{"id":"https://openalex.org/W4384009676","doi":"https://doi.org/10.1109/icse-companion58688.2023.00059","title":"Boosting Symbolic Execution for Heap-based Vulnerability Detection and Exploit Generation","display_name":"Boosting Symbolic Execution for Heap-based Vulnerability Detection and Exploit Generation","publication_year":2023,"publication_date":"2023-05-01","ids":{"openalex":"https://openalex.org/W4384009676","doi":"https://doi.org/10.1109/icse-companion58688.2023.00059"},"language":"en","primary_location":{"id":"doi:10.1109/icse-companion58688.2023.00059","is_oa":false,"landing_page_url":"https://doi.org/10.1109/icse-companion58688.2023.00059","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"2023 IEEE/ACM 45th International Conference on Software Engineering: Companion Proceedings (ICSE-Companion)","raw_type":"proceedings-article"},"type":"conference-paper","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5071747248","display_name":"Haoxin Tu","orcid":"https://orcid.org/0000-0003-2389-1881"},"institutions":[{"id":"https://openalex.org/I79891267","display_name":"Singapore Management University","ror":"https://ror.org/050qmg959","country_code":"SG","type":"education","lineage":["https://openalex.org/I79891267"]}],"countries":["SG"],"is_corresponding":true,"raw_author_name":"Haoxin Tu","raw_affiliation_strings":["Singapore Management University,Singapore","Singapore Management University, Singapore"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Singapore Management University,Singapore","institution_ids":["https://openalex.org/I79891267"]},{"raw_affiliation_string":"Singapore Management University, Singapore","institution_ids":["https://openalex.org/I79891267"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":1,"corresponding_author_ids":["https://openalex.org/A5071747248"],"corresponding_institution_ids":["https://openalex.org/I79891267"],"apc_list":null,"apc_paid":null,"fwci":1.3067,"has_fulltext":false,"cited_by_count":6,"citation_normalized_percentile":{"value":0.82151507,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":{"min":90,"max":97},"biblio":{"volume":null,"issue":null,"first_page":"218","last_page":"220"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11424","display_name":"Security and Verification in Computing","score":0.9998999834060669,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11424","display_name":"Security and Verification in Computing","score":0.9998999834060669,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":0.9994000196456909,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10743","display_name":"Software Testing and Debugging Techniques","score":0.9988999962806702,"subfield":{"id":"https://openalex.org/subfields/1712","display_name":"Software"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/heap","display_name":"Heap (data structure)","score":0.8969218730926514},{"id":"https://openalex.org/keywords/exploit","display_name":"Exploit","score":0.8377245664596558},{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.8266974687576294},{"id":"https://openalex.org/keywords/symbolic-execution","display_name":"Symbolic execution","score":0.66372150182724},{"id":"https://openalex.org/keywords/buffer-overflow","display_name":"Buffer overflow","score":0.5000524520874023},{"id":"https://openalex.org/keywords/memory-leak","display_name":"Memory leak","score":0.41983330249786377},{"id":"https://openalex.org/keywords/parallel-computing","display_name":"Parallel computing","score":0.4061468839645386},{"id":"https://openalex.org/keywords/distributed-computing","display_name":"Distributed computing","score":0.4033871293067932},{"id":"https://openalex.org/keywords/embedded-system","display_name":"Embedded system","score":0.33608418703079224},{"id":"https://openalex.org/keywords/software","display_name":"Software","score":0.2880873382091522},{"id":"https://openalex.org/keywords/programming-language","display_name":"Programming language","score":0.2392684519290924},{"id":"https://openalex.org/keywords/garbage","display_name":"Garbage","score":0.23198190331459045},{"id":"https://openalex.org/keywords/computer-security","display_name":"Computer security","score":0.15179705619812012},{"id":"https://openalex.org/keywords/garbage-collection","display_name":"Garbage collection","score":0.11540403962135315}],"concepts":[{"id":"https://openalex.org/C134757568","wikidata":"https://www.wikidata.org/wiki/Q274089","display_name":"Heap (data structure)","level":2,"score":0.8969218730926514},{"id":"https://openalex.org/C165696696","wikidata":"https://www.wikidata.org/wiki/Q11287","display_name":"Exploit","level":2,"score":0.8377245664596558},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.8266974687576294},{"id":"https://openalex.org/C2779639559","wikidata":"https://www.wikidata.org/wiki/Q7661178","display_name":"Symbolic execution","level":3,"score":0.66372150182724},{"id":"https://openalex.org/C40842320","wikidata":"https://www.wikidata.org/wiki/Q19423","display_name":"Buffer overflow","level":2,"score":0.5000524520874023},{"id":"https://openalex.org/C156731835","wikidata":"https://www.wikidata.org/wiki/Q751740","display_name":"Memory leak","level":4,"score":0.41983330249786377},{"id":"https://openalex.org/C173608175","wikidata":"https://www.wikidata.org/wiki/Q232661","display_name":"Parallel