{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,2,5]],"date-time":"2026-02-05T11:09:09Z","timestamp":1770289749484,"version":"3.49.0"},"publisher-location":"New York, NY, USA","reference-count":22,"publisher":"ACM","license":[{"start":{"date-parts":[[2022,11,7]],"date-time":"2022-11-07T00:00:00Z","timestamp":1667779200000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/www.acm.org\/publications\/policies\/copyright_policy#Background"}],"funder":[{"name":"Institute for Information and Communications Technology Planning and Evaluation (IITP)","award":["2022-0-01200"],"award-info":[{"award-number":["2022-0-01200"]}]}],"content-domain":{"domain":["dl.acm.org"],"crossmark-restriction":true},"short-container-title":[],"published-print":{"date-parts":[[2022,11,11]]},"DOI":"10.1145\/3560831.3564258","type":"proceedings-article","created":{"date-parts":[[2022,11,3]],"date-time":"2022-11-03T04:32:39Z","timestamp":1667449959000},"page":"13-18","update-policy":"https:\/\/doi.org\/10.1145\/crossmark-policy","source":"Crossref","is-referenced-by-count":3,"title":["Program Synthesis-based Simplification of MBA Obfuscated Malware with Restart Strategies"],"prefix":"10.1145","author":[{"ORCID":"https:\/\/orcid.org\/0000-0001-5998-6730","authenticated-orcid":false,"given":"Seoyeon","family":"Kang","sequence":"first","affiliation":[{"name":"Chungnam National University, Daejeon, Republic of Korea"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-6340-1763","authenticated-orcid":false,"given":"Jeongwoo","family":"Kim","sequence":"additional","affiliation":[{"name":"Chungnam National University, Deajeon, Republic of Korea"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-9406-3314","authenticated-orcid":false,"given":"Eun-Sun","family":"Cho","sequence":"additional","affiliation":[{"name":"Chungnam National University, Deajeon, Republic of Korea"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-5658-6050","authenticated-orcid":false,"given":"Seokwoo","family":"Choi","sequence":"additional","affiliation":[{"name":"The Affiliated Institute of Electronics and Telecommunications Research Institute, Deajeon, Republic of Korea"}],"role":[{"role":"author","vocabulary":"crossref"}]}],"member":"320","published-online":{"date-parts":[[2022,11,7]]},"reference":[{"key":"e_1_3_2_1_1_1","volume-title":"26th USENIX Security Symposium. 643--659","author":"Blazytko T.","unstructured":"T. Blazytko , M. Contag , C. Aschermann , and T. Holz . 2017. Syntia: Synthesizing the semantics of obfuscated code . In 26th USENIX Security Symposium. 643--659 . T. Blazytko, M. Contag, C. Aschermann, and T. Holz. 2017. Syntia: Synthesizing the semantics of obfuscated code. In 26th USENIX Security Symposium. 643--659."},{"key":"e_1_3_2_1_2_1","volume-title":"The tigress c obfuscator. (Dec","author":"Collberg C.","year":"2021","unstructured":"C. Collberg . 2021. The tigress c obfuscator. (Dec . 2021 ). https:\/\/tigress.wtf. C. Collberg. 2021. The tigress c obfuscator. (Dec. 2021). https:\/\/tigress.wtf."},{"key":"e_1_3_2_1_3_1","volume-title":"BAR 2020 Workshop.","author":"David R.","unstructured":"R. David , L. Coniglio , and M. Ceccato . 2020. Qsynth-a program synthesis based approach for binary code deobfuscation . In BAR 2020 Workshop. R. David, L. Coniglio, and M. Ceccato. 2020. Qsynth-a program synthesis based approach for binary code deobfuscation. In BAR 2020 Workshop."