{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,7,1]],"date-time":"2026-07-01T03:26:30Z","timestamp":1782876390353,"version":"3.54.5"},"reference-count":56,"publisher":"IEEE","license":[{"start":{"date-parts":[[2025,11,16]],"date-time":"2025-11-16T00:00:00Z","timestamp":1763251200000},"content-version":"stm-asf","delay-in-days":0,"URL":"https:\/\/2.zoppoz.workers.dev:443\/https\/doi.org\/10.15223\/policy-029"},{"start":{"date-parts":[[2025,11,16]],"date-time":"2025-11-16T00:00:00Z","timestamp":1763251200000},"content-version":"stm-asf","delay-in-days":0,"URL":"https:\/\/2.zoppoz.workers.dev:443\/https\/doi.org\/10.15223\/policy-037"}],"funder":[{"DOI":"10.13039\/100006831","name":"United States Air Force","doi-asserted-by":"publisher","id":[{"id":"10.13039\/100006831","id-type":"DOI","asserted-by":"publisher"}]}],"content-domain":{"domain":[],"crossmark-restriction":false},"short-container-title":[],"published-print":{"date-parts":[[2025,11,16]]},"DOI":"10.1109\/ase63991.2025.00039","type":"proceedings-article","created":{"date-parts":[[2026,1,28]],"date-time":"2026-01-28T20:54:38Z","timestamp":1769633678000},"page":"380-392","source":"Crossref","is-referenced-by-count":3,"title":["Towards More Accurate Static Analysis for Taint-Style Bug Detection in Linux Kernel"],"prefix":"10.1109","author":[{"given":"Haonan","family":"Li","sequence":"first","affiliation":[{"name":"University of California,Riverside"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Hang","family":"Zhang","sequence":"additional","affiliation":[{"name":"Indiana University Bloomington"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Kexin","family":"Pei","sequence":"additional","affiliation":[{"name":"The University of Chicago"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Zhiyun","family":"Qian","sequence":"additional","affiliation":[{"name":"University of California,Riverside"}],"role":[{"vocabulary":"crossref","role":"author"}]}],"member":"263","reference":[{"key":"ref1","doi-asserted-by":"publisher","DOI":"10.1007\/978-81-322-2268-2_59"},{"key":"ref2","doi-asserted-by":"publisher","DOI":"10.1145\/3464457"},{"key":"ref3","article-title":"Scaling Symbolic Execution to Large Software Systems","author":"Horvath","year":"2024"},{"key":"ref4","doi-asserted-by":"publisher","DOI":"10.1145\/3368089.3409686"},{"key":"ref5","doi-asserted-by":"publisher","DOI":"10.1145\/3460120.3484798"},{"key":"ref6","doi-asserted-by":"crossref","article-title":"Understanding the Effectiveness of Large Language Models in Detecting Security Vulnerabilities","author":"Khare","DOI":"10.1109\/ICST62969.2025.10988968"},{"key":"ref7","doi-asserted-by":"publisher","DOI":"10.1145\/3694715.3695971"},{"key":"ref8","article-title":"Large Language Models for Code Analysis: Do LLMs Really Do Their Job?","volume-title":"33rd USENIX Security Symposium (USENIX Security 24)","author":"Fang"},{"key":"ref9","doi-asserted-by":"crossref","DOI":"10.1109\/SPW67851.2025.00017","article-title":"LAMD: Context-driven Android Malware Detection and Classification with LLMs","author":"Qian","year":"2025"},{"key":"ref10","first-page":"1759","article-title":"Code is not Natural Language: Unlock the Power of Semantics-Oriented Graph Representation for Binary Code Similarity Detection","volume-title":"33rd USENIX Security Symposium (USENIX Security 24)","author":"He"},{"key":"ref11","doi-asserted-by":"publisher","DOI":"10.1111\/nyas.15125"},{"key":"ref12","doi-asserted-by":"publisher","DOI":"10.1109\/ICSE55347.2025.00012"},{"key":"ref13","doi-asserted-by":"publisher","DOI":"10.1007\/s10009-025-00780-7"},{"key":"ref14","first-page":"1007","article-title":"{DR}. {CHECKER}: