| A | B | C | D | E | F | G | H | I | J | K | L | M | N | O | P | Q | R | S | T | U | V | W | X | Y | |
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
1 | Title | Year | Conference | Venue Category | Top venues? | Technique | Type | Field | Cited | Link | |||||||||||||||
2 | Control flow analysis | 1970 | SCO | SE | No | CFG Recovery | Fundamental | SE | Yes | ||||||||||||||||
3 | Restructuring pascal programs containing goto statements | 1985 | Computer Journal | SE | No | Control flow structuring | Fundamental | SE | Yes | ||||||||||||||||
4 | A methodology for decompilation | 1993 | XIX Conferencia Latinoamericana de Inform atica | SE | No | Generic decompilation | Fundamental | Decompilation | No | ||||||||||||||||
5 | Taming Control Flow: A Structured Approach to Eliminating Goto Statements | 1994 | ICCL | SE | No | Control flow structuring | Fundamental | SE | Yes | ||||||||||||||||
6 | Reverse Compilation Techniques, C. Cifuentes | 1994 | PhD Diss | No | Generic decompilation | Fundamental | Decompilation | Yes | |||||||||||||||||
7 | The Program Structure Tree: Computing Control Regions in Linear Time | 1994 | PLDI | PL | Yes | Control flow structuring | Fundamental | SE | Yes | ||||||||||||||||
8 | Type-Based Decompilation (or Program Reconstruction via Type Reconstruction) | 1999 | ESOP | Security | No | Type inference | Fundamental | Decompilation | Yes | ||||||||||||||||
9 | Static Disassembly of Obfuscated Binaries | 2004 | USENIX | Security | Yes | Lifting | Fundamental | Decompilation | Yes | ||||||||||||||||
10 | Static Single Assignment for Decompilation, M. J. V. Emmerik | 2007 | PhD Diss | No | CFG Recovery | Fundamental | Decompilation | Yes | |||||||||||||||||
11 | DIVINE: DIscovering Variables IN Executables | 2007 | VMCAI | SE | No | Type inference | Fundamental | Decompilation | Yes | ||||||||||||||||
12 | BitBlaze: A New Approach to Computer Security via Binary Analysis | 2008 | ICISS | Security | No | Generic Bin Analysis | Application | Binary | Yes | ||||||||||||||||
13 | Jakstab: A Static Analysis Platform for Binaries | 2008 | CAV | Security | No | Generic Bin Analysis | Application | Binary | Yes | ||||||||||||||||
14 | Large-scale malware indexing using function-call graphs | 2009 | CCS | Security | Yes | Code Similarity | Application | Binary | Yes | ||||||||||||||||
15 | Automatic Reverse Engineering of Data Structures from Binary Execution | 2010 | NDSS | Security | Yes | Type inference | Fundamental | Decompilation | Yes | ||||||||||||||||
16 | Design of a Retargetable Decompiler for a Static Platform-Independent Malware Analysis | 2011 | IJSIA | Security | No | Generic decompilation | Fundamental | Decompilation | Yes | ||||||||||||||||
17 | SmartDec: Approaching C++ Decompilation | 2011 | WCRE | Security | No | Generic decompilation | Fundamental | Decompilation | Yes | ||||||||||||||||
18 | BAP: A Binary Analysis Platform | 2011 | CAV | Security | No | Generic Bin Analysis | Application | Binary | Yes | ||||||||||||||||
19 | Howard: A Dynamic Excavator for Reverse Engineering Data Structures | 2011 | NDSS | Security | Yes | Type inference | Fundamental | Decompilation | Yes | ||||||||||||||||
20 | MemPick: High-Level Data Structure Detection in C/C++ Binaries | 2013 | WCRE | Security | No | Type inference | Fundamental | Decompilation | Yes | ||||||||||||||||
21 | Native x86 decompilation using Semantics-Preserving structural analysis and iterative Control-Flow structuring | 2013 | USENIX Security | Security | Yes | Control flow structuring | Fundamental | Decompilation | Yes | ||||||||||||||||
