{:highlights [{:id #uuid "635ed6d3-de30-4f8d-83bc-026394c03303", :page 1, :position {:bounding {:x1 0, :y1 94.37944793701172, :x2 500.08898544311523, :y2 395.56695556640625, :width 1019.9999999999999, :height 1319.9999999999998}, :rects ({:x1 0, :y1 94.37944793701172, :x2 0, :y2 113.54973602294922, :width 1019.9999999999999, :height 1319.9999999999998} {:x1 0, :y1 110.38321685791016, :x2 0, :y2 129.5535125732422, :width 1019.9999999999999, :height 1319.9999999999998} {:x1 81.60210800170898, :y1 346.3746337890625, :x2 500.08471298217773, :y2 363.3540344238281, :width 1019.9999999999999, :height 1319.9999999999998} {:x1 81.60210800170898, :y1 362.4810791015625, :x2 500.08898544311523, :y2 379.4604797363281, :width 1019.9999999999999, :height 1319.9999999999998} {:x1 81.10573196411133, :y1 378.5875549316406, :x2 186.93699264526367, :y2 395.56695556640625, :width 1019.9999999999999, :height 1319.9999999999998}), :page 1}, :content {:text "facilitates extracting certain components from the input software and match the extracted components with open source software(OSS) libraries."}, :properties {:color "green"}} {:id #uuid "635ed6e9-5ab5-494e-920d-d197bad4a0ef", :page 1, :position {:bounding {:x1 245.68229293823242, :y1 410.8005065917969, :x2 348.44587326049805, :y2 427.7798767089844, :width 1019.9999999999999, :height 1319.9999999999998}, :rects ({:x1 245.68229293823242, :y1 410.8005065917969, :x2 348.44587326049805, :y2 427.7798767089844, :width 1019.9999999999999, :height 1319.9999999999998}), :page 1}, :content {:text "BSCA solutions"}, :properties {:color "green"}} {:id #uuid "635ed6fa-e494-4bb0-a747-301dac2e3822", :page 1, :position {:bounding {:x1 136.29473495483398, :y1 443.013427734375, :x2 355.04731369018555, :y2 459.9928283691406, :width 1019.9999999999999, :height 1319.9999999999998}, :rects ({:x1 136.29473495483398, :y1 443.013427734375, :x2 355.04731369018555, :y2 459.9928283691406, :width 1019.9999999999999, :height 1319.9999999999998}), :page 1}, :content {:text "binary similarity analysis (BSA),"}, :properties {:color "purple"}} {:id #uuid "635ed702-0585-45ec-a36c-3681491f925c", :page 1, :position {:bounding {:x1 165.0214958190918, :y1 298.05523681640625, :x2 404.9469413757324, :y2 315.0346374511719, :width 1019.9999999999999, :height 1319.9999999999998}, :rects ({:x1 165.0214958190918, :y1 298.05523681640625, :x2 404.9469413757324, :y2 315.0346374511719, :width 1019.9999999999999, :height 1319.9999999999998}), :page 1}, :content {:text "Software composition analysis (SCA"}, :properties {:color "purple"}} {:id #uuid "635ed718-a954-446b-b442-890d08b54afd", :page 1, :position {:bounding {:x1 81.60210800170898, :y1 394.69403076171875, :x2 253.41779708862305, :y2 411.6734313964844, :width 1019.9999999999999, :height 1319.9999999999998}, :rects ({:x1 81.60210800170898, :y1 394.69403076171875, :x2 253.41779708862305, :y2 411.6734313964844, :width 1019.9999999999999, :height 1319.9999999999998}), :page 1}, :content {:text "binary code SCA (BSCA)"}, :properties {:color "purple"}} {:id #uuid "635ed78d-51f5-4fa1-9fc5-c8792fe0ba02", :page 1, :position {:bounding {:x1 0, :y1 254.41714477539062, :x2 502.5616035461426, :y2 718.4408569335938, :width 1019.9999999999999, :height 1319.9999999999998}, :rects ({:x1 0, :y1 254.41714477539062, :x2 0, :y2 273.5874328613281, :width 1019.9999999999999, :height 1319.9999999999998} {:x1 0, :y1 270.4208984375, :x2 0, :y2 289.5911865234375, :width 1019.9999999999999, :height 1319.9999999999998} {:x1 0, :y1 286.4246826171875, :x2 0, :y2 305.594970703125, :width 1019.9999999999999, :height 1319.9999999999998} {:x1 0, :y1 302.4284362792969, :x2 0, :y2 321.5987243652344, :width 1019.9999999999999, :height 1319.9999999999998} {:x1 0, :y1 318.4322204589844, :x2 0, :y2 337.6025085449219, :width 1019.9999999999999, :height 1319.9999999999998} {:x1 0, :y1 334.43597412109375, :x2 0, :y2 353.60626220703125, :width 1019.9999999999999, :height 1319.9999999999998} {:x1 0, :y1 350.43975830078125, :x2 0, :y2 369.61004638671875, :width 1019.9999999999999, :height 1319.9999999999998} {:x1 0, :y1 366.4435119628906, :x2 0, :y2 385.6138000488281, :width 1019.9999999999999, :height 1319.9999999999998} {:x1 0, :y1 382.4472961425781, :x2 0, :y2 401.6175842285156, :width 1019.9999999999999, :height 1319.9999999999998} {:x1 0, :y1 398.4510498046875, :x2 0, :y2 417.621337890625, :width 1019.9999999999999, :height 1319.9999999999998} {:x1 0, :y1 414.454833984375, :x2 0, :y2 433.6251220703125, :width 1019.9999999999999, :height 1319.9999999999998} {:x1 0, :y1 430.4585876464844, :x2 0, :y2 449.6288757324219, :width 1019.9999999999999, :height 1319.9999999999998} {:x1 98.2049446105957, :y1 508.1838684082031, :x2 502.5616035461426, :y2 525.1632690429688, :width 1019.9999999999999, :height 1319.9999999999998} {:x1 81.60210800170898, :y1 524.2903442382812, :x2 499.235897064209, :y2 541.2697143554688, :width 1019.9999999999999, :height 1319.9999999999998} {:x1 81.60210800170898, :y1 540.3967895507812, :x2 499.8151206970215, :y2 557.3761596679688, :width 1019.9999999999999, :height 1319.9999999999998} {:x1 81.60210800170898, :y1 556.5032348632812, :x2 500.34728622436523, :y2 573.482666015625, :width 1019.9999999999999, :height 1319.9999999999998} {:x1 81.60210800170898, :y1 572.6097412109375, :x2 500.611629486084, :y2 589.589111328125, :width 1019.9999999999999, :height 1319.9999999999998} {:x1 81.60210800170898, :y1 588.7161865234375, :x2 499.75817489624023, :y2 605.6956176757812, :width 1019.9999999999999, :height 1319.9999999999998} {:x1 81.60210800170898, :y1 604.8226318359375, :x2 500.0897789001465, :y2 621.8020629882812, :width 1019.9999999999999, :height 1319.9999999999998} {:x1 81.60210800170898, :y1 620.9291381835938, :x2 500.33117294311523, :y2 637.9085083007812, :width 1019.9999999999999, :height 1319.9999999999998} {:x1 81.60210800170898, :y1 637.0355834960938, :x2 499.29162216186523, :y2 654.0150146484375, :width 1019.9999999999999, :height 1319.9999999999998} {:x1 81.60210800170898, :y1 653.1420288085938, :x2 500.0880699157715, :y2 670.1214599609375, :width 1019.9999999999999, :height 1319.9999999999998} {:x1 81.60210800170898, :y1 669.24853515625, :x2 499.26720809936523, :y2 686.2279052734375, :width 1019.9999999999999, :height 1319.9999999999998} {:x1 81.60210800170898, :y1 685.35498046875, :x2 498.36352157592773, :y2 702.3344116210938, :width 1019.9999999999999, :height 1319.9999999999998} {:x1 81.60210800170898, :y1 701.4614868164062, :x2 490.82006454467773, :y2 718.4408569335938, :width 1019.9999999999999, :height 1319.9999999999998}), :page 1}, :content {:text "This study explores bridging the gap between state-of-theart (SOTA) BSA and BSCA. We build the first comprehensive benchmark dataset with considerable manual effort. Then, we establish our BSCA pipeline, by extending the SOTA SCA solution. Particularly, we concretize the key procedure of BSCA, namely matching a binary component with OSS, with six SOTA BSA techniques. Evaluation using our benchmark dataset reveals that simply employing BSA in BSCA exhibits less desirable accuracy, as BSCA faces unique challenges. With manual inspection on the failed cases, we propose three enhancements, whose combination improves the F1 score of BSCA for nearly 30% and outperforms SOTA commercial BSCA software. We discuss several open challenges and potential solutions to augment BSCA solutions."