computing","level":1,"score":0.4061468839645386},{"id":"https://openalex.org/C120314980","wikidata":"https://www.wikidata.org/wiki/Q180634","display_name":"Distributed computing","level":1,"score":0.4033871293067932},{"id":"https://openalex.org/C149635348","wikidata":"https://www.wikidata.org/wiki/Q193040","display_name":"Embedded system","level":1,"score":0.33608418703079224},{"id":"https://openalex.org/C2777904410","wikidata":"https://www.wikidata.org/wiki/Q7397","display_name":"Software","level":2,"score":0.2880873382091522},{"id":"https://openalex.org/C199360897","wikidata":"https://www.wikidata.org/wiki/Q9143","display_name":"Programming language","level":1,"score":0.2392684519290924},{"id":"https://openalex.org/C75403996","wikidata":"https://www.wikidata.org/wiki/Q5521979","display_name":"Garbage","level":2,"score":0.23198190331459045},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.15179705619812012},{"id":"https://openalex.org/C105122174","wikidata":"https://www.wikidata.org/wiki/Q322202","display_name":"Garbage collection","level":3,"score":0.11540403962135315}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1109/icse-companion58688.2023.00059","is_oa":false,"landing_page_url":"https://doi.org/10.1109/icse-companion58688.2023.00059","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"2023 IEEE/ACM 45th International Conference on Software Engineering: Companion Proceedings (ICSE-Companion)","raw_type":"proceedings-article"}],"best_oa_location":null,"sustainable_development_goals":[],"awards":[],"funders":[{"id":"https://openalex.org/F4320320709","display_name":"National Research Foundation Singapore","ror":"https://ror.org/03cpyc314"}],"has_content":{"pdf":false,"grobid_xml":false},"content_urls":null,"referenced_works_count":35,"referenced_works":["https://openalex.org/W1710734607","https://openalex.org/W1878544538","https://openalex.org/W1993255342","https://openalex.org/W2051990174","https://openalex.org/W2107147876","https://openalex.org/W2113864883","https://openalex.org/W2117798902","https://openalex.org/W2146649139","https://openalex.org/W2156858199","https://openalex.org/W2514974017","https://openalex.org/W2574017551","https://openalex.org/W2765857833","https://openalex.org/W2888875512","https://openalex.org/W2897668282","https://openalex.org/W2963723316","https://openalex.org/W2984993098","https://openalex.org/W2998122443","https://openalex.org/W2999519227","https://openalex.org/W3008834772","https://openalex.org/W3011209520","https://openalex.org/W3015365135","https://openalex.org/W3043337184","https://openalex.org/W3049058030","https://openalex.org/W3194906003","https://openalex.org/W3204243980","https://openalex.org/W3213182664","https://openalex.org/W4210676563","https://openalex.org/W4308641867","https://openalex.org/W6637688222","https://openalex.org/W6639560864","https://openalex.org/W6685118643","https://openalex.org/W6753913213","https://openalex.org/W6774227414","https://openalex.org/W6781401244","https://openalex.org/W6781997156"],"related_works":["https://openalex.org/W107132618","https://openalex.org/W1972760175","https://openalex.org/W1981237417","https://openalex.org/W2887198767","https://openalex.org/W4233969565","https://openalex.org/W4283264706","https://openalex.org/W3126155085","https://openalex.org/W4387360145","https://openalex.org/W2136651729","https://openalex.org/W3022539710"],"abstract_inverted_index":{"Heap-based":[0],"vulnerabilities":[1,19,137],"such":[2],"as":[3],"buffer":[4],"overflow":[5],"and":[6,20,57,69,72,84,98,113,138,146],"use":[7],"after":[8],"free":[9],"are":[10,29,119],"severe":[11],"flaws":[12],"in":[13,41,52,124],"various":[14],"software":[15],"systems.":[16],"Detecting":[17],"heap-based":[18,74,101,136],"demonstrating":[21],"their":[22,39],"severity":[23],"via":[24],"generating":[25],"exploits":[26,141],"for":[27,142],"them":[28,143],"of":[30,78,100],"critical":[31],"importance.":[32],"Existing":[33],"symbolic":[34,64,88,131],"execution-based":[35],"approaches":[36],"have":[37,48],"shown":[38],"potential":[40],"the":[42,95,128],"above":[43],"tasks.":[44],"However,":[45],"they":[46],"still":[47],"some":[49],"fundamental":[50],"limitations":[51],"path":[53,106],"exploration,":[54],"memory":[55,111],"modeling,":[56,59],"environment":[58,116],"which":[60],"significantly":[61],"impede":[62],"existing":[63],"execution":[65,89,132],"engines":[66],"from":[67],"efficiently":[68,145],"effectively":[70],"detecting":[71],"exploiting":[73],"vulnerabilities.":[75,102],"The":[76],"objective":[77],"this":[79],"thesis":[80],"is":[81],"to":[82,93,121],"design":[83],"implement":[85],"a":[86,104,109,114],"boosted":[87,130],"engine":[90,133],"named":[91],"HEAPX":[92],"facilitate":[94],"automatic":[96],"detection":[97],"exploitation":[99],"Specifically,":[103],"new":[105,110,115,129],"exploration":[107],"strategy,":[108],"model,":[112],"modeling":[117],"solution":[118],"expected":[120],"be":[122],"designed":[123],"HEAPX,":[125],"so":[126],"that":[127],"can":[134],"detect":[135],"generate":[139],"working":[140],"more":[144],"effectively.":[147]},"counts_by_year":[{"year":2025,"cited_by_count":3},{"year":2024,"cited_by_count":2},{"year":2023,"cited_by_count":1}],"updated_date":"2026-07-29T14:22:42.915294","created_date":"2025-10-10T00:00:00"}