<?xml version="1.0" encoding="utf-8"?>
<TEI xmlns="http://www.tei-c.org/ns/1.0" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:hal="http://hal.archives-ouvertes.fr/" xmlns:gml="http://www.opengis.net/gml/3.3/" xmlns:gmlce="http://www.opengis.net/gml/3.3/ce" version="1.1" xsi:schemaLocation="http://www.tei-c.org/ns/1.0 http://api.archives-ouvertes.fr/documents/aofr-sword.xsd">
  <teiHeader>
    <fileDesc>
      <titleStmt>
        <title>HAL TEI export of hal-04766984v1</title>
      </titleStmt>
      <publicationStmt>
        <distributor>CCSD</distributor>
        <availability status="restricted">
          <licence target="https://creativecommons.org/publicdomain/zero/1.0/">CC0 1.0 - Universal</licence>
        </availability>
        <date when="2026-05-19T20:49:15+02:00"/>
      </publicationStmt>
      <sourceDesc>
        <p part="N">HAL API Platform</p>
      </sourceDesc>
    </fileDesc>
  </teiHeader>
  <text>
    <body>
      <listBibl>
        <biblFull>
          <titleStmt>
            <title xml:lang="en">Reachability Analysis of Concurrent Self-modifying Code</title>
            <author role="aut">
              <persName>
                <forename type="first">Walid</forename>
                <surname>Messahel</surname>
              </persName>
              <idno type="halauthorid">3285064-0</idno>
            </author>
            <author role="aut">
              <persName>
                <forename type="first">Tayssir</forename>
                <surname>Touili</surname>
              </persName>
              <email type="md5">f30d11669e7e67993612654e9a00e496</email>
              <email type="domain">irif.fr</email>
              <idno type="idhal" notation="string">tayssir-touili</idno>
              <idno type="idhal" notation="numeric">1083774</idno>
              <idno type="halauthorid" notation="string">175621-1083774</idno>
              <idno type="ORCID">https://orcid.org/0000-0002-1134-2220</idno>
              <affiliation ref="#struct-1005016"/>
            </author>
            <editor role="depositor">
              <persName>
                <forename>Tayssir</forename>
                <surname>Touili</surname>
              </persName>
              <email type="md5">f30d11669e7e67993612654e9a00e496</email>
              <email type="domain">irif.fr</email>
            </editor>
            <funder ref="#projanr-69632"/>
          </titleStmt>
          <editionStmt>
            <edition n="v1" type="current">
              <date type="whenSubmitted">2024-11-12 11:35:42</date>
              <date type="whenModified">2025-12-19 10:22:02</date>
              <date type="whenReleased">2024-11-12 16:18:28</date>
              <date type="whenProduced">2024-06-19</date>
              <date type="whenEndEmbargoed">2024-11-12</date>
              <ref type="file" target="https://hal.science/hal-04766984v1/document">
                <date notBefore="2024-11-12"/>
              </ref>
              <ref type="file" subtype="author" n="1" target="https://hal.science/hal-04766984v1/file/main.pdf" id="file-4777350-4160760">
                <date notBefore="2024-11-12"/>
              </ref>
            </edition>
            <edition n="v2">
              <date type="whenSubmitted">2025-03-14 11:55:36</date>
            </edition>
            <respStmt>
              <resp>contributor</resp>
              <name key="331565">
                <persName>
                  <forename>Tayssir</forename>
                  <surname>Touili</surname>
                </persName>
                <email type="md5">f30d11669e7e67993612654e9a00e496</email>
                <email type="domain">irif.fr</email>
              </name>
            </respStmt>
          </editionStmt>
          <publicationStmt>
            <distributor>CCSD</distributor>
            <idno type="halId">hal-04766984</idno>
            <idno type="halUri">https://hal.science/hal-04766984</idno>
            <idno type="halBibtex">messahel:hal-04766984</idno>
            <idno type="halRefHtml">&lt;i&gt;28th International Conference on Engineering of Complex Computer Systems&lt;/i&gt;, Jun 2024, Limassol (Chypre), Cyprus. pp.257-271, &lt;a target="_blank" href="https://dx.doi.org/10.1007/978-3-031-66456-4_14"&gt;&amp;#x27E8;10.1007/978-3-031-66456-4_14&amp;#x27E9;&lt;/a&gt;</idno>
            <idno type="halRef">28th International Conference on Engineering of Complex Computer Systems, Jun 2024, Limassol (Chypre), Cyprus. pp.257-271, &amp;#x27E8;10.1007/978-3-031-66456-4_14&amp;#x27E9;</idno>
            <availability status="restricted">
              <licence target="https://about.hal.science/hal-authorisation-v1/">HAL Authorization<ref corresp="#file-4777350-4160760"/></licence>
            </availability>
          </publicationStmt>
          <seriesStmt/>
          <notesStmt>
            <note type="audience" n="2">International</note>
            <note type="invited" n="0">No</note>
            <note type="popular" n="0">No</note>
            <note type="peer" n="1">Yes</note>
            <note type="proceedings" n="1">Yes</note>
          </notesStmt>
          <sourceDesc>
            <biblStruct>
              <analytic>
                <title xml:lang="en">Reachability Analysis of Concurrent Self-modifying Code</title>
                <author role="aut">
                  <persName>
                    <forename type="first">Walid</forename>
                    <surname>Messahel</surname>
                  </persName>
                  <idno type="halauthorid">3285064-0</idno>
                </author>
                <author role="aut">
                  <persName>
                    <forename type="first">Tayssir</forename>
                    <surname>Touili</surname>