A Soundy Analysis for Linux Kernel Drivers","volume-title":"26th USENIX Security Symposium (USENIX Security 17)","author":"Machiry"},{"key":"ref15","article-title":"CodeQL: The libraries and queries that power security researchers around the world","year":"2025"},{"key":"ref16","article-title":"About data flow analysis\u2014CodeQL","year":"2025"},{"key":"ref17","article-title":"Stack buffer overflow in Qualcomm MSM 4.4-Finding bugs with CodeQL","author":"Backhouse","year":"2018"},{"key":"ref18","doi-asserted-by":"crossref","DOI":"10.1007\/978-3-319-17524-9_1","article-title":"Moving Fast with Software Verification","author":"Calcagno","year":"2015"},{"key":"ref19","article-title":"IRIS: LLM-Assisted Static Analysis for Detecting Security Vulnerabilities","volume-title":"The Thirteenth International Conference on Learning Representations (ICLR 2025)","author":"Li"},{"key":"ref20","article-title":"LLMDFA: analyzing dataflow in code with large language models","volume-title":"Advances in Neural Information Processing Systems 38: Annual Conference on Neural Information Processing Systems 2024, NeurIPS 2024, Vancouver, BC, Canada, December 10-15, 2024","author":"Wang"},{"key":"ref21","doi-asserted-by":"publisher","DOI":"10.1145\/3649828"},{"key":"ref22","doi-asserted-by":"publisher","DOI":"10.1145\/3728955"},{"key":"ref23","doi-asserted-by":"publisher","DOI":"10.1145\/3653718"},{"key":"ref24","doi-asserted-by":"publisher","DOI":"10.1073\/pnas.2322420121"},{"key":"ref25","doi-asserted-by":"crossref","DOI":"10.18653\/v1\/2024.findings-emnlp.212","article-title":"Deciphering the Factors Influencing the Efficacy of Chain-of-Thought: Probability, Memorization, and Noisy Reasoning","author":"Prabhakar","year":"2024"},{"key":"ref26","article-title":"Scaling llm test-time compute optimally can be more effective than scaling model parameters","author":"Snell","year":"2024"},{"key":"ref27","article-title":"Chain-of-Thought Prompting Elicits Reasoning in Large Language Models","author":"Wei","year":"2023"},{"key":"ref28","article-title":"ruben2020\/codequery","author":"Kopathy","year":"2025"},{"key":"ref29","article-title":"Codeql","year":"2025"},{"key":"ref30","article-title":"LLM Leaderboard","author":"AI","year":"2025"},{"key":"ref31","doi-asserted-by":"publisher","DOI":"10.52202\/079017-1310"},{"key":"ref32","doi-asserted-by":"publisher","DOI":"10.1145\/3704905"},{"key":"ref33","first-page":"4211","article-title":"A hybrid alias analysis and its application to global variable protection in the linux kernel","volume-title":"32nd USENIX Security Symposium (USENIX Security 23)","author":"Li"},{"key":"ref34","doi-asserted-by":"publisher","DOI":"10.1109\/SP61157.2025.00189"},{"key":"ref35","doi-asserted-by":"publisher","DOI":"10.14722\/ndss.2025.240559"},{"key":"ref36","first-page":"3727","article-title":"Place your locks well: Understanding and detecting lock misuse bugs","volume-title":"32nd USENIX Security Symposium (USENIX Security 23)","author":"Cai"},{"key":"ref37","article-title":"Improving indirect-call analysis in llvm with type and data-flow co-analysis","volume-title":"33rd USENIX Security Symposium (USENIX Security 24)","author":"Liu"},{"key":"ref38","first-page":"125","article-title":"LinKRID: Vetting imbalance reference counting in linux kernel with symbolic execution","volume-title":"31st