22 | Recovering C++ Objects From Binaries Using Inter-Procedural Data-Flow Analysis | 2014 | PPREW | Security | No | Type inference | Fundamental | Decompilation | Yes | ||||||||||||||||
23 | BYTEWEIGHT: Learning to Recognize Functions in Binary Code | 2014 | USENIX | Security | Yes | CFG - Func Recov | Fundamental | Binary | Yes | ||||||||||||||||
24 | Recognizing functions in binaries with neural networks | 2015 | USENIX | Security | Yes | CFG - Func Recov | Fundamental | Binary | Yes | ||||||||||||||||
25 | No More Gotos: Decompilation Using Pattern-Independent Control-Flow Structuring and Semantic-Preserving Transformations | 2015 | NDSS | Security | Yes | Control flow structuring | Fundamental | Decompilation | Yes | ||||||||||||||||
26 | Scalable Graph-based Bug Search for Firmware Images | 2016 | CCS | Security | Yes | Code Similarity | Application | Binary | Yes | ||||||||||||||||
27 | Helping johnny to analyze malware: A usability-optimized decompiler and malware analysis user study | 2016 | S&P | Security | Yes | Code quality | Fundamental | Decompilation | Yes | ||||||||||||||||
28 | (State of) The Art of War: Techniques in Binary Analysis | 2016 | S&P | Security | Yes | Generic Bin Analysis | Application | Binary | Yes | ||||||||||||||||
29 | From MinX to MinC: semantics-driven decompilation of recursive datatypes | 2016 | POPL | PL | Yes | Type inference | Fundamental | Binary | No | ||||||||||||||||
30 | Polymorphic type inference for machine code | 2016 | PLDI | PL | Yes | Type inference | Fundamental | Decompilation | Yes | ||||||||||||||||
31 | An in-depth analysis of disassembly on full-scale x86/x64 binaries | 2016 | USENIX | Security | Yes | CFG Recovery | Fundamental | Binary | Yes | ||||||||||||||||
32 | Compiler-agnostic function detection in binaries | 2017 | EuroS&P | Security | No | CFG - Func Recov | Fundamental | Binary | Yes | ||||||||||||||||
33 | discovRE: Efficient Cross-Architecture Identification of Bugs in Binary Code | 2017 | NDSS | Security | Yes | Code Similarity | Application | Binary | Yes | ||||||||||||||||
34 | TIE: Principled reverse engineering of types in binary programs | 2017 | NDSS | Security | Yes | Type inference | Fundamental | Decompilation | Yes | ||||||||||||||||
35 | Evolving exact decompilation | 2018 | BAR | Security | No | Generic decompilation | Fundamental | Decompilation | Yes | ||||||||||||||||
36 | Meaningful variable names for decompiled code: A machine translation approach | 2018 | ICPC | PL | No | Naming | Fundamental | Decompilation | Yes | ||||||||||||||||
37 | Using Recurrent Neural Networks for Decompilation | 2018 | SANER | SE | No | Neural decompilation | Fundamental | Decompilation | Yes | ||||||||||||||||
38 | Debin: Predicting debug information in stripped binaries | 2018 | CCS | Security | Yes | Naming | Fundamental | Decompilation | Yes | ||||||||||||||||
39 | Revenge is a dish served cold: Debug-oriented malware decompilation and reassembly | 2019 | ROOTS | No | Security analysis | Application | Decompilation | Yes | |||||||||||||||||
40 | Function naming in stripped binaries using neural networks | 2019 | Arxiv | No | Naming | App. Re. | Binary | Yes | |||||||||||||||||
41 | Towards neural decompilation | 2019 | Arxiv | No | Neural decompilation | Fundamental | Decompilation | Yes | |||||||||||||||||
42 | DIRE: A Neural Approach to Decompiled Identifier Naming | 2019 | ASE | SE | Yes | Naming | Fundamental | Decompilation | Yes | ||||||||||||||||
43 | Coda: An end-to-end neural program decompiler | 2019 | NeurIPS | ML | Yes | Neural decompilation | Fundamental | Decompilation | Yes | ||||||||||||||||
