{"id":"https://openalex.org/W3206706367","doi":"https://doi.org/10.1145/3471621.3471851","title":"DisCo: Combining Disassemblers for Improved Performance","display_name":"DisCo: Combining Disassemblers for Improved Performance","publication_year":2021,"publication_date":"2021-10-06","ids":{"openalex":"https://openalex.org/W3206706367","doi":"https://doi.org/10.1145/3471621.3471851","mag":"3206706367"},"language":"en","primary_location":{"is_oa":true,"landing_page_url":"https://doi.org/10.1145/3471621.3471851","pdf_url":"https://dl.acm.org/doi/pdf/10.1145/3471621.3471851","source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true},"type":"article","type_crossref":"proceedings-article","indexed_in":["crossref"],"open_access":{"is_oa":true,"oa_status":"bronze","oa_url":"https://dl.acm.org/doi/pdf/10.1145/3471621.3471851","any_repository_has_fulltext":true},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5070729072","display_name":"Sri Shaila","orcid":null},"institutions":[{"id":"https://openalex.org/I103635307","display_name":"University of California, Riverside","ror":"https://ror.org/03nawhv43","country_code":"US","type":"education","lineage":["https://openalex.org/I103635307"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Sri Shaila","raw_affiliation_strings":["University of California, Riverside, US"],"affiliations":[{"raw_affiliation_string":"University of California, Riverside, US","institution_ids":["https://openalex.org/I103635307"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5023553214","display_name":"Ahmad Darki","orcid":null},"institutions":[{"id":"https://openalex.org/I103635307","display_name":"University of California, Riverside","ror":"https://ror.org/03nawhv43","country_code":"US","type":"education","lineage":["https://openalex.org/I103635307"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Ahmad Darki","raw_affiliation_strings":["University of California Riverside, US"],"affiliations":[{"raw_affiliation_string":"University of California Riverside, US","institution_ids":["https://openalex.org/I103635307"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5018876909","display_name":"Michalis Faloutsos","orcid":"https://orcid.org/0000-0002-3882-9987"},"institutions":[{"id":"https://openalex.org/I103635307","display_name":"University of California, Riverside","ror":"https://ror.org/03nawhv43","country_code":"US","type":"education","lineage":["https://openalex.org/I103635307"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Michalis Faloutsos","raw_affiliation_strings":["University of California Riverside, US"],"affiliations":[{"raw_affiliation_string":"University of California Riverside, US","institution_ids":["https://openalex.org/I103635307"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5059614371","display_name":"Nael Abu\u2010Ghazaleh","orcid":"https://orcid.org/0000-0002-9485-5370"},"institutions":[{"id":"https://openalex.org/I103635307","display_name":"University of California, Riverside","ror":"https://ror.org/03nawhv43","country_code":"US","type":"education","lineage":["https://openalex.org/I103635307"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Nael Abu-Ghazaleh","raw_affiliation_strings":["University of California, Riverside, US"],"affiliations":[{"raw_affiliation_string":"University of California, Riverside, US","institution_ids":["https://openalex.org/I103635307"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5038828346","display_name":"Manu Sridharan","orcid":"https://orcid.org/0000-0001-7993-302X"},"institutions":[{"id":"https://openalex.org/I103635307","display_name":"University of California, Riverside","ror":"https://ror.org/03nawhv43","country_code":"US","type":"education","lineage":["https://openalex.org/I103635307"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Manu Sridharan","raw_affiliation_strings":["University of California, Riverside, US"],"affiliations":[{"raw_affiliation_string":"University of California, Riverside, US","institution_ids":["https://openalex.org/I103635307"]}]}],"institution_assertions":[],"countries_distinct_count":1,"institutions_distinct_count":1,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":0.752,"has_fulltext":true,"fulltext_origin":"pdf","cited_by_count":5,"citation_normalized_percentile":{"value":0.779827,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":{"min":79,"max":81},"biblio":{"volume":null,"issue":null,"first_page":null,"last_page":null},"is_retracted":false,"is_paratext":false,"primary_topic":{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":0.9998,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":0.9998,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11424","display_name":"Security and Verification in Computing","score":0.9975,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10260","display_name":"Software Engineering Research","score":0.997,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/x86","display_name":"x86","score":0.58435965}],"concepts":[{"id":"https://openalex.org/C169590947","wikidata":"https://www.wikidata.org/wiki/Q47506","display_name":"Compiler","level":2,"score":0.88463354},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.8751297},{"id":"https://openalex.org/C541664917","wikidata":"https://www.wikidata.org/wiki/Q14001","display_name":"Malware","level":2,"score":0.8155899},{"id":"https://openalex.org/C43364308","wikidata":"https://www.wikidata.org/wiki/Q8799","display_name":"Byte","level":2,"score":0.67712677},{"id":"https://openalex.org/C170723468","wikidata":"https://www.wikidata.org/wiki/Q182933","display_name":"x86","level":3,"score":0.58435965},{"id":"https://openalex.org/C2777904410","wikidata":"https://www.wikidata.org/wiki/Q7397","display_name":"Software","level":2,"score":0.3946383},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.3457785},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.3299979},{"id":"https://openalex.org/C119857082","wikidata":"https://www.wikidata.org/wiki/Q2539","display_name":"Machine