USENIX Security Symposium (USENIX Security 22)","author":"Liu"},{"key":"ref39","doi-asserted-by":"publisher","DOI":"10.14722\/ndss.2022.24380"},{"key":"ref40","first-page":"3790","article-title":"Sanitizing large language models in bug detection with data-flow","volume-title":"Findings of the Association for Computational Linguistics: EMNLP 2024, Miami, Florida, USA, November 12-16, 2024","author":"Wang"},{"key":"ref41","doi-asserted-by":"publisher","DOI":"10.52202\/079017-1927"},{"key":"ref42","first-page":"15 476","article-title":"Star: Bootstrapping reasoning with reasoning","volume":"35","author":"Zelikman","year":"2022","journal-title":"Advances in Neural Information Processing Systems"},{"key":"ref43","article-title":"Codei\/o: Condensing reasoning patterns via code input-output prediction","author":"Li","year":"2025"},{"key":"ref44","article-title":"Next: Teaching large language models to reason about code execution","author":"Ni","year":"2024"},{"key":"ref45","article-title":"Exploiting code symmetries for learning program semantics","author":"Pei","year":"2023"},{"key":"ref46","article-title":"To Err is Machine: Vulnerability Detection Challenges LLM Reasoning","author":"Steenhoek","year":"2025"},{"key":"ref47","article-title":"A sober look at progress in language model reasoning: Pitfalls and paths to reproducibility","author":"Hochlehnert","year":"2025"},{"key":"ref48","doi-asserted-by":"publisher","DOI":"10.1145\/3428230"},{"key":"ref49","doi-asserted-by":"publisher","DOI":"10.1145\/3591227"},{"key":"ref50","doi-asserted-by":"publisher","DOI":"10.1145\/3510003.3510146"},{"key":"ref51","first-page":"896","article-title":"Adversarial robustness for code","volume-title":"International Conference on Machine Learning","author":"Bielik"},{"key":"ref52","doi-asserted-by":"publisher","DOI":"10.1145\/3690635"},{"key":"ref53","article-title":"Program of thoughts prompting: Disentangling computation from reasoning for numerical reasoning tasks","author":"Chen","year":"2022"},{"key":"ref54","article-title":"Chain of code: Reasoning with a language model-augmented code emulator","author":"Li","year":"2023"},{"key":"ref55","article-title":"Steering large language models between code execution and textual reasoning","author":"Chen","year":"2024"},{"key":"ref56","first-page":"11 809","article-title":"Tree of thoughts: Deliberate problem solving with large language models","volume":"36","author":"Yao","year":"2023","journal-title":"Advances in neural information processing systems"}],"event":{"name":"2025 40th IEEE\/ACM International Conference on Automated Software Engineering (ASE)","location":"Seoul, Korea, Republic of","start":{"date-parts":[[2025,11,16]]},"end":{"date-parts":[[2025,11,20]]}},"container-title":["2025 40th IEEE\/ACM International Conference on Automated Software Engineering (ASE)"],"original-title":[],"link":[{"URL":"https:\/\/2.zoppoz.workers.dev:443\/http\/xplorestaging.ieee.org\/ielx8\/11334056\/11334198\/11334600.pdf?arnumber=11334600","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2026,1,29]],"date-time":"2026-01-29T09:20:21Z","timestamp":1769678421000},"score":1,"resource":{"primary":{"URL":"https:\/\/2.zoppoz.workers.dev:443\/https\/ieeexplore.ieee.org\/document\/11334600\/"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2025,11,16]]},"references-count":56,"URL":"https:\/\/2.zoppoz.workers.dev:443\/https\/doi.org\/10.1109\/ase63991.2025.00039","relation":{},"subject":[],"published":{"date-parts":[[2025,11,16]]}}}