binary.bib

%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%
%%
%%
%%           Binary Analysis 

%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%


@inproceedings{anand2013compiler,
	title={A compiler-level intermediate representation based binary analysis and rewriting system},
	author={Anand, Kapil and Smithson, Matthew and Elwazeer, Khaled and Kotha, Aparna and Gruen, Jim and Giles, Nathan and Barua, Rajeev},
	booktitle={Proceedings of the 8th ACM European Conference on Computer Systems},
	pages={295--308},
	year={2013},
	organization={ACM}
}



%% alias analysis for low level code
@inproceedings{debray1998alias,
	title={Alias analysis of executable code},
	author={Debray, Saumya and Muth, Robert and Weippert, Matthew},
	booktitle={Proceedings of the 25th ACM SIGPLAN-SIGACT symposium on Principles of programming languages},
	pages={12--24},
	year={1998},
	organization={ACM}
}


@inproceedings{balakrishnan2004analyzing,
	title={Analyzing memory accesses in x86 executables},
	author={Balakrishnan, Gogul and Reps, Thomas},
	booktitle={International conference on compiler construction},
	pages={5--23},
	year={2004},
	organization={Springer}
}



@article{balakrishnan2010wysinwyx,
	title={WYSINWYX: What you see is not what you eXecute},
	author={Balakrishnan, Gogul and Reps, Thomas},
	journal={ACM Transactions on Programming Languages and Systems (TOPLAS)},
	volume={32},
	number={6},
	pages={23},
	year={2010},
	publisher={ACM}
}


@inproceedings{kinder2005detecting,
	title={Detecting malicious code by model checking},
	author={Kinder, Johannes and Katzenbeisser, Stefan and Schallhart, Christian and Veith, Helmut},
	booktitle={International Conference on Detection of Intrusions and Malware, and Vulnerability Assessment},
	pages={174--187},
	year={2005},
	organization={Springer}
}


%%%%%%%%%%%%%%%%%%%%%%%%%%%
%%%
%%% Formal and informal Semantic
%%%
%%%%%%%%%%%%%%%%%%%%%%%%%%%


%%%%%%%%%%%%%%%%%%%%%%%
%%
%%  Automata, Grammar
%%%%%%%%%%%%%%%%%%%%%%%

%% Undecidability resulsts,
@article{filiol2007metamorphism,
	title={Metamorphism, formal grammars and undecidable code mutation},
	author={Filiol, Eric},
	journal={International Journal of Computer Science},
	volume={2},
	number={1},
	pages={70--75},
	year={2007}
}

%% Symbolic automata,  POPL 15
@inproceedings{dalla2015abstract,
	title={Abstract symbolic automata: mixed syntactic/semantic similarity analysis of executables},
	author={Dalla Preda, Mila and Giacobazzi, Roberto and Lakhotia, Arun and Mastroeni, Isabella},
	booktitle={ACM SIGPLAN Notices},
	volume={50},
	number={1},
	pages={329--341},
	year={2015},
	organization={ACM}
}


%%%%%%%%%%%%%%%%%%%
%%
%% Abs Int
%%
%%%%%%%%%%%%%%%%%%%%

%% Metamorphism and phase semantic
@inproceedings{dalla2010modelling,
	title={Modelling metamorphism by abstract interpretation},
	author={Dalla Preda, Mila and Giacobazzi, Roberto and Debray, Saumya and Coogan, Kevin and Townsend, Gregg M},
	booktitle={International Static Analysis Symposium},
	pages={218--235},
	year={2010},
	organization={Springer}
}




%%%%%%%%%%%%%%%%%%%%
%%
%% (informal,..
%%
%%%%%%%%%%%%%%%%%%%%

%% CoDisAsm, ``wave semantic"
@inproceedings{bonfante2015codisasm,
title={CoDisasm: medium scale concatic disassembly of self-modifying binaries with overlapping instructions},
author={Bonfante, Guillaume and Fernandez, Jose and Marion, Jean-Yves and Rouxel, Benjamin and Sabatier, Fabrice and Thierry, Aur{\'e}lien},
booktitle={Proceedings of the 22nd ACM SIGSAC Conference on Computer and Communications Security},
pages={745--756},
year={2015},
organization={ACM}
}


%% xxCFG


%%%%%%%%%%%%%%%%%%%%%
%%
%%  Hoare style
%%
%%%%%%%%%%%%%%%%%%%%%



%% Cai et al, Certified Self-modifed code, PLDI 07
@article{cai2007certified,
title={Certified self-modifying code},
author={Cai, Hongxu and Shao, Zhong and Vaynberg, Alexander},
journal={ACM SIGPLAN Notices},
volume={42},
number={6},
pages={66--77},
year={2007},
publisher={ACM}
}


%% Myreen, POPL 10
@inproceedings{myreen2010verified,
title={Verified just-in-time compiler on x86},
author={Myreen, Magnus O},
booktitle={ACM Sigplan Notices},
volume={45},
number={1},
pages={107--118},
year={2010},
organization={ACM}
}



%%%%%%%%%%%%%
@article{blazy2016verified,
title={Verified abstract interpretation techniques for disassembling low-level self-modifying code},
author={Blazy, Sandrine and Laporte, Vincent and Pichardie, David},
journal={Journal of Automated Reasoning},
volume={56},
number={3},
pages={283--308},
year={2016},
publisher={Springer}
}


@article{debray2008semantics,
title={On the semantics of self-unpacking malware code},
author={Debray, Saumya K and Coogan, Kevin P and Townsend, Gregg M},
year={2008},
publisher={Citeseer}
}







%% CTPL

@inproceedings{kinder2005detecting,
title={Detecting malicious code by model checking},
author={Kinder, Johannes and Katzenbeisser, Stefan and Schallhart, Christian and Veith, Helmut},
booktitle={International Conference on Detection of Intrusions and Malware, and Vulnerability Assessment},
pages={174--187},
year={2005},
organization={Springer}
}

@inproceedings{christodorescu2005semantics,
title={Semantics-aware malware detection},
author={Christodorescu, Mihai and Jha, Somesh and Seshia, Sanjit A and Song, Dawn and Bryant, Randal E},
booktitle={2005 IEEE Symposium on Security and Privacy (S\&P'05)},
pages={32--46},
year={2005},
organization={IEEE}
}

@article{filiol2007metamorphism,
title={Metamorphism, formal grammars and undecidable code mutation},
author={Filiol, Eric},
journal={International Journal of Computer Science},
volume={2},
number={1},
pages={70--75},
year={2007}
}

@article{zbitskiy2009code,
title={Code mutation techniques by means of formal grammars and automatons},
author={Zbitskiy, Pavel V},
journal={Journal in Computer Virology},
volume={5},
number={3},
pages={199--207},
year={2009},
publisher={Springer}
}


@inproceedings{anckaert2006model,
title={A model for self-modifying code},
author={Anckaert, Bertrand and Madou, Matias and De Bosschere, Koen},
booktitle={International Workshop on Information Hiding},
pages={232--248},
year={2006},
organization={Springer}
}

@article{kinder2010static,
title={Static analysis of x86 executables},
author={Kinder, Johannes},
year={2010},
publisher={Technische Universit{\"a}t Darmstadt}
}