},{"key":"e_1_3_2_1_4_1","volume-title":"Proceedings of the 2016 ACM Workshop on Software PROtection. 27--38","author":"Eyrolles N.","unstructured":"N. Eyrolles , L. Goubin , and M. Videau . 2016. Defeating mba-based obfuscation . In Proceedings of the 2016 ACM Workshop on Software PROtection. 27--38 . N. Eyrolles, L. Goubin, and M. Videau. 2016. Defeating mba-based obfuscation. In Proceedings of the 2016 ACM Workshop on Software PROtection. 27--38."},{"key":"e_1_3_2_1_5_1","doi-asserted-by":"publisher","DOI":"10.18653\/v1\/2020.findings-emnlp.56"},{"key":"e_1_3_2_1_6_1","doi-asserted-by":"publisher","DOI":"10.1561\/2500000010"},{"key":"e_1_3_2_1_7_1","volume-title":"Proceedings of the IEEE\/ACM 1st International Workshop on Software Protection, SPRO'15","author":"Junod P.","year":"2015","unstructured":"P. Junod , J. Rinaldini , J. Wehrli , and J. Michielin . 2015. Obfuscator-LLVM -- Software Protection for the Masses . In Proceedings of the IEEE\/ACM 1st International Workshop on Software Protection, SPRO'15 , May 19 th , 2015 . 3--9. P. Junod, J. Rinaldini, J. Wehrli, and J. Michielin. 2015. Obfuscator-LLVM -- Software Protection for the Masses. In Proceedings of the IEEE\/ACM 1st International Workshop on Software Protection, SPRO'15, May 19th, 2015. 3--9."},{"key":"e_1_3_2_1_8_1","volume-title":"Proceedings of the 42nd ACM SIGPLAN International Conference on Programming Language Design and Implementation. 696--709","author":"Koenig J. R.","unstructured":"J. R. Koenig , O. Padon , and A. Aiken . 2021. Adaptive restarts for stochastic synthesis . In Proceedings of the 42nd ACM SIGPLAN International Conference on Programming Language Design and Implementation. 696--709 . J. R. Koenig, O. Padon, and A. Aiken. 2021. Adaptive restarts for stochastic synthesis. In Proceedings of the 42nd ACM SIGPLAN International Conference on Programming Language Design and Implementation. 696--709."},{"key":"e_1_3_2_1_9_1","volume-title":"MBA-Blast: Unveiling and Simplifying Mixed Boolean-Arithmetic Obfuscation. In 30th USENIX Security Symposium. 1701--1718","author":"Liu B.","unstructured":"B. Liu , J. Shen , J. Ming , Q. Zheng , J. Li , and D. Xu . 2021 . MBA-Blast: Unveiling and Simplifying Mixed Boolean-Arithmetic Obfuscation. In 30th USENIX Security Symposium. 1701--1718 . B. Liu, J. Shen, J. Ming, Q. Zheng, J. Li, and D. Xu. 2021. MBA-Blast: Unveiling and Simplifying Mixed Boolean-Arithmetic Obfuscation. In 30th USENIX Security Symposium. 1701--1718."},{"key":"e_1_3_2_1_10_1","doi-asserted-by":"publisher","DOI":"10.1016\/0020-0190(93)90029-9"},{"key":"e_1_3_2_1_11_1","volume-title":"Improve and Mitigate. In In Proceedings of ACM SIGSAC Conference on Computer and Communications Security. 2513--2525","author":"Menguy G.","year":"2021","unstructured":"G. Menguy , S. Bardin , R. Bonichon , and C. de S. Lima . 2021 . Search-Based Local Black-Box Deobfuscation: Understand , Improve and Mitigate. In In Proceedings of ACM SIGSAC Conference on Computer and Communications Security. 2513--2525 . G. Menguy, S. Bardin, R. Bonichon, and C. de S. Lima. 2021. Search-Based Local Black-Box Deobfuscation: Understand, Improve and Mitigate. In In Proceedings of ACM SIGSAC Conference on Computer and Communications Security. 2513--2525."