}, :properties {:color "yellow"}} {:id #uuid "635ed9b2-f4e7-4a1d-accd-a7c6a0ea5656", :page 1, :position {:bounding {:x1 0, :y1 526.4812164306641, :x2 500.07470321655273, :y2 867.404296875, :width 1019.9999999999999, :height 1319.9999999999998}, :rects ({:x1 0, :y1 526.4812164306641, :x2 0, :y2 545.6515121459961, :width 1019.9999999999999, :height 1319.9999999999998} {:x1 0, :y1 542.4849853515625, :x2 0, :y2 561.6552810668945, :width 1019.9999999999999, :height 1319.9999999999998} {:x1 256.9084892272949, :y1 810.6807861328125, :x2 499.4674186706543, :y2 828.755615234375, :width 1019.9999999999999, :height 1319.9999999999998} {:x1 81.60210800170898, :y1 830.0050964355469, :x2 500.07470321655273, :y2 848.0799560546875, :width 1019.9999999999999, :height 1319.9999999999998} {:x1 81.60210800170898, :y1 849.3294372558594, :x2 285.6681938171387, :y2 867.404296875, :width 1019.9999999999999, :height 1319.9999999999998}), :page 1}, :content {:text " localizing potentially vulnerable or outdated OSS components, reducing risk factors, and leading to healthy open source usage"}, :properties {:color "purple"}} {:id #uuid "63626d65-b79c-4e25-99f3-12539b9dd086", :page 1, :position {:bounding {:x1 0, :y1 704.1658325195312, :x2 603.3695068359375, :y2 1297.3408508300781, :width 1224, :height 1584}, :rects ({:x1 0, :y1 704.1658325195312, :x2 0, :y2 720.0498046875, :width 1224, :height 1584} {:x1 0, :y1 720.1696166992188, :x2 0, :y2 736.0535583496094, :width 1224, :height 1584} {:x1 372.249267578125, :y1 1228.4989318847656, :x2 603.3695068359375, :y2 1250.9555969238281, :width 1224, :height 1584} {:x1 97.92252349853516, :y1 1251.7001647949219, :x2 600.0527954101562, :y2 1274.1567687988281, :width 1224, :height 1584} {:x1 97.92252349853516, :y1 1274.8841857910156, :x2 161.6891632080078, :y2 1297.3408508300781, :width 1224, :height 1584}), :page 1}, :content {:text "in many real-world, securitysensitive scenarios, input software’s source code is not always availabl"}, :properties {:color "green"}} {:id #uuid "63626d70-8c68-445d-b883-7f453bccbb4b", :page 1, :position {:bounding {:x1 0, :y1 736.1733703613281, :x2 602.3364868164062, :y2 1343.7346496582031, :width 1224, :height 1584}, :rects ({:x1 0, :y1 736.1733703613281, :x2 0, :y2 752.0573425292969, :width 1224, :height 1584} {:x1 0, :y1 752.1771545410156, :x2 0, :y2 768.0610961914062, :width 1224, :height 1584} {:x1 244.24490356445312, :y1 1274.8841857910156, :x2 602.3364868164062, :y2 1297.3408508300781, :width 1224, :height 1584} {:x1 97.92252349853516, :y1 1298.0854187011719, :x2 600.0517654418945, :y2 1320.5420227050781, :width 1224, :height 1584} {:x1 97.92252349853516, :y1 1321.2780456542969, :x2 324.5109558105469, :y2 1343.7346496582031, :width 1224, :height 1584}), :page 1}, :content {:text "when performing SCA over commercial offthe-shelf (COTS) software, the primarily available information is the program binary code."}, :properties {:color "green"}} {:id #uuid "63626d75-cec4-406e-bc61-1cd6960be676", :page 1, :position {:bounding {:x1 0, :y1 768.180908203125, :x2 603.3753128051758, :y2 1390.1199035644531, :width 1224, :height 1584}, :rects ({:x1 0, :y1 768.180908203125, :x2 0, :y2 784.0648803710938, :width 1224, :height 1584} {:x1 0, :y1 784.1846923828125, :x2 0, :y2 800.0686340332031, :width 1224, :height 1584} {:x1 472.22802734375, :y1 1321.2780456542969, :x2 600.0621337890625, :y2 1343.7346496582031, :width 1224, :height 1584} {:x1 97.92252349853516, :y1 1344.4706726074219, :x2 603.3753128051758, :y2 1366.9272766113281, :width 1224, :height 1584} {:x1 97.92252349853516, :y1 1367.6632995605469, :x2 263.20838165283203, :y2 1390.1199035644531, :width 1224, :height 1584}), :page 1}, :content {:text "binary software composition analysis (BSCA) becomes a demanding, yet underexplored field [5, 8]."}, :properties {:color "purple"}} {:id #uuid "63626d87-d918-4004-b56b-640591b7fc45", :page 1, :position {:bounding {:x1 0, :y1 355.7115783691406, :x2 1129.397216796875, :y2 896.0912475585938, :width 1224, :height 1584}, :rects ({:x1 1088.8468017578125, :y1 355.7115783691406, :x2 1126.81201171875, :y2 378.168212890625, :width 1224, :height 1584} {:x1 623.9501342773438, :y1 378.9042053222656, :x2 1128.5682373046875, :y2 401.36083984375, :width 1224, :height 1584} {:x1 623.2312622070312, :y1 402.0968322753906, :x2 1129.397216796875, :y2 424.553466796875, :width 1224, :height 1584} {:x1 623.9501342773438, :y1 425.2894592285156, :x2 875.0469970703125, :y2 447.74609375, :width 1224, :height 1584} {:x1 0, :y1 848.1997680664062, :x2 0, :y2 864.083740234375, :width 1224, :height 1584} {:x1 0, :y1 864.2035522460938, :x2 0, :y2 880.0874633789062, :width 1224, :height 1584} {:x1 0, :y1 880.207275390625, :x2 0, :y2 896.0912475585938, :width 1224, :height 1584}), :page 1}, :content {:text "BSA quantifies the similarity between two binary code samples, which forms the basis of various important software engineering and security applications."}, :properties {:color "green"}} {:id #uuid "63626d8e-389f-4d6d-bc46-59de09eb9cdb", :page 1, :position {:bounding {:x1 0, :y1 425.2894592285156, :x2 1126.0943603515625, :y2 928.0988159179688, :width 1224, :height 1584}, :rects ({:x1 1000.0073852539062, :y1 425.2894592285156, :x2 1125.009765625, :y2 447.74609375, :width 1224, :height 1584} {:x1 623.9501342773438, :y1 448.4820861816406, :x2 1126.0943603515625, :y2 470.938720703125, :width 1224, :height 1584} {:x1 623.9501342773438, :y1 471.6747131347656, :x2 1009.515380859375, :y2 494.13134765625, :width 1224, :height 1584} {:x1 0, :y1 896.2110595703125, :x2 0, :y2 912.0950317382812, :width 1224, :height 1584} {:x1 0, :y1 912.21484375, :x2 0, :y2 928.0988159179688, :width 1224, :height 1584}), :page 1}, :content {:text "BSA promotes malware analysis by comparing suspicious code with known malware families to determine if it is malicious"}, :properties {:color "green"}} {:id #uuid "63626d96-50c9-47bd-8cf2-88ad64962f91", :page 1, :position {:bounding {:x1 0, :y1 471.6747131347656, :x2 1126.795166015625, :y2 960.1063232421875, :width 1224, :height 1584}, :rects ({:x1 1088.758056640625, :y1 471.6747131347656, :x2 1126.795166015625, :y2 494.13134765625, :width 1224, :height 1584} {:x1 623.9501342773438, :y1 494.8673400878906, :x2 1126.08642578125, :y2 517.323974609375, :width 1224, :height 1584} {:x1 623.9501342773438, :y1 518.0599975585938, :x2 711.50341796875, :y2 540.5166015625, :width 1224, :height 1584} {:x1 0, :y1 928.2186279296875, :x2 0, :y2 944.1025390625, :width 1224, :height 1584} {:x1 0, :y1 944.2223510742188, :x2 0, :y2 960.1063232421875, :width 1224, :height 1584}), :page 1}, :content {:text "BSA also helps discover code clones and algorithm plagiarism in executable"}, :properties {:color "purple"}} {:id #uuid "63626d9e-9553-40b2-b621-0263752f8aac", :page 1, :position {:bounding {:x1 0, :y1 569.6314697265625, :x2 1126.0875244140625, :y2 1008.1176147460938, :width 1224, :height 1584}, :rects ({:x1 1017.3038330078125, :y1 569.6314697265625, :x2 1126.0875244140625, :y2 592.088134765625, :width 1224, :height 1584} {:x1 623.9501342773438, :y1 592.8240966796875, :x2 707.8783569335938, :y2 615.28076171875, :width 1224, :height 1584} {:x1 0, :y1 992.2337036132812, :x2 0, :y2 1008.1176147460938, :width 1224, :height 1584}), :page 1}, :content {:text "“binary code matching."}, :properties {:color "green"}} {:id #uuid "63626def-d7c8-462d-b5c1-25b8004f2151", :page 1, :position {:bounding {:x1 0, :y1 662.4019775390625, :x2 1129.3970947265625, :y2 1104.1402587890625, :width 1224, :height 1584}, :rects ({:x1 671.9241943359375, :y1 662.4019775390625, :x2 1125.02880859375, :y2 684.858642578125, :width 1224, :height 1584} {:x1 623.9501342773438, :y1 685.5946044921875, :x2 1126.0816650390625, :y2 708.05126953125, :width 1224, :height 1584} {:x1 623.9501342773438, :y1 708.7872314453125, :x2 1129.3970947265625, :y2 731.243896484375, :width 1224, :height 1584} {:x1 623.9501342773438, :y1 731.9798583984375, :x2 658.3340454101562, :y2 754.4365234375, :width 1224, :height 1584} {:x1 0, :y1 1056.248779296875, :x2 0, :y2 1072.1326904296875, :width 1224, :height 1584} {:x1 0, :y1 1072.2525634765625, :x2 0, :y2 1088.136474609375, :width 1224, :height 1584} {:x1 0, :y1 1088.25634765625, :x2 0, :y2 1104.1402587890625, :width 1224, :height 1584}), :page 1}, :content {:text "advanced BSA solutions have been extensively using deep neural networks (DNNs) and its enabled representative learning and large language models (LLMs)-based embedding"}, :properties {:color "purple"}} {:id #uuid "63626e1b-2f36-4b4f-833a-265f5ea2189a", :page 1, :position {:bounding {:x1 0, :y1 899.5145263671875, :x2 1125.0689697265625, :y2 1232.17041015625, :width 1224, :height 1584}, :rects ({:x1 623.9501342773438, :y1 899.5145263671875, :x2 1125.0689697265625, :y2 921.9711303710938, :width 1224, :height 1584} {:x1 623.9501342773438, :y1 922.7071533203125, :x2 979.5685424804688, :y2 945.1637573242188, :width 1224, :height 1584} {:x1 0, :y1 1216.2864379882812, :x2 0, :y2 1232.17041015625, :width 1224, :height 1584}), :page 1}, :content {:text "BSA and SCA/BSCA, two conceptually similar fields, exhibit a notable difference in the technical solution; "}, :properties {:color "purple"}} {:id #uuid "63626e3d-aa14-4765-965c-4f083001d53e", :page 1, :position {:bounding {:x1 0, :y1 1108.2481689453125, :x2 1126.816162109375, :y2 1392.2081298828125, :width 1224, :height 1584}, :rects ({:x1 977.1309814453125, :y1 1108.2481689453125, :x2 1126.0828857421875, :y2 1130.7047729492188, :width 1224, :height 1584} {:x1 623.9501342773438, :y1 1131.4407958984375, :x2 1126.816162109375, :y2 1153.8973999023438, :width 1224, :height 1584} {:x1 623.9501342773438, :y1 1154.6334228515625, :x2 924.3575439453125, :y2 1177.0900268554688, :width 1224, :height 1584} {:x1 0, :y1 1360.3203125, :x2 0, :y2 1376.204345703125, :width 1224, :height 1584} {:x1 0, :y1 1376.3240966796875, :x2 0, :y2 1392.2081298828125, :width 1224, :height 1584}), :page 1}, :content {:text "this paper aims to provide a systematic understanding and study applying SOTA BSA solutions in the field of BSCA."