44 | Sound C Code Decompilation for a subset of x86-64 Binaries | 2020 | SEFM | SE | No | Generic decompilation | Fundamental | Decompilation | Yes | ||||||||||||||||
45 | A comb for decompiled C code | 2020 | AsiaCCS | Security | No | Control flow structuring | Fundamental | Decompilation | Yes | ||||||||||||||||
46 | Datalog Disassembly | 2020 | USENIX Security | Security | Yes | CFG recovery | Fundamental | Binary | Yes | ||||||||||||||||
47 | How far we have come: Testing decompilation correctness of C decompilers | 2020 | ISSTA | SE | Yes | Code quality | Measurement | Decompilation | Yes | ||||||||||||||||
48 | The Industrial Age of Hacking | 2020 | USENIX | Security | Yes | Human Reversing | Application | Binary | Yes | ||||||||||||||||
49 | SCRUTINIZER: Detecting Code Reuse in Malware via Decompilation and Machine Learning | 2021 | DIMVA | Security | No | Code Similarity | Application | Decompilation | Yes | ||||||||||||||||
50 | Scrutinizer: Detecting code reuse in malware via decompilation and machine learning | 2021 | DIMVA | Seucirty | No | Code Similarity | Application | Decompilation | Yes | ||||||||||||||||
51 | Finding Inlined Functions in Optimized Binaries | 2021 | Arxiv | No | Code Similarity | Application | Decompilation | Yes | |||||||||||||||||
52 | Neutron: an attention-based neural decompiler | 2021 | Cybersecurity | Security | No | Neural decompilation | Fundamental | Decompilation | Yes | ||||||||||||||||
53 | Semantics-recovering decompilation through neural machine translation | 2021 | Arxiv | No | Neural decompilation | Fundamental | Decompilation | Yes | |||||||||||||||||
54 | Sok: All you ever wanted to know about x86/x64 binary disassembly but were afraid to ask | 2021 | S&P | Security | Yes | CFG Recovery | Measurement | Binary | Yes | ||||||||||||||||
55 | Refining Indirect Call Targets at the Binary Level | 2021 | NDSS | Security | Yes | Indirect Call Rec | Fundamental | Binary | Yes | ||||||||||||||||
56 | Osprey: Recovery of variable and data structure via probabilistic analysis for stripped binary | 2021 | S&P | Security | Yes | Type inference | Fundamental | Binary | Yes | ||||||||||||||||
57 | Automatically mitigating vulnerabilities in x86 binary programs via partially recompilable decompilation | 2022 | Arxiv | No | Patching | App. Re. | Decompilation | Yes | |||||||||||||||||
58 | The Convergence of Source Code and Binary Vulnerability Discovery – A Case Study | 2022 | AsiaCCS | Security | No | Security analysis | Application | Decompilation | Yes | ||||||||||||||||
59 | dewolf: Improving Decompilation by leveraging User Surveys | 2022 | Arxiv | No | Code quality | Fundamental | Decompilation | Yes | |||||||||||||||||
60 | Boosting Neural Networks to Decompile Optimized Binaries | 2022 | ACSAC | Security | No | Neural decompilation | Fundamental | Decompilation | Yes | ||||||||||||||||
61 | Beyond the C: Retargetable Decompilation using Neural Machine Translation | 2022 | Arxiv | No | Neural decompilation | Fundamental | Decompilation | Yes | |||||||||||||||||
62 | Cornucopia: A Framework for Feedback Guided Generation of Binaries | 2022 | ASE | SE | Yes | Dataset generation | Measurement | Binary | Yes | ||||||||||||||||
63 | DnD: A Cross-Architecture Deep Neural Network Decompiler | 2022 | USENIX | Security | Yes | Targetted Decompilation | App. Re. | Decompilation | Yes | ||||||||||||||||
64 | How Machine Learning Is Solving the Binary Function Similarity Problem | 2022 | USENIX | Security | Yes | Code Similarity | Application | Binary | Yes | ||||||||||||||||