learning","level":1,"score":0.32352996},{"id":"https://openalex.org/C111919701","wikidata":"https://www.wikidata.org/wiki/Q9135","display_name":"Operating system","level":1,"score":0.250942}],"mesh":[],"locations_count":1,"locations":[{"is_oa":true,"landing_page_url":"https://doi.org/10.1145/3471621.3471851","pdf_url":"https://dl.acm.org/doi/pdf/10.1145/3471621.3471851","source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true}],"best_oa_location":{"is_oa":true,"landing_page_url":"https://doi.org/10.1145/3471621.3471851","pdf_url":"https://dl.acm.org/doi/pdf/10.1145/3471621.3471851","source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true},"sustainable_development_goals":[],"grants":[],"datasets":[],"versions":[],"referenced_works_count":21,"referenced_works":["https://openalex.org/W17195072","https://openalex.org/W1823377586","https://openalex.org/W2104912713","https://openalex.org/W2155806188","https://openalex.org/W2167055186","https://openalex.org/W2262622854","https://openalex.org/W2350778671","https://openalex.org/W2514974017","https://openalex.org/W2531090983","https://openalex.org/W2583316335","https://openalex.org/W2627063456","https://openalex.org/W2770366677","https://openalex.org/W2789758093","https://openalex.org/W2791045485","https://openalex.org/W2791218785","https://openalex.org/W2997993688","https://openalex.org/W3000271234","https://openalex.org/W3024340288","https://openalex.org/W3043236449","https://openalex.org/W3081118847","https://openalex.org/W3109112485"],"related_works":["https://openalex.org/W563303149","https://openalex.org/W4846490","https://openalex.org/W4301207796","https://openalex.org/W4240878335","https://openalex.org/W3215381467","https://openalex.org/W2915956107","https://openalex.org/W2187948563","https://openalex.org/W2099986681","https://openalex.org/W2098290341","https://openalex.org/W2097492617"],"abstract_inverted_index":{"Malware":[0],"infects":[1],"thousands":[2],"of":[3,10,50,88,104,107,150,188,202,216,225,234,246],"systems":[4],"globally":[5],"each":[6,197],"day":[7],"causing":[8],"millions":[9],"dollars":[11],"in":[12,21,167,223,260],"damages.":[13],"Which":[14],"disassembler":[15,161],"should":[16],"a":[17,76,94,105,200,257],"malware":[18,37,125],"analyst":[19],"choose":[20],"order":[22],"to":[23,32,44,99,195,256],"get":[24],"the":[25,48,67,85,101,135,147,158,168,185,189,214,226,232,235,237,240,244,249,267],"most":[26,57],"accurate":[27],"disassembly":[28],"and":[29,35,55,66,79,96,118,131,137,239],"be":[30,192],"able":[31],"detect,":[33],"analyze":[34],"defuse":[36],"quickly?":[38],"There":[39],"is":[40],"no":[41],"clear":[42],"answer":[43],"this":[45,72],"question:":[46],"(a)":[47],"performance":[49,215,245],"disassemblers":[51,61,86,108,151,190],"varies":[52],"across":[53],"configurations,":[54],"(b)":[56],"prior":[58],"work":[59],"on":[60,63,243],"focuses":[62],"benign":[64],"software":[65],"x86":[68],"CPU":[69],"architecture.":[70],"In":[71],"work,":[73],"we":[74,141,204,230],"take":[75],"different":[77,129],"approach":[78,98,121,156,254],"ask:":[80],"why":[81],"not":[82],"use":[83],"all":[84],"instead":[87],"picking":[89],"one?":[90],"We":[91,116],"present":[92],"DisCo,":[93],"novel":[95],"effective":[97],"harness":[100],"collective":[102,148,186],"capability":[103],"group":[106],"combining":[109],"their":[110],"output":[111],"into":[112],"an":[113],"ensemble":[114],"consensus.":[115],"develop":[117],"evaluate":[119],"our":[120,155,253],"using":[122,179],"1760":[123],"IoT":[124],"binaries":[126,177],"compiled":[127,178],"with":[128,181],"compilers":[130],"compiler":[132,241],"options":[133,242],"for":[134,171,175],"ARM":[136],"MIPS":[138,176],"architectures.":[139],"First,":[140],"show":[142,205],"that":[143,206],"DisCo":[144,211],"can":[145,191,212],"combine":[146],"wisdom":[149,187],"effectively.":[152],"For":[153],"example,":[154],"outperforms":[157],"best":[159],"contributing":[160],"by":[162,210,218,266],"as":[163,165,219,221],"much":[164,220],"17.8%":[166],"F1":[169,227],"score":[170],"function":[172],"start":[173],"identification":[174],"GCC":[180],"O3":[182],"option.":[183],"Second,":[184],"brought":[193],"back":[194],"improve":[196,213],"disassembler.":[198],"As":[199],"proof":[201],"concept,":[203],"byte-level":[207],"signatures":[208],"identified":[209],"Ghidra":[217,261,268],"13.6%":[222],"terms":[224],"score.":[228],"Third,":[229],"quantify":[231],"effect":[233],"architecture,":[236],"compiler,":[238],"disassemblers.":[247],"Finally,":[248],"systematic":[250],"evaluation":[251],"within":[252],"led":[255],"bug":[258],"discovery":[259],"v9.1,":[262],"which":[263],"was":[264],"acknowledged":[265],"team.":[269]},"cited_by_api_url":"https://api.openalex.org/works?filter=cites:W3206706367","counts_by_year":[{"year":2023,"cited_by_count":2},{"year":2022,"cited_by_count":2},{"year":2021,"cited_by_count":1}],"updated_date":"2024-12-07T01:44:18.343754","created_date":"2021-10-25"}