}, :properties {:color "purple"}} {:id #uuid "63626e99-4840-47d9-a492-27cb3c6ce474", :page 1, :position {:bounding {:x1 0, :y1 1298.9754638671875, :x2 1126.089111328125, :y2 1520.23828125, :width 1224, :height 1584}, :rects ({:x1 1081.96435546875, :y1 1298.9754638671875, :x2 1126.0849609375, :y2 1321.4320983886719, :width 1224, :height 1584} {:x1 623.9501342773438, :y1 1322.1680908203125, :x2 1126.089111328125, :y2 1344.6247253417969, :width 1224, :height 1584} {:x1 623.9501342773438, :y1 1345.3607177734375, :x2 794.9558715820312, :y2 1367.8173522949219, :width 1224, :height 1584} {:x1 0, :y1 1488.3505249023438, :x2 0, :y2 1504.2344970703125, :width 1224, :height 1584} {:x1 0, :y1 1504.3543090820312, :x2 0, :y2 1520.23828125, :width 1224, :height 1584}), :page 1}, :content {:text "each executable contains reuse relations with 12.6 production OSS libraries on average"}, :properties {:color "purple"}} {:id #uuid "63626eae-3afb-43c1-a8d9-2527f8b60466", :page 1, :position {:bounding {:x1 717.2885131835938, :y1 1414.9385986328125, :x2 893.8563232421875, :y2 1437.3952026367188, :width 1224, :height 1584}, :rects ({:x1 717.2885131835938, :y1 1414.9385986328125, :x2 893.8563232421875, :y2 1437.3952026367188, :width 1224, :height 1584}), :page 1}, :content {:text "SOTA BSA solutions"}, :properties {:color "purple"}} {:id #uuid "63626ed9-b973-4a1e-923e-552a97e55f11", :page 2, :position {:bounding {:x1 276.6824645996094, :y1 318.2439270019531, :x2 397.99639892578125, :y2 335.7710876464844, :width 1224, :height 1584}, :rects ({:x1 276.6824645996094, :y1 318.2439270019531, :x2 397.99639892578125, :y2 335.7710876464844, :width 1224, :height 1584}), :page 2}, :content {:text " composition searc"}, :properties {:color "green"}} {:id #uuid "63626f5c-a03a-4594-9fba-2809976fd577", :page 2, :position {:bounding {:x1 0, :y1 96.02260971069336, :x2 600.406623840332, :y2 525.2488670349121, :width 1224, :height 1584}, :rects ({:x1 0, :y1 96.02260971069336, :x2 0, :y2 111.90656661987305, :width 1224, :height 1584} {:x1 0, :y1 112.0263786315918, :x2 0, :y2 127.91033554077148, :width 1224, :height 1584} {:x1 0, :y1 128.03014755249023, :x2 0, :y2 143.91410446166992, :width 1224, :height 1584} {:x1 400.5133972167969, :y1 433.2143211364746, :x2 597.91162109375, :y2 455.67092514038086, :width 1224, :height 1584} {:x1 97.92252349853516, :y1 456.4069480895996, :x2 600.406623840332, :y2 478.86355209350586, :width 1224, :height 1584} {:x1 97.92252349853516, :y1 479.5995750427246, :x2 600.05419921875, :y2 502.05617904663086, :width 1224, :height 1584} {:x1 97.92252349853516, :y1 502.7922019958496, :x2 262.78372955322266, :y2 525.2488670349121, :width 1224, :height 1584}), :page 2}, :content {:text "We find that BSCA has distinct requirement than standard BSA, for which the latter case may overly emphasize the necessity of precisely extracting program semantics"}, :properties {:color "purple"}} {:id #uuid "63626f73-9dc0-4ebe-83f8-4a63dc6e375e", :page 2, :position {:bounding {:x1 0, :y1 176.04145431518555, :x2 600.0654907226562, :y2 594.8267478942871, :width 1224, :height 1584}, :rects ({:x1 0, :y1 176.04145431518555, :x2 0, :y2 191.92541122436523, :width 1224, :height 1584} {:x1 297.2869567871094, :y1 549.1774559020996, :x2 600.0654907226562, :y2 571.6341209411621, :width 1224, :height 1584} {:x1 97.92252349853516, :y1 572.3700828552246, :x2 339.85416412353516, :y2 594.8267478942871, :width 1224, :height 1584}), :page 2}, :content {:text " identifying the exact version of OSS libraries is very challenging."}, :properties {:color "purple"}} {:id #uuid "63626f8a-156d-4221-a4d7-6a294731413d", :page 2, :position {:bounding {:x1 0, :y1 224.05276107788086, :x2 600.062141418457, :y2 687.5972557067871, :width 1224, :height 1584}, :rects ({:x1 0, :y1 224.05276107788086, :x2 0, :y2 239.9367332458496, :width 1224, :height 1584} {:x1 0, :y1 240.05654525756836, :x2 0, :y2 255.94048690795898, :width 1224, :height 1584} {:x1 405.06524658203125, :y1 618.7553367614746, :x2 599.0206909179688, :y2 641.2120018005371, :width 1224, :height 1584} {:x1 97.92252349853516, :y1 641.9479637145996, :x2 600.062141418457, :y2 664.4046287536621, :width 1224, :height 1584} {:x1 97.92252349853516, :y1 665.1405906677246, :x2 430.9223403930664, :y2 687.5972557067871, :width 1224, :height 1584}), :page 2}, :content {:text "e design three low-cost and highly effective enhancement strategies from different perspectives to enhance BSA for BSCA"}, :properties {:color "purple"}} {:id #uuid "63626ffb-64b4-4ada-869a-3f5dceb7523d", :page 2, :position {:bounding {:x1 0, :y1 384.09046173095703, :x2 600.0736846923828, :y2 922.8098449707031, :width 1224, :height 1584}, :rects ({:x1 0, :y1 384.09046173095703, :x2 0, :y2 399.9744110107422, :width 1224, :height 1584} {:x1 0, :y1 400.09422302246094, :x2 0, :y2 415.9781799316406, :width 1224, :height 1584} {:x1 136.8365020751953, :y1 853.9679870605469, :x2 599.0969390869141, :y2 876.4245910644531, :width 1224, :height 1584} {:x1 137.7779083251953, :y1 877.1606140136719, :x2 600.0736846923828, :y2 899.6172180175781, :width 1224, :height 1584} {:x1 137.7779083251953, :y1 900.3532409667969, :x2 178.1894989013672, :y2 922.8098449707031, :width 1224, :height 1584}), :page 2}, :content {:text "We aim to assess advanced BSA solutions in their usage of BSCA, a highly demanding yet under-explored application field."}, :properties {:color "purple"}} {:id #uuid "6362700f-5e6a-48d0-9b0d-3af87c0a4a9e", :page 2, :position {:bounding {:x1 0, :y1 432.1017608642578, :x2 600.7756500244141, :y2 969.1950988769531, :width 1224, :height 1584}, :rects ({:x1 0, :y1 432.1017608642578, :x2 0, :y2 447.9857177734375, :width 1224, :height 1584} {:x1 137.7779083251953, :y1 923.5458679199219, :x2 600.7756500244141, :y2 946.0024719238281, :width 1224, :height 1584} {:x1 137.7779083251953, :y1 946.7384948730469, :x2 285.4486389160156, :y2 969.1950988769531, :width 1224, :height 1584}), :page 2}, :content {:text "We conduct the first comprehensive study in bridging BSA solutions to BSCA"}, :properties {:color "purple"}} {:id #uuid "6362702b-57c3-4781-bd4f-f65dbb18d4d9", :page 2, :position {:bounding {:x1 0, :y1 528.1243896484375, :x2 602.3156890869141, :y2 1154.7361145019531, :width 1224, :height 1584}, :rects ({:x1 0, :y1 528.1243896484375, :x2 0, :y2 544.0083312988281, :width 1224, :height 1584} {:x1 0, :y1 544.1281433105469, :x2 0, :y2 560.0121154785156, :width 1224, :height 1584} {:x1 0, :y1 560.1319274902344, :x2 0, :y2 576.015869140625, :width 1224, :height 1584} {:x1 363.0081481933594, :y1 1062.7016296386719, :x2 600.0737915039062, :y2 1085.1582336425781, :width 1224, :height 1584} {:x1 137.7779083251953, :y1 1085.8942565917969, :x2 600.0757598876953, :y2 1108.3508605957031, :width 1224, :height 1584} {:x1 137.7779083251953, :y1 1109.0868835449219, :x2 599.0378570556641, :y2 1131.5434875488281, :width 1224, :height 1584} {:x1 137.7779083251953, :y1 1132.2795104980469, :x2 602.3156890869141, :y2 1154.7361145019531, :width 1224, :height 1584}), :page 2}, :content {:text "we design three enhancement strategies, where each of them (and their combination) can significantly enhance the effectiveness of BSA solutions in BSCA, outperforming the commercial BSCA software."