65 | Ground truth for binary disassembly is not easy | 2022 | USENIX Security | Security | Yes | CFG recovery | Measurement | Binary | Yes | ||||||||||||||||
66 | Decomperson: How Humans Decompile and What We Can Learn From It | 2022 | USENIX Security | Security | Yes | Code quality | Measurement | Decompilation | Yes | ||||||||||||||||
67 | RE-Mind: a First Look Inside the Mind of a Reverse Engineer | 2022 | USENIX | Security | Yes | Human Reversing | Application | Binary | Yes | ||||||||||||||||
68 | Augmenting decompiler output with learned variable names and types | 2022 | USENIX | Security | Yes | Type inference | Fundamental | Decompilation | Yes | ||||||||||||||||
69 | Binpointer: towards precise, sound, and scalable binary-level pointer analysis. | 2022 | CC | CFG Recovery | Fundamental | Decompilation | Yes | ||||||||||||||||||
70 | Static Analysis of JNI Programs via Binary Decompilation | 2023 | TSE | SE | No | Security analysis | Application | Decompilation | Yes | ||||||||||||||||
71 | CFG2Vec: Hierarchical graph neural network for cross-architectural software reverse engineering | 2023 | ICSE-SEIP | SE | No | CFG recovery | Fundamental | Binary | Yes | ||||||||||||||||
72 | BIRD: A Binary Intermediate Representation for Formally Verified Decompilation of X86-64 Binaries | 2023 | TAP | SE | No | Intermediate representation | Fundamental | Binary | Yes | ||||||||||||||||
73 | DIRE and its Data: Neural Decompiled Variable Renamings with Respect to Software Class | 2023 | TSEM | SE | No | Naming | Measurement | Decompilation | Yes | ||||||||||||||||
74 | TypeSqueezer: When Static Recovery of Function Signatures for Binary Executables Meets Dynamic Analysis | 2023 | CCS | Security | Yes | Type inference | Fundamental | Binary | Yes | ||||||||||||||||
75 | ARMore: Pushing Love Back Into Binaries | 2023 | USENIX | Security | Yes | Binary instrumentation | Application | Binary | Yes | ||||||||||||||||
76 | QueryX: Symbolic Query on Decompiled Code for Finding Bugs in COTS Binaries | 2023 | S&P | Security | Yes | Security analysis | Application | Decompilation | Yes | ||||||||||||||||
77 | Decompiling x86 Deep Neural Network Executables | 2023 | USENIX | Security | Yes | Targetted Decompilation | App. Re. | Decompilation | Yes | ||||||||||||||||
78 | LLM4Decompile: Decompiling Binary Code with Large Language Models | 2024 | Arxiv | No | Neural decompilation | Fundamental | Decompilation | Yes | |||||||||||||||||
79 | A Taxonomy of C Decompiler Fidelity Issues | 2024 | USENIX | Security | Yes | Code quality | Fundamental | Decompilation | Yes | ||||||||||||||||
80 | Ahoy SAILR! There is No Need to DREAM of C: A Compiler-Aware Structuring Algorithm for Binary Decompilation | 2024 | USENIX | Security | Yes | Control flow structuring | Fundamental | Decompilation | Yes | ||||||||||||||||
81 | TYGR: Type Inference on Stripped Binaries using Graph Neural Networks | 2024 | USENIX | Security | Yes | Type inference | Fundamental | Decompilation | Yes | ||||||||||||||||
82 | D-Helix: A Generic Decompiler Testing Framework Using Symbolic Differentiation | 2024 | USENIX | Security | Yes | Code quality | Measurement | Decompilation | Yes | ||||||||||||||||
83 | DeGPT: Optimizing Decompiler Output with LLM | 2024 | NDSS | Security | Yes | Decomp Improve | App. Re. | Decompilation | Yes | ||||||||||||||||
84 | "Len or index or count, anything but v1": Predicting Variable Names in Decompilation Output with Transfer Learning | 2024 | S&P | Security | Yes | Naming | App. Re. | Decompilation | Yes | ||||||||||||||||
