<?xml version="1.0" encoding="utf-8"?>
<TEI xmlns="http://www.tei-c.org/ns/1.0" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:hal="http://hal.archives-ouvertes.fr/" xmlns:gml="http://www.opengis.net/gml/3.3/" xmlns:gmlce="http://www.opengis.net/gml/3.3/ce" version="1.1" xsi:schemaLocation="http://www.tei-c.org/ns/1.0 http://api.archives-ouvertes.fr/documents/aofr-sword.xsd">
  <teiHeader>
    <fileDesc>
      <titleStmt>
        <title>HAL TEI export of hal-01648996</title>
      </titleStmt>
      <publicationStmt>
        <distributor>CCSD</distributor>
        <availability status="restricted">
          <licence target="https://creativecommons.org/publicdomain/zero/1.0/">CC0 1.0 - Universal</licence>
        </availability>
        <date when="2026-05-12T05:01:37+02:00"/>
      </publicationStmt>
      <sourceDesc>
        <p part="N">HAL API Platform</p>
      </sourceDesc>
    </fileDesc>
  </teiHeader>
  <text>
    <body>
      <listBibl>
        <biblFull>
          <titleStmt>
            <title xml:lang="en">BinSign: Fingerprinting Binary Functions to Support Automated Analysis of Code Executables</title>
            <author role="aut">
              <persName>
                <forename type="first">Lina</forename>
                <surname>Nouh</surname>
              </persName>
              <email type="md5">87068b792c24fb94a40e26b6b0c3b73a</email>
              <email type="domain">gmail.com</email>
              <idno type="idhal" notation="numeric">1023784</idno>
              <idno type="halauthorid" notation="string">1270713-1023784</idno>
              <affiliation ref="#struct-355894"/>
            </author>
            <author role="aut">
              <persName>
                <forename type="first">Ashkan</forename>
                <surname>Rahimian</surname>
              </persName>
              <idno type="halauthorid">1270714-0</idno>
              <affiliation ref="#struct-355894"/>
            </author>
            <author role="aut">
              <persName>
                <forename type="first">Djedjiga</forename>
                <surname>Mouheb</surname>
              </persName>
              <idno type="halauthorid">1270715-0</idno>
              <affiliation ref="#struct-355894"/>
            </author>
            <author role="aut">
              <persName>
                <forename type="first">Mourad</forename>
                <surname>Debbabi</surname>
              </persName>
              <idno type="halauthorid">581938-0</idno>
              <affiliation ref="#struct-355894"/>
            </author>
            <author role="aut">
              <persName>
                <forename type="first">Aiman</forename>
                <surname>Hanna</surname>
              </persName>
              <idno type="halauthorid">1270716-0</idno>
              <affiliation ref="#struct-355894"/>
            </author>
            <editor role="depositor">
              <persName>
                <forename>Hal</forename>
                <surname>Ifip</surname>
              </persName>
              <email type="md5">2073ac78024b6e13f2714db96e9b1e63</email>
              <email type="domain">inria.fr</email>
            </editor>
          </titleStmt>
          <editionStmt>
            <edition n="v1" type="current">
              <date type="whenSubmitted">2017-11-27 10:31:18</date>
              <date type="whenModified">2026-01-27 10:24:02</date>
              <date type="whenReleased">2017-11-27 10:34:11</date>
              <date type="whenProduced">2017-05-29</date>
              <date type="whenEndEmbargoed">2020-01-01</date>
              <ref type="file" target="https://inria.hal.science/hal-01648996v1/document">
                <date notBefore="2020-01-01"/>
              </ref>
              <ref type="file" subtype="author" n="1" target="https://inria.hal.science/hal-01648996v1/file/449885_1_En_23_Chapter.pdf" id="file-1648996-1691029">
                <date notBefore="2020-01-01"/>
              </ref>
            </edition>
            <respStmt>
              <resp>contributor</resp>
              <name key="200187">
                <persName>
                  <forename>Hal</forename>
                  <surname>Ifip</surname>