}, :properties {:color "purple"}} {:id #uuid "6362705c-d05f-4d67-af6a-d0ceb83c69b3", :page 2, :position {:bounding {:x1 120.7466812133789, :y1 1246.531005859375, :x2 433.1447219848633, :y2 1268.9876098632812, :width 1224, :height 1584}, :rects ({:x1 120.7466812133789, :y1 1246.531005859375, :x2 433.1447219848633, :y2 1268.9876098632812, :width 1224, :height 1584}), :page 2}, :content {:text "Software Composition Analysis (SCA)"}, :properties {:color "green"}} {:id #uuid "636270d2-a302-4eb2-8c7f-2cac399441f0", :page 2, :position {:bounding {:x1 0, :y1 146.25904615968466, :x2 1126.085205078125, :y2 816.0723853930831, :width 1224, :height 1584}, :rects ({:x1 808.9558715820312, :y1 146.25904615968466, :x2 1126.085205078125, :y2 168.71566542237997, :width 1224, :height 1584} {:x1 623.9501342773438, :y1 169.45167311280966, :x2 1011.0971069335938, :y2 191.90829237550497, :width 1224, :height 1584} {:x1 0, :y1 800.1884742602706, :x2 0, :y2 816.0723853930831, :width 1224, :height 1584}), :page 2}, :content {:text "developers can address security risks from known vulnerabilities and license issues"}, :properties {:color "green"}} {:id #uuid "63627110-f7e5-428f-8622-18063c812521", :page 2, :position {:bounding {:x1 788.8272094726562, :y1 262.2221961840987, :x2 879.9774780273438, :y2 284.67880018800497, :width 1224, :height 1584}, :rects ({:x1 788.8272094726562, :y1 262.2221961840987, :x2 879.9774780273438, :y2 284.67880018800497, :width 1224, :height 1584}), :page 2}, :content {:text "uncovered"}, :properties {:color "red"}} {:id #uuid "63627131-f61c-457a-a71d-0ed14c5b43d2", :page 2, :position {:bounding {:x1 718.48046875, :y1 475.02096327394247, :x2 977.6865234375, :y2 497.47759779542685, :width 1224, :height 1584}, :rects ({:x1 718.48046875, :y1 475.02096327394247, :x2 977.6865234375, :y2 497.47759779542685, :width 1224, :height 1584}), :page 2}, :content {:text "inary executables (i.e., BSCA"}, :properties {:color "green"}} {:id #uuid "63627164-d2fa-4229-9846-75f75668e2a2", :page 2, :position {:bounding {:x1 623.9501342773438, :y1 550.3157196044922, :x2 844.7698364257812, :y2 572.7723236083984, :width 1224, :height 1584}, :rects ({:x1 623.9501342773438, :y1 550.3157196044922, :x2 844.7698364257812, :y2 572.7723236083984, :width 1224, :height 1584}), :page 2}, :content {:text "① Component Dissection."}, :properties {:color "green"}} {:id #uuid "63627167-8a28-4c2c-a405-c2f93324124d", :page 2, :position {:bounding {:x1 623.9501342773438, :y1 855.8935394287109, :x2 818.1405639648438, :y2 878.3502044677734, :width 1224, :height 1584}, :rects ({:x1 623.9501342773438, :y1 855.8935394287109, :x2 818.1405639648438, :y2 878.3502044677734, :width 1224, :height 1584}), :page 2}, :content {:text "② Component Search."}, :properties {:color "green"}} {:id #uuid "6362717a-fd45-4734-82f6-da677d33ce8d", :page 2, :position {:bounding {:x1 0, :y1 947.0123138427734, :x2 1126.778564453125, :y2 1360.2005462646484, :width 1224, :height 1584}, :rects ({:x1 852.9990234375, :y1 947.0123138427734, :x2 1126.778564453125, :y2 969.4689788818359, :width 1224, :height 1584} {:x1 623.9501342773438, :y1 970.2050018310547, :x2 866.2489013671875, :y2 992.6616058349609, :width 1224, :height 1584} {:x1 868.36279296875, :y1 978.6347503662109, :x2 886.1966552734375, :y2 993.9709930419922, :width 1224, :height 1584} {:x1 0, :y1 1344.316635131836, :x2 0, :y2 1360.2005462646484, :width 1224, :height 1584}), :page 2}, :content {:text "we need to decide the similarity between c and records in Doss"}, :properties {:color "purple"}} {:id #uuid "6362718f-9831-4de6-8ba4-46809a7c8b2c", :page 2, :position {:bounding {:x1 0, :y1 1062.9755096435547, :x2 1126.090087890625, :y2 1456.223129272461, :width 1224, :height 1584}, :rects ({:x1 694.0628662109375, :y1 1062.9755096435547, :x2 1126.090087890625, :y2 1085.432113647461, :width 1224, :height 1584} {:x1 623.9501342773438, :y1 1086.1681365966797, :x2 684.9629516601562, :y2 1108.624740600586, :width 1224, :height 1584} {:x1 697.1481323242188, :y1 1086.1681365966797, :x2 730.3709716796875, :y2 1108.624740600586, :width 1224, :height 1584} {:x1 758.2876586914062, :y1 1086.1681365966797, :x2 1126.08642578125, :y2 1108.624740600586, :width 1224, :height 1584} {:x1 684.9613037109375, :y1 1094.597885131836, :x2 697.1600952148438, :y2 1109.9341278076172, :width 1224, :height 1584} {:x1 732.4848022460938, :y1 1094.597885131836, :x2 758.3004760742188, :y2 1109.9341278076172, :width 1224, :height 1584} {:x1 623.9501342773438, :y1 1109.3693084716797, :x2 963.069580078125, :y2 1131.825912475586, :width 1224, :height 1584} {:x1 0, :y1 1424.335433959961, :x2 0, :y2 1440.219467163086, :width 1224, :height 1584} {:x1 0, :y1 1440.3392181396484, :x2 0, :y2 1456.223129272461, :width 1224, :height 1584}), :page 2}, :content {:text "A component c, however, should not be matched to any ossi ∈ Doss if it is a user-written code; user-written code is referred to as “custom code” in Fig. 1."}, :properties {:color "purple"}} {:id #uuid "63627196-cd1c-4a2b-ad71-132ab73a5ffd", :page 2, :position {:bounding {:x1 623.9501342773438, :y1 1138.2702331542969, :x2 958.3947143554688, :y2 1160.7268371582031, :width 1224, :height 1584}, :rects ({:x1 623.9501342773438, :y1 1138.2702331542969, :x2 958.3947143554688, :y2 1160.7268371582031, :width 1224, :height 1584}), :page 2}, :content {:text "③ Valuable Information Identification. "}, :properties {:color "green"}} {:id #uuid "636271d1-7f3f-4935-89b8-c167197e4d14", :page 3, :position {:bounding {:x1 0, :y1 16.0037841796875, :x2 600.0514602661133, :y2 191.90829467773438, :width 1224, :height 1584}, :rects ({:x1 0, :y1 16.0037841796875, :x2 0, :y2 31.887725830078125, :width 1224, :height 1584} {:x1 0, :y1 32.007537841796875, :x2 0, :y2 47.891510009765625, :width 1224, :height 1584} {:x1 570.270751953125, :y1 123.06643676757812, :x2 600.0504150390625, :y2 145.52304077148438, :width 1224, :height 1584} {:x1 97.92252349853516, :y1 146.25906372070312, :x2 600.0514602661133, :y2 168.71566772460938, :width 1224, :height 1584} {:x1 97.92252349853516, :y1 169.45169067382812, :x2 279.6502151489258, :y2 191.90829467773438, :width 1224, :height 1584}), :page 3}, :content {:text " the mapping rules are often assumed to be available in a “valuable information database”"}, :properties {:color "purple"}} {:id #uuid "636271d4-9a00-47e5-a3c1-5e61d3f07448", :page 3, :position {:bounding {:x1 117.84593963623047, :y1 204.73696899414062, :x2 264.9062194824219, :y2 227.19363403320312, :width 1224, :height 1584}, :rects ({:x1 117.84593963623047, :y1 204.73696899414062, :x2 264.9062194824219, :y2 227.19363403320312, :width 1224, :height 1584}), :page 3}, :content {:text "2) SCA metrics: "}, :properties {:color "blue"}} {:id #uuid "636271e2-35d3-4164-8683-854daf41e7b4", :page 2, :position {:bounding {:x1 117.84593963623047, :y1 1275.7828369140625, :x2 263.59459686279297, :y2 1298.2394409179688, :width 1224, :height 1584}, :rects ({:x1 117.84593963623047, :y1 1275.7828369140625, :x2 263.59459686279297, :y2 1298.2394409179688, :width 1224, :height 1584}), :page 2}, :content {:text "1) SCA Overview:"}, :properties {:color "blue"}} {:id #uuid "6362720c-e7cd-4749-b499-bdb465e55f6a", :page 3, :position {:bounding {:x1 0, :y1 256.060302734375, :x2 600.055908203125, :y2 481.45672607421875, :width 1224, :height 1584}, :rects ({:x1 0, :y1 256.060302734375, :x2 0, :y2 271.9442443847656, :width 1224, :height 1584} {:x1 276.3233642578125, :y1 435.80743408203125, :x2 600.055908203125, :y2 458.26409912109375, :width 1224, :height 1584} {:x1 113.20741271972656, :y1 457.21142578125, :x2 128.6516571044922, :y2 472.54766845703125, :width 1224, :height 1584} {:x1 97.92252349853516, :y1 459.00006103515625, :x2 112.30879974365234, :y2 481.45672607421875, :width 1224, :height 1584} {:x1 128.63778686523438, :y1 459.00006103515625, :x2 541.0214233398438, :y2 481.45672607421875, :width 1224, :height 1584}), :page 3}, :content {:text "we need to prepare a ground-truth dataset R∗ from input software to benchmark SCA techniques."