},{"key":"e_1_3_2_1_12_1","volume-title":"Code deobfuscation framework to Simplify MBA expressions. https:\/\/github.com\/mrphrazer\/MSynth. (Oct","year":"2021","unstructured":"Mrphrazer. 2021. Mrphrazer\/msynth : Code deobfuscation framework to Simplify MBA expressions. https:\/\/github.com\/mrphrazer\/MSynth. (Oct . 2021 ). Mrphrazer. 2021. Mrphrazer\/msynth: Code deobfuscation framework to Simplify MBA expressions. https:\/\/github.com\/mrphrazer\/MSynth. (Oct. 2021)."},{"key":"e_1_3_2_1_13_1","volume-title":"International Conference on Detection of Intrusions and Malware, and Vulnerability Assessment. Springer, 372--392","author":"Salwan J.","unstructured":"J. Salwan , S. Bardin , and M. Potet . 2018. Symbolic deobfuscation: From virtualized code back to the original . In International Conference on Detection of Intrusions and Malware, and Vulnerability Assessment. Springer, 372--392 . J. Salwan, S. Bardin, and M. Potet. 2018. Symbolic deobfuscation: From virtualized code back to the original. In International Conference on Detection of Intrusions and Malware, and Vulnerability Assessment. Springer, 372--392."},{"key":"e_1_3_2_1_14_1","doi-asserted-by":"publisher","DOI":"10.1145\/2490301.2451150"},{"key":"e_1_3_2_1_15_1","volume-title":"Loki: Hardening Code Obfuscation Against Automated Attacks. ArXiv","author":"Schloegel M.","year":"2021","unstructured":"M. Schloegel , T. Blazytko , M. Contag , C. Aschermann , J. Basler , T. Holz , and A. R. Abbasi . 2021 . Loki: Hardening Code Obfuscation Against Automated Attacks. ArXiv , Vol. abs\/ 2106 .08913 (2021). M. Schloegel, T. Blazytko, M. Contag, C. Aschermann, J. Basler, T. Holz, and A. R. Abbasi. 2021. Loki: Hardening Code Obfuscation Against Automated Attacks. ArXiv , Vol. abs\/2106.08913 (2021)."},{"key":"e_1_3_2_1_16_1","volume-title":"Obfuscation: Can It Keep Pace with Progress in Code Analysis? ACM Comput. Surv.","author":"Schrittwieser S.","year":"2016","unstructured":"S. Schrittwieser , S. Katzenbeisser , J. Kinder , G. Merzdovnik , and E. R. Weippl . 2016 . Protecting Software through Obfuscation: Can It Keep Pace with Progress in Code Analysis? ACM Comput. Surv. , Vol. 49 , 1 (2016), 4:1--4:37. https:\/\/doi.org\/10.1145\/2886012 10.1145\/2886012 S. Schrittwieser, S. Katzenbeisser, J. Kinder, G. Merzdovnik, and E. R. Weippl. 2016. Protecting Software through Obfuscation: Can It Keep Pace with Progress in Code Analysis? ACM Comput. Surv. , Vol. 49, 1 (2016), 4:1--4:37. https:\/\/doi.org\/10.1145\/2886012"},{"key":"e_1_3_2_1_17_1","volume-title":"qsynth-artifacts: Synthesis artifacts for qsynth. (Aug","year":"2021","unstructured":"Werew. 2021. qsynth-artifacts: Synthesis artifacts for qsynth. (Aug . 2021 ). https:\/\/github.com\/werew\/qsynth-artifacts. Werew. 2021. qsynth-artifacts: Synthesis artifacts for qsynth. (Aug. 2021). https:\/\/github.com\/werew\/qsynth-artifacts."},{"key":"e_1_3_2_1_18_1","volume-title":"Proceedings of the 2018 ACM SIGSAC Conference on Computer and Communications Security. 442--458","author":"Xu D.","unstructured":"D. Xu , J. Ming , Y. Fu , and D. Wu . 2018. VMHunt: A verifiable approach to partially-virtualized binary code simplification . In Proceedings of the 2018 ACM SIGSAC Conference on Computer and Communications Security. 442--458 . D. Xu, J. Ming, Y. Fu, and D. Wu. 2018. VMHunt: A verifiable approach to partially-virtualized binary code simplification. In Proceedings of the 2018 ACM SIGSAC Conference on Computer and Communications Security. 