                  </persName>
                  <email type="md5">f30d11669e7e67993612654e9a00e496</email>
                  <email type="domain">irif.fr</email>
                  <idno type="idhal" notation="string">tayssir-touili</idno>
                  <idno type="idhal" notation="numeric">1083774</idno>
                  <idno type="halauthorid" notation="string">175621-1083774</idno>
                  <idno type="ORCID">https://orcid.org/0000-0002-1134-2220</idno>
                  <affiliation ref="#struct-1005016"/>
                </author>
              </analytic>
              <monogr>
                <meeting>
                  <title>28th  International Conference on Engineering of Complex Computer Systems</title>
                  <date type="start">2024-06-19</date>
                  <date type="end">2024-06-21</date>
                  <settlement>Limassol (Chypre)</settlement>
                  <country key="CY">Cyprus</country>
                </meeting>
                <imprint>
                  <publisher>Springer Nature Switzerland</publisher>
                  <pubPlace>Cham</pubPlace>
                  <biblScope unit="serie">Lecture Notes in Computer Science</biblScope>
                  <biblScope unit="volume">14784</biblScope>
                  <biblScope unit="pp">257-271</biblScope>
                  <date type="datePub">2024</date>
                </imprint>
              </monogr>
              <idno type="doi">10.1007/978-3-031-66456-4_14</idno>
            </biblStruct>
          </sourceDesc>
          <profileDesc>
            <langUsage>
              <language ident="en">English</language>
            </langUsage>
            <textClass>
              <classCode scheme="halDomain" n="info">Computer Science [cs]</classCode>
              <classCode scheme="halTypology" n="COMM">Conference papers</classCode>
              <classCode scheme="halOldTypology" n="COMM">Conference papers</classCode>
              <classCode scheme="halTreeTypology" n="COMM">Conference papers</classCode>
            </textClass>
            <abstract xml:lang="en">
              <p>We introduce a new effective way to analyze multi-threaded programs that contain self modifying code, i.e., code that modifies itself during its execution. This kind of code is widely used in malware to hide the malicious portions of their code. We introduce a new model called Self Modifying Dynamic Pushdown Network (SM-DPN) to model such programs. A SM-DPN is a network of Self-Modifying Pushdown Systems, i.e., Pushdown Systems that can modify their instructions on the fly during execution. We use finite automata to model regular infinite sets of configurations of SM-DPNs, and propose an algorithm to compute a finite automaton corresponding to the pre* reachable configurations of SM-DPNs. This allows to perform the backward reachability analysis of self modifying multi-threaded programs. We implemented our techniques in a tool and obtained encouraging results. In particular, our tool was able to detect a self-modifying multithreaded malware.</p>
            </abstract>
          </profileDesc>
        </biblFull>
      </listBibl>
    </body>
    <back>
      <listOrg type="structures">
        <org type="laboratory" xml:id="struct-1005016" status="VALID">
          <idno type="IdRef">193993007</idno>
          <idno type="RNSR">201621976X</idno>
          <idno type="ROR">https://ror.org/02krdtz55</idno>
          <idno type="Wikidata">Q51783269</idno>
          <orgName>Institut de Recherche en Informatique Fondamentale</orgName>
          <orgName type="acronym">IRIF (UMR_8243)</orgName>
          <date type="start">2020-01-01</date>
          <desc>
            <address>
              <addrLine>Université Paris CitéBâtiment Sophie Germain, Case courrier 70148 Place Aurélie Nemours75205 Paris Cedex 13</addrLine>
              <country key="FR"/>
            </address>
            <ref type="url">https://www.irif.fr/</ref>
          </desc>
          <listRelation>
            <relation name="UMR8243" active="#struct-441569" type="direct"/>
            <relation name="UMR_8243" active="#struct-557826" type="direct"/>
          </listRelation>
        </org>
        <org type="regroupinstitution" xml:id="struct-441569" status="VALID">
          <idno type="IdRef">02636817X</idno>
          <idno type="ISNI">0000000122597504</idno>
          <idno type="ROR">https://ror.org/02feahw73</idno>
          <orgName>Centre National de la Recherche Scientifique</orgName>
          <orgName type="acronym">CNRS</orgName>
          <date type="start">1939-10-19</date>
          <desc>
            <address>
              <country key="FR"/>
            </address>
            <ref type="url">https://www.cnrs.fr/</ref>
          </desc>
        </org>
        <org type="institution" xml:id="struct-557826" status="VALID">
          <idno type="IdRef">236453505</idno>
          <idno type="ISNI">0000 0004 7885 7602</idno>
          <idno type="ROR">https://ror.org/05f82e368</idno>
          <orgName>Université Paris Cité</orgName>
          <orgName type="acronym">UPCité</orgName>
          <date type="start">2020-01-01</date>
          <desc>
            <address>
              <addrLine>85 boulevard Saint-Germain75006 Paris</addrLine>
              <country key="FR"/>
            </address>
            <ref type="url">https://u-paris.fr/</ref>
          </desc>
        </org>
      </listOrg>
      <listOrg type="projects">
        <org type="anrProject" xml:id="projanr-69632" status="VALID">
          <idno type="anr">ANR-22-PECY-0007</idno>
          <orgName>Defmal</orgName>
          <desc>Defense against malware</desc>
          <date type="start">2022</date>
        </org>
      </listOrg>
    </back>
  </text>
</TEI>