}, :properties {:color "green"}} {:id #uuid "63627249-50ea-4133-8ebb-caec8f275abd", :page 3, :position {:bounding {:x1 0, :y1 400.09423828125, :x2 600.4061279296875, :y2 759.7767944335938, :width 1224, :height 1584}, :rects ({:x1 0, :y1 400.09423828125, :x2 0, :y2 415.9781494140625, :width 1224, :height 1584} {:x1 0, :y1 416.0980224609375, :x2 0, :y2 431.98193359375, :width 1224, :height 1584} {:x1 0, :y1 432.10174560546875, :x2 0, :y2 447.9857177734375, :width 1224, :height 1584} {:x1 0, :y1 448.10552978515625, :x2 0, :y2 463.989501953125, :width 1224, :height 1584} {:x1 381.4323425292969, :y1 644.5496826171875, :x2 600.4061279296875, :y2 667.0062866210938, :width 1224, :height 1584} {:x1 97.92252349853516, :y1 667.7423095703125, :x2 600.0597610473633, :y2 690.1989135742188, :width 1224, :height 1584} {:x1 97.92252349853516, :y1 690.9349365234375, :x2 600.0600051879883, :y2 713.3915405273438, :width 1224, :height 1584} {:x1 97.92252349853516, :y1 714.1275634765625, :x2 600.405891418457, :y2 736.5841674804688, :width 1224, :height 1584} {:x1 97.92252349853516, :y1 737.3201904296875, :x2 256.5782241821289, :y2 759.7767944335938, :width 1224, :height 1584}), :page 3}, :content {:text " it becomes much harder for executable files compiled from C/C++ programs, where most meta information is absent. In fact, one of our contributions in this work is to build a comprehensive real-world dataset for BSCA benchmark; "}, :properties {:color "purple"}} {:id #uuid "63627285-44e3-47fd-a84a-50c53e204a6b", :page 3, :position {:bounding {:x1 0, :y1 704.1658325195312, :x2 600.0462036132812, :y2 1182.2763061523438, :width 1224, :height 1584}, :rects ({:x1 0, :y1 704.1658325195312, :x2 0, :y2 720.0497894287109, :width 1224, :height 1584} {:x1 0, :y1 720.1696014404297, :x2 0, :y2 736.0535583496094, :width 1224, :height 1584} {:x1 370.316162109375, :y1 1113.4343872070312, :x2 599.0535888671875, :y2 1135.8910522460938, :width 1224, :height 1584} {:x1 97.92252349853516, :y1 1136.6184692382812, :x2 600.0462036132812, :y2 1159.0751342773438, :width 1224, :height 1584} {:x1 97.42615509033203, :y1 1159.8196411132812, :x2 494.30274200439453, :y2 1182.2763061523438, :width 1224, :height 1584}), :page 3}, :content {:text "reverse engineering Android apps is deemed as much simpler comparing with decompiling x86 executables compiled from C/C++ code. "}, :properties {:color "green"}} {:id #uuid "6362728d-64e4-4137-837c-8ebb55ac28e8", :page 3, :position {:bounding {:x1 0, :y1 752.1771545410156, :x2 597.7455444335938, :y2 1228.6615600585938, :width 1224, :height 1584}, :rects ({:x1 0, :y1 752.1771545410156, :x2 0, :y2 768.0610961914062, :width 1224, :height 1584} {:x1 103.7391357421875, :y1 1183.0122680664062, :x2 597.7455444335938, :y2 1205.4689331054688, :width 1224, :height 1584} {:x1 97.20364379882812, :y1 1206.2048950195312, :x2 236.29214477539062, :y2 1228.6615600585938, :width 1224, :height 1584}), :page 3}, :content {:text "he available information in launching SCA for Android APKs is richer. "}, :properties {:color "green"}} {:id #uuid "636272a4-f642-488a-a357-9201eb25f73a", :page 3, :position {:bounding {:x1 0, :y1 832.1959838867188, :x2 603.3745727539062, :y2 1391.0099487304688, :width 1224, :height 1584}, :rects ({:x1 0, :y1 832.1959838867188, :x2 0, :y2 848.0799255371094, :width 1224, :height 1584} {:x1 0, :y1 848.1997680664062, :x2 0, :y2 864.0837097167969, :width 1224, :height 1584} {:x1 0, :y1 864.2035217285156, :x2 0, :y2 880.0874633789062, :width 1224, :height 1584} {:x1 541.9209594726562, :y1 1298.9754638671875, :x2 603.3745727539062, :y2 1321.4320678710938, :width 1224, :height 1584} {:x1 97.92252349853516, :y1 1322.1680908203125, :x2 600.0593948364258, :y2 1344.6246948242188, :width 1224, :height 1584} {:x1 97.92252349853516, :y1 1345.3607177734375, :x2 600.0576858520508, :y2 1367.8173217773438, :width 1224, :height 1584} {:x1 97.92252349853516, :y1 1368.5533447265625, :x2 331.2954788208008, :y2 1391.0099487304688, :width 1224, :height 1584}), :page 3}, :content {:text "Decompiling C/C++ executable is much harder, and recovering those high-level information (e.g., class inheritance dependencies) is not well addressed yet [64]. "}, :properties {:color "green"}} {:id #uuid "636272c4-f501-4c90-a143-f726c78eed5f", :page 3, :position {:bounding {:x1 0, :y1 177.86434936523438, :x2 1125.74853515625, :y2 1008.1176147460938, :width 1224, :height 1584}, :rects ({:x1 1084.6103515625, :y1 177.86434936523438, :x2 1125.668212890625, :y2 200.32098388671875, :width 1224, :height 1584} {:x1 623.9501342773438, :y1 201.05697631835938, :x2 1125.74853515625, :y2 223.51361083984375, :width 1224, :height 1584} {:x1 623.9501342773438, :y1 224.24960327148438, :x2 791.8720703125, :y2 246.70623779296875, :width 1224, :height 1584} {:x1 0, :y1 976.2299194335938, :x2 0, :y2 992.1138305664062, :width 1224, :height 1584} {:x1 0, :y1 992.2337036132812, :x2 0, :y2 1008.1176147460938, :width 1224, :height 1584}), :page 3}, :content {:text "BSA decides how similar they are. The similarity is usually a score ranging from 0 to 1."}, :properties {:color "purple"}} {:id #uuid "636272ca-4811-4c8b-b2a1-7edf777e65c7", :page 3, :position {:bounding {:x1 772.2042846679688, :y1 177.86434936523438, :x2 1073.224365234375, :y2 200.32098388671875, :width 1224, :height 1584}, :rects ({:x1 772.2042846679688, :y1 177.86434936523438, :x2 1073.224365234375, :y2 200.32098388671875, :width 1224, :height 1584}), :page 3}, :content {:text "Overall, given two pieces of code"}, :properties {:color "purple"}} {:id #uuid "636272e6-03a5-4fb7-a414-2ba0b36d7122", :page 3, :position {:bounding {:x1 0, :y1 364.02154541015625, :x2 1128.5765380859375, :y2 1136.1477661132812, :width 1224, :height 1584}, :rects ({:x1 887.2401733398438, :y1 364.02154541015625, :x2 1126.0933837890625, :y2 386.47821044921875, :width 1224, :height 1584} {:x1 623.2911987304688, :y1 387.21417236328125, :x2 1128.5765380859375, :y2 409.67083740234375, :width 1224, :height 1584} {:x1 623.9501342773438, :y1 412.05853271484375, :x2 999.8591918945312, :y2 434.51513671875, :width 1224, :height 1584} {:x1 0, :y1 1104.2600708007812, :x2 0, :y2 1120.1439819335938, :width 1224, :height 1584} {:x1 0, :y1 1120.2638549804688, :x2 0, :y2 1136.1477661132812, :width 1224, :height 1584}), :page 3}, :content {:text " we can merely find six tools(i.e., BAT [43], OSSPolice [36], FIBER [79], B2SFinder [76], CodeCMR [75] and XLIR [40]) aiming at B2S."}, :properties {:color "green"}} {:id #uuid "636272ee-e2b1-4c01-88fd-4e7b7881b288", :page 3, :position {:bounding {:x1 806.9186401367188, :y1 271.2510528564453, :x2 968.3713989257812, :y2 293.7076721191406, :width 1224, :height 1584}, :rects ({:x1 806.9186401367188, :y1 271.2510528564453, :x2 968.3713989257812, :y2 293.7076721191406, :width 1224, :height 1584}), :page 3}, :content {:text "1) binary-to-binary"}, :properties {:color "blue"}} {:id #uuid "636272f2-f3bc-4239-bd15-c89b4a8b2800", :page 3, :position {:bounding {:x1 708.265625, :y1 294.4436798095703, :x2 867.378662109375, :y2 316.9003143310547, :width 1224, :height 1584}, :rects ({:x1 708.265625, :y1 294.4436798095703, :x2 867.378662109375, :y2 316.9003143310547, :width 1224, :height 1584}), :page 3}, :content {:text " 2) binary-to-source"}, :properties {:color "blue"}} {:id #uuid "6362733e-9f93-436b-93fd-683ffa272c2c", :page 3, :position {:bounding {:x1 623.2312622070312, :y1 713.1433715820312, :x2 892.3908081054688, :y2 735.5999755859375, :width 1224, :height 1584}, :rects ({:x1 623.2312622070312, :y1 713.1433715820312, :x2 892.3908081054688, :y2 735.5999755859375, :width 1224, :height 1584}), :page 3}, :content {:text "Advantages of B2S for BSCA."