85 | ReSym: Harnessing LLMs to Recover Variable and Data Structure Symbols from Stripped Binaries | 2024 | CCS | Security | Yes | Naming | App. Re. | Decompilation | Yes | https://dl.acm.org/doi/pdf/10.1145/3658644.3670340 | |||||||||||||||
86 | Verifiably Correct Lifting of Position-Independent x86-64 Binaries to Symbolized Assembly | 2024 | CCS | Security | Yes | Lifting | Fundamental | Binary | Yes | ||||||||||||||||
87 | Evaluating the Effectiveness of Decompilers | 2024 | ISSTA | Security | No | Code quality | Measurement | Decompilation | Yes | https://dl.acm.org/doi/pdf/10.1145/3650212.3652144 | |||||||||||||||
88 | R2I: A Relative Readability Metric for Decompiled Code | 2024 | FSE | SE | Yes | Code quality | Measurement | Decompilation | Yes | https://dl.acm.org/doi/pdf/10.1145/3643744 | |||||||||||||||
89 | Automatically mitigating vulnerabilities in x86 binary programs via partially recompilable decompilation | 2024 | TDSC | SE | No | Security analysis | App. Re. | Decompilation | Yes | https://www.ndss-symposium.org/wp-content/uploads/2025-276-paper.pdf | |||||||||||||||
90 | Unleashing the Power of Generative Model in Recovering Variable Names from Stripped Binary | 2025 | NDSS | Security | Yes | Naming | App. Re. | Decompilation | Yes | https://ieeexplore.ieee.org/document/10740475 | |||||||||||||||
91 | TRex: Practical Type Reconstruction for Binary Code | 2025 | USENIX | Security | Yes | Type inference | Fundamental | Decompilation | Yes | https://www.usenix.org/system/files/usenixsecurity25-bosamiya.pdf | |||||||||||||||
92 | DecLLM: LLM-Augmented Recompilable Decompilation for Enabling Programmatic Use of Decompiled Code | 2025 | ISSTA | SE | Yes | Recompilation | Fundamental | Decompilation | Yes | https://dl.acm.org/doi/pdf/10.1145/3728958 | |||||||||||||||
93 | PyLingual : Toward Perfect Decompilation of Evolving High-Level Languages | 2025 | S&P | Security | Yes | Other Language (Py) | Misc | Non-binary | Yes | https://ieeexplore.ieee.org/stamp/stamp.jsp?arnumber=11023256 | |||||||||||||||
94 | Walking The Last Mile: Studying Decompiler Output Correction in Practice | 2025 | CCS | Security | Yes | Other Language (Py) | Misc | Non-binary | Yes | https://dl.acm.org/doi/pdf/10.1145/3719027.3765040 | |||||||||||||||
95 | Recover Function Signature from Combined Constraints | 2025 | CCS | Security | Yes | Type inference (func sig) | Fundamental | Decompilation | Yes | https://dl.acm.org/doi/pdf/10.1145/3719027.3765089 | |||||||||||||||
96 | Unleashing the Power of Generative Model in Recovering Variable Names from Stripped Binary | 2025 | NDSS | Security | Yes | Naming | App. Re. | Decompilation | Yes | https://www.ndss-symposium.org/wp-content/uploads/2025-276-paper.pdf | |||||||||||||||
97 | SoK: No Goto, No Cry? The Fairy Tale of Flawless Control-Flow Structuring | 2025 | EuroS&P | Security | No | Control flow structuring | Measurement | Decompilation | Yes | https://ieeexplore.ieee.org/stamp/stamp.jsp?tp=&arnumber=11129273 | |||||||||||||||
98 | Bin2Wrong: a Unified Fuzzing Framework for Uncovering Semantic Errors in {Binary-to-C} Decompilers | 2025 | ATC | OS | No | Code quality | Fundamental | Decompilation | Yes | https://www.usenix.org/conference/atc25/presentation/yang-zao | |||||||||||||||
99 | An Empirical Study of C Decompilers: Performance Metrics and Error Taxonomy | 2025 | AisaCCS | Security | No | Code quality | Measurement | Decompilation | Yes | https://dl.acm.org/doi/pdf/10.1145/3708821.3733877 | |||||||||||||||
100 | Benchmarking Binary Type Inference Techniques in Decompilers | 2025 | SURE | Security | No | Type inference | Measurement | Decompilation | No |