                </persName>
                <email type="md5">2073ac78024b6e13f2714db96e9b1e63</email>
                <email type="domain">inria.fr</email>
              </name>
            </respStmt>
          </editionStmt>
          <publicationStmt>
            <distributor>CCSD</distributor>
            <idno type="halId">hal-01648996</idno>
            <idno type="halUri">https://inria.hal.science/hal-01648996</idno>
            <idno type="halBibtex">nouh:hal-01648996</idno>
            <idno type="halRefHtml">&lt;i&gt;32th IFIP International Conference on ICT Systems Security and Privacy Protection (SEC)&lt;/i&gt;, May 2017, Rome, Italy. pp.341-355, &lt;a target="_blank" href="https://dx.doi.org/10.1007/978-3-319-58469-0_23"&gt;&amp;#x27E8;10.1007/978-3-319-58469-0_23&amp;#x27E9;&lt;/a&gt;</idno>
            <idno type="halRef">32th IFIP International Conference on ICT Systems Security and Privacy Protection (SEC), May 2017, Rome, Italy. pp.341-355, &amp;#x27E8;10.1007/978-3-319-58469-0_23&amp;#x27E9;</idno>
            <availability status="restricted">
              <licence target="https://creativecommons.org/licenses/by/4.0/">CC BY 4.0 - Attribution<ref corresp="#file-1648996-1691029"/></licence>
            </availability>
          </publicationStmt>
          <seriesStmt>
            <idno type="stamp" n="IFIP">IFIP - International Federation for Information Processing</idno>
            <idno type="stamp" n="IFIP-AICT" corresp="IFIP">IFIP Advances in Information and Communication Technology</idno>
            <idno type="stamp" n="IFIP-TC" corresp="IFIP">IFIP Technical Committees </idno>
            <idno type="stamp" n="IFIP-TC11" corresp="IFIP-TC">IFIP TC11: Security and Privacy Protection in Information Processing Systems</idno>
            <idno type="stamp" n="IFIP-SEC" corresp="IFIP"> International Information Security Conference</idno>
            <idno type="stamp" n="IFIP-AICT-502" corresp="IFIP-AICT">ICT Systems Security and Privacy Protection (SEC 2017)</idno>
          </seriesStmt>
          <notesStmt>
            <note type="commentary">Part 6: Applied Cryptography and Voting Schemes</note>
            <note type="audience" n="2">International</note>
            <note type="invited" n="0">No</note>
            <note type="popular" n="0">No</note>
            <note type="peer" n="1">Yes</note>
            <note type="proceedings" n="1">Yes</note>
          </notesStmt>
          <sourceDesc>
            <biblStruct>
              <analytic>
                <title xml:lang="en">BinSign: Fingerprinting Binary Functions to Support Automated Analysis of Code Executables</title>
                <author role="aut">
                  <persName>
                    <forename type="first">Lina</forename>
                    <surname>Nouh</surname>
                  </persName>
                  <email type="md5">87068b792c24fb94a40e26b6b0c3b73a</email>
                  <email type="domain">gmail.com</email>
                  <idno type="idhal" notation="numeric">1023784</idno>
                  <idno type="halauthorid" notation="string">1270713-1023784</idno>
                  <affiliation ref="#struct-355894"/>
                </author>
                <author role="aut">
                  <persName>
                    <forename type="first">Ashkan</forename>
                    <surname>Rahimian</surname>
                  </persName>
                  <idno type="halauthorid">1270714-0</idno>
                  <affiliation ref="#struct-355894"/>
                </author>
                <author role="aut">
                  <persName>
                    <forename type="first">Djedjiga</forename>
                    <surname>Mouheb</surname>
                  </persName>
                  <idno type="halauthorid">1270715-0</idno>
                  <affiliation ref="#struct-355894"/>
                </author>
                <author role="aut">
                  <persName>
                    <forename type="first">Mourad</forename>
                    <surname>Debbabi</surname>
                  </persName>
                  <idno type="halauthorid">581938-0</idno>
                  <affiliation ref="#struct-355894"/>
                </author>