}, :properties {:color "blue"}} {:id #uuid "6362736b-3a5c-4db4-aaca-c79adcc712c7", :page 3, :position {:bounding {:x1 0, :y1 782.7212219238281, :x2 1126.086669921875, :y2 1456.2231750488281, :width 1224, :height 1584}, :rects ({:x1 959.7620239257812, :y1 782.7212219238281, :x2 1125.0440673828125, :y2 805.1778869628906, :width 1224, :height 1584} {:x1 623.9501342773438, :y1 805.9138488769531, :x2 1126.0770263671875, :y2 828.3705139160156, :width 1224, :height 1584} {:x1 623.9501342773438, :y1 829.1064758300781, :x2 1125.752685546875, :y2 851.5631408691406, :width 1224, :height 1584} {:x1 623.9501342773438, :y1 852.2991027832031, :x2 1126.086669921875, :y2 874.7557678222656, :width 1224, :height 1584} {:x1 623.9501342773438, :y1 875.4917297363281, :x2 753.2106323242188, :y2 897.9483947753906, :width 1224, :height 1584} {:x1 0, :y1 1392.3279113769531, :x2 0, :y2 1408.2118225097656, :width 1224, :height 1584} {:x1 0, :y1 1408.3316955566406, :x2 0, :y2 1424.2156066894531, :width 1224, :height 1584} {:x1 0, :y1 1424.3354797363281, :x2 0, :y2 1440.2193908691406, :width 1224, :height 1584} {:x1 0, :y1 1440.3392639160156, :x2 0, :y2 1456.2231750488281, :width 1224, :height 1584}), :page 3}, :content {:text "BSCA is envisioned to analyze hundreds of OSS projects with various dependencies and compilation toolchains required. Therefore, compiling all OSS projects requires enormous resources and considerable manual effort. "}, :properties {:color "purple"}} {:id #uuid "6362739d-1e52-41b0-9a25-2a1b9c35cbb7", :page 3, :position {:bounding {:x1 0, :y1 945.0696411132812, :x2 1126.081787109375, :y2 1520.23828125, :width 1224, :height 1584}, :rects ({:x1 983.8153076171875, :y1 945.0696411132812, :x2 1126.081787109375, :y2 967.5262451171875, :width 1224, :height 1584} {:x1 623.9501342773438, :y1 968.2622680664062, :x2 1007.4067993164062, :y2 990.7188720703125, :width 1224, :height 1584} {:x1 0, :y1 1504.354248046875, :x2 0, :y2 1520.23828125, :width 1224, :height 1584}), :page 3}, :content {:text "Hence, it appears a dilemma to use either B2B or B2S in BSCA"}, :properties {:color "purple"}} {:id #uuid "63627962-5888-4a42-9e69-abbc078fc211", :page 3, :position {:bounding {:x1 0, :y1 1252.5901794433594, :x2 1129.396728515625, :y2 1744.291015625, :width 1224, :height 1584}, :rects ({:x1 623.9501342773438, :y1 1252.5901794433594, :x2 1126.08984375, :y2 1275.0468139648438, :width 1224, :height 1584} {:x1 623.9501342773438, :y1 1275.7828063964844, :x2 1126.0770263671875, :y2 1298.2394409179688, :width 1224, :height 1584} {:x1 623.9501342773438, :y1 1298.9754333496094, :x2 1129.396728515625, :y2 1321.4320678710938, :width 1224, :height 1584} {:x1 623.9501342773438, :y1 1322.1680603027344, :x2 962.8270874023438, :y2 1344.6246948242188, :width 1224, :height 1584} {:x1 0, :y1 1696.3995361328125, :x2 0, :y2 1712.283447265625, :width 1224, :height 1584} {:x1 0, :y1 1712.4032592773438, :x2 0, :y2 1728.2872314453125, :width 1224, :height 1584} {:x1 0, :y1 1728.4070434570312, :x2 0, :y2 1744.291015625, :width 1224, :height 1584}), :page 3}, :content {:text "Motivation. There is a high demand of performing accurate and dependable BSCA, envisioning the practical need of analyzing closed-source software and track any (unsafe or outdated) opensource component brought into executabl"}, :properties {:color "green"}} {:id #uuid "63627979-8692-4bf9-9992-6af06fb92945", :page 4, :position {:bounding {:x1 0, :y1 32.007537841796875, :x2 587.068473815918, :y2 247.1597900390625, :width 1224, :height 1584}, :rects ({:x1 0, :y1 32.007537841796875, :x2 0, :y2 47.8914794921875, :width 1224, :height 1584} {:x1 0, :y1 48.01129150390625, :x2 0, :y2 63.895263671875, :width 1224, :height 1584} {:x1 0, :y1 64.01507568359375, :x2 0, :y2 79.89901733398438, :width 1224, :height 1584} {:x1 176.2967987060547, :y1 168.91250610351562, :x2 587.0684051513672, :y2 189.17822265625, :width 1224, :height 1584} {:x1 110.96517181396484, :y1 188.24542236328125, :x2 587.068473815918, :y2 208.5111083984375, :width 1224, :height 1584} {:x1 110.96517181396484, :y1 207.56976318359375, :x2 586.7653732299805, :y2 227.83544921875, :width 1224, :height 1584} {:x1 110.96517181396484, :y1 226.89404296875, :x2 358.0824203491211, :y2 247.1597900390625, :width 1224, :height 1584}), :page 4}, :content {:text "we believe that the academy and our community lack a systematic and in-depth understanding to calibrate the technical solution and uncover the best practical of performing BSCA. This motivates our study in this paper."}, :properties {:color "green"}} {:id #uuid "63627c1a-c4ad-4bf6-9c5b-47f1d5d57f9e", :page 4, :position {:bounding {:x1 0, :y1 256.06031227111816, :x2 600.05078125, :y2 542.5106296539307, :width 1224, :height 1584}, :rects ({:x1 0, :y1 256.06031227111816, :x2 0, :y2 271.9442539215088, :width 1224, :height 1584} {:x1 523.1948852539062, :y1 496.8613986968994, :x2 600.05078125, :y2 519.3180027008057, :width 1224, :height 1584} {:x1 97.92252349853516, :y1 520.0540256500244, :x2 577.201301574707, :y2 542.5106296539307, :width 1224, :height 1584}), :page 4}, :content {:text " assembly functions should form the “components” in an executable."}, :properties {:color "green"}} {:id #uuid "63627c28-fdf8-49e3-acd4-43717d5bda68", :page 4, :position {:bounding {:x1 144.0620574951172, :y1 569.1522312164307, :x2 378.97406005859375, :y2 591.6088352203369, :width 1224, :height 1584}, :rects ({:x1 144.0620574951172, :y1 569.1522312164307, :x2 378.97406005859375, :y2 591.6088352203369, :width 1224, :height 1584}), :page 4}, :content {:text "unctions as the components"}, :properties {:color "yellow"}} {:id #uuid "63627c9f-ab5f-458d-84aa-1233f293c510", :page 4, :position {:bounding {:x1 97.92252349853516, :y1 359.35736083984375, :x2 309.45343017578125, :y2 381.8139953613281, :width 1224, :height 1584}, :rects ({:x1 97.92252349853516, :y1 359.35736083984375, :x2 309.45343017578125, :y2 381.8139953613281, :width 1224, :height 1584}), :page 4}, :content {:text "① Component Dissection"}, :properties {:color "blue"}} {:id #uuid "63627ca2-6780-4444-b80e-12f28afec187", :page 4, :position {:bounding {:x1 97.92252349853516, :y1 851.8283996582031, :x2 354.8335189819336, :y2 874.2850646972656, :width 1224, :height 1584}, :rects ({:x1 97.92252349853516, :y1 851.8283996582031, :x2 354.8335189819336, :y2 874.2850646972656, :width 1224, :height 1584}), :page 4}, :content {:text "② Component Identification"}, :properties {:color "blue"}} {:id #uuid "63627d1c-e4b0-4b42-9320-f2a6d957bc33", :page 4, :position {:bounding {:x1 102.78356170654297, :y1 1015.238037109375, :x2 362.5409851074219, :y2 1037.6946411132812, :width 1224, :height 1584}, :rects ({:x1 102.78356170654297, :y1 1015.238037109375, :x2 362.5409851074219, :y2 1037.6946411132812, :width 1224, :height 1584}), :page 4}, :content {:text "a Clustering-based detection,"}, :properties {:color "green"}} {:id #uuid "63627d27-7585-4a78-83d2-4a8380fcf26d", :page 4, :position {:bounding {:x1 104.6150131225586, :y1 1133.9141235351562, :x2 342.8573913574219, :y2 1156.3707275390625, :width 1224, :height 1584}, :rects ({:x1 104.6150131225586, :y1 1133.9141235351562, :x2 342.8573913574219, :y2 1156.3707275390625, :width 1224, :height 1584}), :page 4}, :content {:text "b Similarity-based detection"}, :properties {:color "green"}} {:id #uuid "63627d45-e617-4450-aeeb-faf13e7e16e4", :page 4, :position {:bounding {:x1 0, :y1 848.1997680664062, :x2 598.97607421875, :y2 1414.2025756835938, :width 1224, :height 1584}, :rects ({:x1 0, :y1 848.1997680664062, :x2 0, :y2 864.0836791992188, :width 1224, :height 1584} {:x1 207.21234130859375, :y1 1368.5532836914062, :x2 598.97607421875, :y2 1391.0099487304688, :width 1224, :height 1584} {:x1 97.92252349853516, :y1 1391.7459106445312, :x2 312.5618667602539, :y2 1414.2025756835938, :width 1224, :height 1584}), :page 4}, :content {:text "de facto SCA methods are primarily based on similarity-based detections."