442--458."},{"key":"e_1_3_2_1_19_1","volume-title":"Proceedings of the 2014 IEEE 14th International Working Conference on Source Code Analysis and Manipulation. 255--264","author":"Yadegari B.","unstructured":"B. Yadegari and S. Debray . 2014. Bit-level taint analysis . In Proceedings of the 2014 IEEE 14th International Working Conference on Source Code Analysis and Manipulation. 255--264 . B. Yadegari and S. Debray. 2014. Bit-level taint analysis. In Proceedings of the 2014 IEEE 14th International Working Conference on Source Code Analysis and Manipulation. 255--264."},{"key":"e_1_3_2_1_20_1","volume-title":"Proceedings of the 22nd ACM SIGSAC Conference on Computer and Communications Security. 732--744","author":"Yadegari B.","unstructured":"B. Yadegari and S. Debray . 2015. Symbolic execution of obfuscated code . In Proceedings of the 22nd ACM SIGSAC Conference on Computer and Communications Security. 732--744 . B. Yadegari and S. Debray. 2015. Symbolic execution of obfuscated code. In Proceedings of the 22nd ACM SIGSAC Conference on Computer and Communications Security. 732--744."},{"key":"e_1_3_2_1_21_1","volume-title":"The Z3 Theorem Prover. (Aug","year":"2022","unstructured":"Z3. 2022. The Z3 Theorem Prover. (Aug . 2022 ). https:\/\/github.com\/Z3Prover\/z3. Z3. 2022. The Z3 Theorem Prover. (Aug. 2022). https:\/\/github.com\/Z3Prover\/z3."},{"key":"e_1_3_2_1_22_1","volume-title":"8th International Workshop, WISA (LNCS)","volume":"4867","author":"Zhou Y.","unstructured":"Y. Zhou , A. Main , Y. Xiang Gu , and H. Johnson . 2007. Information Hiding in Software with Mixed Boolean-Arithmetic Transforms. In Information Security Applications , 8th International Workshop, WISA (LNCS) , Vol. 4867 . Springer, 61--75. io Y. Zhou, A. Main, Y. Xiang Gu, and H. Johnson. 2007. Information Hiding in Software with Mixed Boolean-Arithmetic Transforms. In Information Security Applications, 8th International Workshop, WISA (LNCS), Vol. 4867. Springer, 61--75. io"}],"event":{"name":"CCS '22: 2022 ACM SIGSAC Conference on Computer and Communications Security","location":"Los Angeles CA USA","acronym":"CCS '22","sponsor":["SIGSAC ACM Special Interest Group on Security, Audit, and Control"]},"container-title":["Proceedings of the 2022 ACM Workshop on Research on offensive and defensive techniques in the context of Man At The End (MATE) attacks"],"original-title":[],"link":[{"URL":"https:\/\/dl.acm.org\/doi\/10.1145\/3560831.3564258","content-type":"unspecified","content-version":"vor","intended-application":"text-mining"},{"URL":"https:\/\/dl.acm.org\/doi\/pdf\/10.1145\/3560831.3564258","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2025,6,17]],"date-time":"2025-06-17T19:00:34Z","timestamp":1750186834000},"score":1,"resource":{"primary":{"URL":"https:\/\/dl.acm.org\/doi\/10.1145\/3560831.3564258"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2022,11,7]]},"references-count":22,"alternative-id":["10.1145\/3560831.3564258","10.1145\/3560831"],"URL":"https:\/\/doi.org\/10.1145\/3560831.3564258","relation":{},"subject":[],"published":{"date-parts":[[2022,11,7]]},"assertion":[{"value":"2022-11-07","order":2,"name":"published","label":"Published","group":{"name":"publication_history","label":"Publication History"}}]}}