\/sessions\/eating-the-core-of-an-apple-how-to-analyze-and-find-bugs-in-macos-and-ios-kernel-drivers\/.  Xiaolong Bai Min (Spark) Zheng. 2018. Eating The Core of an Apple: How to Analyze and Find Bugs in MacOS and iOS Kernel Drivers. https:\/\/conference.hitb.org\/hitbsecconf2018ams\/sessions\/eating-the-core-of-an-apple-how-to-analyze-and-find-bugs-in-macos-and-ios-kernel-drivers\/."},{"key":"e_1_3_2_2_86_1","volume-title":"11th USENIX Workshop on Offensive Technologies ($$WOOT$$ 17)","author":"Xu Zhenquan","year":"2017"},{"key":"e_1_3_2_2_87_1","doi-asserted-by":"publisher","DOI":"10.1109\/SP.2014.33"}],"event":{"name":"CCS '20: 2020 ACM SIGSAC Conference on Computer and Communications Security","location":"Virtual Event USA","acronym":"CCS '20","sponsor":["SIGSAC ACM Special Interest Group on Security, Audit, and Control"]},"container-title":["Proceedings of the 2020 ACM SIGSAC Conference on Computer and Communications Security"],"original-title":[],"link":[{"URL":"https:\/\/dl.acm.org\/doi\/10.1145\/3372297.3423357","content-type":"unspecified","content-version":"vor","intended-application":"text-mining"},{"URL":"https:\/\/dl.acm.org\/doi\/pdf\/10.1145\/3372297.3423357","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2025,6,17]],"date-time":"2025-06-17T22:02:20Z","timestamp":1750197740000},"score":1,"resource":{"primary":{"URL":"https:\/\/dl.acm.org\/doi\/10.1145\/3372297.3423357"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2020,10,30]]},"references-count":86,"alternative-id":["10.1145\/3372297.3423357","10.1145\/3372297"],"URL":"https:\/\/doi.org\/10.1145\/3372297.3423357","relation":{},"subject":[],"published":{"date-parts":[[2020,10,30]]},"assertion":[{"value":"2020-11-02","order":2,"name":"published","label":"Published","group":{"name":"publication_history","label":"Publication History"}}]}}