}, :properties {:color "green"}} {:id #uuid "63627d5a-9a24-443e-a609-1b5f81224aec", :page 4, :position {:bounding {:x1 623.9501342773438, :y1 147.76528930664062, :x2 955.5758666992188, :y2 170.22189331054688, :width 1224, :height 1584}, :rects ({:x1 623.9501342773438, :y1 147.76528930664062, :x2 955.5758666992188, :y2 170.22189331054688, :width 1224, :height 1584}), :page 4}, :content {:text "③ Valuable Information Identification"}, :properties {:color "blue"}} {:id #uuid "63627dca-7da3-4692-b293-e353c51004a0", :page 4, :position {:bounding {:x1 0, :y1 904.7007751464844, :x2 1126.0865478515625, :y2 1280.1816711425781, :width 1224, :height 1584}, :rects ({:x1 1022.1787109375, :y1 904.7007751464844, :x2 1126.068359375, :y2 927.1573791503906, :width 1224, :height 1584} {:x1 623.9501342773438, :y1 927.8934020996094, :x2 1126.0865478515625, :y2 950.3500061035156, :width 1224, :height 1584} {:x1 623.9501342773438, :y1 951.0860290527344, :x2 961.24365234375, :y2 973.5426330566406, :width 1224, :height 1584} {:x1 0, :y1 1248.2939758300781, :x2 0, :y2 1264.1778869628906, :width 1224, :height 1584} {:x1 0, :y1 1264.2977600097656, :x2 0, :y2 1280.1816711425781, :width 1224, :height 1584}), :page 4}, :content {:text "whereas the component identification phase iterate over functions in the input executable and query the databas"}, :properties {:color "green"}} {:id #uuid "63627e68-12b6-456a-8350-334e6e118c26", :page 5, :position {:bounding {:x1 97.92252349853516, :y1 459.43655014038086, :x2 339.67789459228516, :y2 481.89318466186523, :width 1224, :height 1584}, :rects ({:x1 97.92252349853516, :y1 459.43655014038086, :x2 339.67789459228516, :y2 481.89318466186523, :width 1224, :height 1584}), :page 5}, :content {:text "Selection of B2B solutions"}, :properties {:color "green"}} {:id #uuid "63627ec4-67be-43d6-ad30-5d42827adbc0", :page 5, :position {:bounding {:x1 239.5687255859375, :y1 1181.4803771972656, :x2 348.94207763671875, :y2 1205.2464294433594, :width 1224, :height 1584}, :rects ({:x1 239.5687255859375, :y1 1181.4803771972656, :x2 339.6477966308594, :y2 1203.9369812011719, :width 1224, :height 1584} {:x1 339.63934326171875, :y1 1189.9101867675781, :x2 348.94207763671875, :y2 1205.2464294433594, :width 1224, :height 1584}), :page 5}, :content {:text "CommercialB"}, :properties {:color "red"}} {:id #uuid "63627eda-1065-4980-9ee8-8d660ab2ff3a", :page 5, :position {:bounding {:x1 0, :y1 912.2148742675781, :x2 600.0438842773438, :y2 1439.0469360351562, :width 1224, :height 1584}, :rects ({:x1 0, :y1 912.2148742675781, :x2 0, :y2 928.0988159179688, :width 1224, :height 1584} {:x1 517.0244140625, :y1 1393.397705078125, :x2 600.0438842773438, :y2 1415.8543090820312, :width 1224, :height 1584} {:x1 97.92252349853516, :y1 1416.59033203125, :x2 177.6283416748047, :y2 1439.0469360351562, :width 1224, :height 1584}), :page 5}, :content {:text "SAFE and PalmTree"}, :properties {:color "green"}} {:id #uuid "63627f03-310b-46fe-bc7a-4772afcefd21", :page 5, :position {:bounding {:x1 0, :y1 812.7176208496094, :x2 1126.0809326171875, :y2 1456.2231750488281, :width 1224, :height 1584}, :rects ({:x1 1031.044921875, :y1 812.7176208496094, :x2 1126.0809326171875, :y2 835.1742248535156, :width 1224, :height 1584} {:x1 623.9501342773438, :y1 835.9102478027344, :x2 1126.0780029296875, :y2 858.3668518066406, :width 1224, :height 1584} {:x1 623.9501342773438, :y1 859.1028747558594, :x2 986.024169921875, :y2 881.5594787597656, :width 1224, :height 1584} {:x1 0, :y1 1424.3354797363281, :x2 0, :y2 1440.2193908691406, :width 1224, :height 1584} {:x1 0, :y1 1440.3392639160156, :x2 0, :y2 1456.2231750488281, :width 1224, :height 1584}), :page 5}, :content {:text "redundancy elimination and code segmentation to reduce the size of the database without undermining the accuracy."}, :properties {:color "green"}} {:id #uuid "63627f13-5155-4a55-9ab6-c1b87739c4fe", :page 5, :position {:bounding {:x1 0, :y1 974.8007202148438, :x2 1126.08447265625, :y2 1552.245849609375, :width 1224, :height 1584}, :rects ({:x1 872.3602905273438, :y1 974.8007202148438, :x2 1126.08447265625, :y2 997.25732421875, :width 1224, :height 1584} {:x1 623.9501342773438, :y1 998.0018920898438, :x2 1038.93798828125, :y2 1020.45849609375, :width 1224, :height 1584} {:x1 0, :y1 1536.36181640625, :x2 0, :y2 1552.245849609375, :width 1224, :height 1584}), :page 5}, :content {:text " storing only one copy of such unchanged functions across all versions is sufficient"}, :properties {:color "green"}} {:id #uuid "63627f2f-f423-4af8-9576-fe854ccb202c", :page 5, :position {:bounding {:x1 623.9501342773438, :y1 905.2228393554688, :x2 843.6547241210938, :y2 927.679443359375, :width 1224, :height 1584}, :rects ({:x1 623.9501342773438, :y1 905.2228393554688, :x2 843.6547241210938, :y2 927.679443359375, :width 1224, :height 1584}), :page 5}, :content {:text "Redundancy Elimination"}, :properties {:color "blue"}} {:id #uuid "63627f34-30ba-4750-ad5c-6a38021011c6", :page 5, :position {:bounding {:x1 623.9501342773438, :y1 1067.314453125, :x2 789.5581665039062, :y2 1089.7711181640625, :width 1224, :height 1584}, :rects ({:x1 623.9501342773438, :y1 1067.314453125, :x2 789.5581665039062, :y2 1089.7711181640625, :width 1224, :height 1584}), :page 5}, :content {:text "Code Segmentation"}, :properties {:color "blue"}} {:id #uuid "63627f54-e4ce-4ebc-8805-ec05cbe313d8", :page 5, :position {:bounding {:x1 623.9501342773438, :y1 1345.3607177734375, :x2 848.5682373046875, :y2 1367.8173217773438, :width 1224, :height 1584}, :rects ({:x1 623.9501342773438, :y1 1345.3607177734375, :x2 848.5682373046875, :y2 1367.8173217773438, :width 1224, :height 1584}), :page 5}, :content {:text "Component Identification."}, :properties {:color "blue"}} {:id #uuid "63627ff7-8506-476d-9c03-f6d28207f5dd", :page 7, :position {:bounding {:x1 0, :y1 480.1130676269531, :x2 600.0603637695312, :y2 832.2045593261719, :width 1224, :height 1584}, :rects ({:x1 0, :y1 480.1130676269531, :x2 0, :y2 495.9970397949219, :width 1224, :height 1584} {:x1 550.9441528320312, :y1 786.5553283691406, :x2 600.0603637695312, :y2 809.0119323730469, :width 1224, :height 1584} {:x1 97.92252349853516, :y1 809.7479553222656, :x2 571.2622756958008, :y2 832.2045593261719, :width 1224, :height 1584}), :page 7}, :content {:text "When using B2S, we save the effort of compiling OSS projects."}, :properties {:color "green"}} {:id #uuid "63628073-a2b7-4ae9-9b39-69677e460626", :page 7, :position {:bounding {:x1 0, :y1 656.1545104980469, :x2 601.5544891357422, :y2 1111.9709777832031, :width 1224, :height 1584}, :rects ({:x1 0, :y1 656.1545104980469, :x2 0, :y2 672.0384826660156, :width 1224, :height 1584} {:x1 0, :y1 672.1582946777344, :x2 0, :y2 688.0422668457031, :width 1224, :height 1584} {:x1 341.03643798828125, :y1 1043.1291198730469, :x2 598.6292724609375, :y2 1065.5857238769531, :width 1224, :height 1584} {:x1 210.53086853027344, :y1 1066.3217468261719, :x2 601.5544891357422, :y2 1088.7783508300781, :width 1224, :height 1584} {:x1 97.92252349853516, :y1 1067.9734191894531, :x2 197.55657958984375, :y2 1090.4300842285156, :width 1224, :height 1584} {:x1 197.54812622070312, :y1 1074.7429504394531, :x2 206.85086059570312, :y2 1090.0791931152344, :width 1224, :height 1584} {:x1 97.92252349853516, :y1 1089.5143737792969, :x2 371.16504669189453, :y2 1111.9709777832031, :width 1224, :height 1584}), :page 7}, :content {:text "BSCA solutions (i.e., BAT and CommercialA) manifest high accuracy, with the achieved F1 scores over 0.4 across all settings"}, :properties {:color "green"}} {:id #uuid "63628120-1b3f-4bb5-91e8-1833a296edeb", :page 7, :position {:bounding {:x1 0, :y1 627.0054168701172, :x2 1126.0789794921875, :y2 1888.3248748779297, :width 1224, :height 1584}, :rects ({:x1 843.51171875, :y1 627.0054168701172, :x2 1126.0789794921875, :y2 649.4620208740234, :width 1224, :height 1584} {:x1 623.9501342773438, :y1 650.1980438232422, :x2 1126.0758056640625, :y2 672.6546478271484, :width 1224, :height 1584} {:x1 623.9501342773438, :y1 675.0424041748047, :x2 895.0809326171875, :y2 697.4990081787109, :width 1224, :height 1584} {:x1 0, :y1 1856.4371795654297, :x2 0, :y2 1872.3212127685547, :width 1224, :height 1584} {:x1 0, :y1 1872.4409637451172, :x2 0, :y2 1888.3248748779297, :width 1224, :height 1584}), :page 7}, :content {:text " By observing the missing constant−1 (i.e., 0xffffffff of Fig. 3(c)), we could treat function Unref as similar but not reused."