                <author role="aut">
                  <persName>
                    <forename type="first">Aiman</forename>
                    <surname>Hanna</surname>
                  </persName>
                  <idno type="halauthorid">1270716-0</idno>
                  <affiliation ref="#struct-355894"/>
                </author>
              </analytic>
              <monogr>
                <title level="m">IFIP Advances in Information and Communication Technology</title>
                <meeting>
                  <title>32th IFIP International Conference on ICT Systems Security and Privacy Protection (SEC)</title>
                  <date type="start">2017-05-29</date>
                  <date type="end">2017-05-31</date>
                  <settlement>Rome</settlement>
                  <country key="IT">Italy</country>
                </meeting>
                <editor>Sabrina De Capitani di Vimercati</editor>
                <editor>Fabio Martinelli</editor>
                <imprint>
                  <publisher>Springer International Publishing</publisher>
                  <biblScope unit="serie">ICT Systems Security and Privacy Protection</biblScope>
                  <biblScope unit="volume">AICT-502</biblScope>
                  <biblScope unit="pp">341-355</biblScope>
                  <date type="datePub">2017</date>
                </imprint>
              </monogr>
              <idno type="doi">10.1007/978-3-319-58469-0_23</idno>
            </biblStruct>
          </sourceDesc>
          <profileDesc>
            <langUsage>
              <language ident="en">English</language>
            </langUsage>
            <textClass>
              <keywords scheme="author">
                <term xml:lang="en">Reverse engineering</term>
                <term xml:lang="en">Static analysis</term>
                <term xml:lang="en">Code fingerprinting</term>
              </keywords>
              <classCode scheme="halDomain" n="info">Computer Science [cs]</classCode>
              <classCode scheme="halTypology" n="COMM">Conference papers</classCode>
              <classCode scheme="halOldTypology" n="COMM">Conference papers</classCode>
              <classCode scheme="halTreeTypology" n="COMM">Conference papers</classCode>
            </textClass>
            <abstract xml:lang="en">
              <p>Binary code fingerprinting is a challenging problem that requires an in-depth analysis of binary components for deriving identifiable signatures. Fingerprints are useful in automating reverse engineering tasks including clone detection, library identification, authorship attribution, cyber forensics, patch analysis, malware clustering, binary auditing, etc. In this paper, we present BinSign, a binary function fingerprinting framework. The main objective of BinSign is providing an accurate and scalable solution to binary code fingerprinting by computing and matching structural and syntactic code profiles for disassemblies. We describe our methodology and evaluate its performance in several use cases, including function reuse, malware analysis, and indexing scalability. Additionally, we emphasize the scalability aspect of BinSign. We perform experiments on a database of 6 million functions. The indexing process requires an average time of 0.0072 s per function. We find that BinSign achieves higher accuracy compared to existing tools.</p>
            </abstract>
            <particDesc>
              <org type="consortium">TC 11</org>
            </particDesc>
          </profileDesc>
        </biblFull>
      </listBibl>
    </body>
    <back>
      <listOrg type="structures">
        <org type="institution" xml:id="struct-355894" status="VALID">
          <idno type="IdRef">028881559</idno>
          <idno type="ROR">https://ror.org/0420zvk78</idno>
          <orgName>Concordia University = Université Concordia [Montreal]</orgName>
          <desc>
            <address>
              <addrLine>1455 Boulevard de Maisonneuve O, Montréal, QC H3G 1M8</addrLine>
              <country key="CA"/>
            </address>
            <ref type="url">http://www.concordia.ca/</ref>
          </desc>
        </org>
      </listOrg>
    </back>
  </text>
</TEI>