}, :properties {:color "green"}} {:id #uuid "63628130-fc84-43c2-a89f-e597084d4cc2", :page 7, :position {:bounding {:x1 750.6897583007812, :y1 789.1484451293945, :x2 821.1334838867188, :y2 811.6050491333008, :width 1224, :height 1584}, :rects ({:x1 750.6897583007812, :y1 789.1484451293945, :x2 821.1334838867188, :y2 811.6050491333008, :width 1224, :height 1584}), :page 7}, :content {:text "Centris "}, :properties {:color "green"}} {:id #uuid "63628138-f050-4def-bee6-b27c1563520c", :page 7, :position {:bounding {:x1 761.9808959960938, :y1 858.7263259887695, :x2 801.4400634765625, :y2 881.1829299926758, :width 1224, :height 1584}, :rects ({:x1 761.9808959960938, :y1 858.7263259887695, :x2 801.4400634765625, :y2 881.1829299926758, :width 1224, :height 1584}), :page 7}, :content {:text " 1.45"}, :properties {:color "green"}} {:id #uuid "6362815c-e55c-4910-bbe0-27bfc5fdb519", :page 7, :position {:bounding {:x1 0, :y1 1044.2673416137695, :x2 1127.46240234375, :y2 2160.3889236450195, :width 1224, :height 1584}, :rects ({:x1 967.163818359375, :y1 1044.2673416137695, :x2 1123.89892578125, :y2 1066.724006652832, :width 1224, :height 1584} {:x1 623.9501342773438, :y1 1067.4599685668945, :x2 1127.46240234375, :y2 1089.916633605957, :width 1224, :height 1584} {:x1 0, :y1 2144.5051345825195, :x2 0, :y2 2160.3889236450195, :width 1224, :height 1584}), :page 7}, :content {:text "BSA solutions are designed to find similar semantics rather than reuse relations."}, :properties {:color "green"}} {:id #uuid "63628199-6ef9-4561-9363-4b3a5bd72a7f", :page 8, :position {:bounding {:x1 0, :y1 157.22206115722656, :x2 1126.0887451171875, :y2 992.1138153076172, :width 1224, :height 1584}, :rects ({:x1 1006.98095703125, :y1 157.22206115722656, :x2 1126.0887451171875, :y2 179.6786651611328, :width 1224, :height 1584} {:x1 623.9501342773438, :y1 180.41468811035156, :x2 696.53857421875, :y2 202.8712921142578, :width 1224, :height 1584} {:x1 0, :y1 976.2299041748047, :x2 0, :y2 992.1138153076172, :width 1224, :height 1584}), :page 8}, :content {:text " function-level matching"}, :properties {:color "green"}} {:id #uuid "63628218-3b82-4e56-8819-1f8409b52987", :page 8, :position {:bounding {:x1 0, :y1 413.6846160888672, :x2 1125.779541015625, :y2 1168.1553192138672, :width 1224, :height 1584}, :rects ({:x1 806.2001342773438, :y1 413.6846160888672, :x2 1125.779541015625, :y2 436.14122009277344, :width 1224, :height 1584} {:x1 623.9501342773438, :y1 436.8772430419922, :x2 1035.8355712890625, :y2 459.33384704589844, :width 1224, :height 1584} {:x1 0, :y1 1152.2714080810547, :x2 0, :y2 1168.1553192138672, :width 1224, :height 1584}), :page 8}, :content {:text "BSA tools aim at detecting the similarity between pieces of arbitrary assembly function"}, :properties {:color "yellow"}} {:id #uuid "63628244-94ec-4cdc-aba9-198bd7e3cb73", :page 8, :position {:bounding {:x1 0, :y1 529.6562843322754, :x2 1128.5809326171875, :y2 1280.1817359924316, :width 1224, :height 1584}, :rects ({:x1 793.4188232421875, :y1 529.6562843322754, :x2 1126.0823974609375, :y2 552.1128883361816, :width 1224, :height 1584} {:x1 623.9501342773438, :y1 552.8489112854004, :x2 1126.080322265625, :y2 575.3055763244629, :width 1224, :height 1584} {:x1 623.9501342773438, :y1 576.0415382385254, :x2 1128.5809326171875, :y2 598.4982032775879, :width 1224, :height 1584} {:x1 623.9501342773438, :y1 599.2341651916504, :x2 867.9025268554688, :y2 621.6908302307129, :width 1224, :height 1584} {:x1 0, :y1 1232.2902565002441, :x2 0, :y2 1248.1741676330566, :width 1224, :height 1584} {:x1 0, :y1 1248.2940406799316, :x2 0, :y2 1264.1779518127441, :width 1224, :height 1584} {:x1 0, :y1 1264.2977027893066, :x2 0, :y2 1280.1817359924316, :width 1224, :height 1584}), :page 8}, :content {:text " matching every OSS functions may not be needed. Rather, strings may offer a short-cut to match OSS projects, which often use strings to encode OSS names, vendors, and even version information."}, :properties {:color "green"}} {:id #uuid "6362824b-3f48-47e5-bcd8-76e3a4b8956c", :page 8, :position {:bounding {:x1 816.294921875, :y1 625.4136276245117, :x2 886.0166625976562, :y2 647.870231628418, :width 1224, :height 1584}, :rects ({:x1 816.294921875, :y1 625.4136276245117, :x2 886.0166625976562, :y2 647.870231628418, :width 1224, :height 1584}), :page 8}, :content {:text "IDA pro"}, :properties {:color "green"}} {:id #uuid "6362827a-3a39-4d91-beee-a7557e757fd6", :page 8, :position {:bounding {:x1 0, :y1 1275.7828369140625, :x2 1127.2900390625, :y2 1712.283447265625, :width 1224, :height 1584}, :rects ({:x1 1037.7630615234375, :y1 1275.7828369140625, :x2 1127.2900390625, :y2 1298.2394409179688, :width 1224, :height 1584} {:x1 623.9501342773438, :y1 1298.9754638671875, :x2 816.0853881835938, :y2 1321.4320678710938, :width 1224, :height 1584} {:x1 0, :y1 1696.3995361328125, :x2 0, :y2 1712.283447265625, :width 1224, :height 1584}), :page 8}, :content {:text " match(f ) has at least one element"}, :properties {:color "green"}} {:id #uuid "63628330-e831-4455-824b-7727afd3a45a", :page 9, :position {:bounding {:x1 0, :y1 1252.359130859375, :x2 1126.5889892578125, :y2 1376.204345703125, :width 1224, :height 1584}, :rects ({:x1 838.3947143554688, :y1 1252.359130859375, :x2 1125.0400390625, :y2 1274.8157653808594, :width 1224, :height 1584} {:x1 623.9501342773438, :y1 1275.5517578125, :x2 1126.5889892578125, :y2 1298.0083618164062, :width 1224, :height 1584} {:x1 623.9501342773438, :y1 1298.744384765625, :x2 1069.5689697265625, :y2 1321.2009887695312, :width 1224, :height 1584} {:x1 0, :y1 1344.316650390625, :x2 0, :y2 1360.2005615234375, :width 1224, :height 1584} {:x1 0, :y1 1360.3203735351562, :x2 0, :y2 1376.204345703125, :width 1224, :height 1584}), :page 9}, :content {:text "BSA solutions to identify functions of different versions, we rely on string-level signatures to rank the most likely version for each identified OSS project"}, :properties {:color "green"}} {:id #uuid "6362833d-0aca-48c8-9b32-6d9aa93d6288", :page 10, :position {:bounding {:x1 355.1067810058594, :y1 247.81024169921875, :x2 510.377685546875, :y2 268.07598876953125, :width 1224, :height 1584}, :rects ({:x1 355.1067810058594, :y1 247.81024169921875, :x2 510.377685546875, :y2 268.07598876953125, :width 1224, :height 1584}), :page 10}, :content {:text "string-level signature"}, :properties {:color "green"}} {:id #uuid "63628341-6221-4a48-a03f-59fac3c41e2a", :page 10, :position {:bounding {:x1 0, :y1 96.02261352539062, :x2 587.073486328125, :y2 287.40887451171875, :width 1224, :height 1584}, :rects ({:x1 0, :y1 96.02261352539062, :x2 0, :y2 111.90655517578125, :width 1224, :height 1584} {:x1 515.0436401367188, :y1 247.81024169921875, :x2 587.073486328125, :y2 268.07598876953125, :width 1224, :height 1584} {:x1 110.96517181396484, :y1 267.14312744140625, :x2 402.3745651245117, :y2 287.40887451171875, :width 1224, :height 1584}), :page 10}, :content {:text " functions with potentially high distinguishability"}, :properties {:color "green"}} {:id #uuid "63628346-2e00-484c-a5b2-c221679e02fb", :page 10, :position {:bounding {:x1 447.340087890625, :y1 267.14312744140625, :x2 585.2217407226562, :y2 287.40887451171875, :width 1224, :height 1584}, :rects ({:x1 447.340087890625, :y1 267.14312744140625, :x2 585.2217407226562, :y2 287.40887451171875, :width 1224, :height 1584}), :page 10}, :content {:text "object file layouts"}, :properties {:color "green"}} {:id #uuid "63628360-07c0-4bd8-ac80-9f6ab05992a2", :page 10, :position {:bounding {:x1 244.50741577148438, :y1 415.89261627197266, :x2 415.4460144042969, :y2 438.3492202758789, :width 1224, :height 1584}, :rects ({:x1 244.50741577148438, :y1 415.89261627197266, :x2 415.4460144042969, :y2 438.3492202758789, :width 1224, :height 1584}), :page 10}, :content {:text "signature-based SCA"}, :properties {:color "green"}} {:id #uuid "63628373-ac39-44e5-8263-41accb27d85c", :page 10, :position {:bounding {:x1 321.4316711425781, :y1 462.28641510009766, :x2 600.0647583007812, :y2 484.74304962158203, :width 1224, :height 1584}, :rects ({:x1 321.4316711425781, :y1 462.28641510009766, :x2 600.0647583007812, :y2 484.74304962158203, :width 1224, :height 1584}), :page 10}, :content {:text "unction-level granularity matching"}, :properties {:color "green"}} {:id #uuid "6362839b-041c-49eb-bff1-843a1894c897", :page 10, :position {:bounding {:x1 0, :y1 816.1922149658203, :x2 600.064338684082, :y2 1391.0099487304688, :width 1224, :height 1584}, :rects ({:x1 0, :y1 816.1922149658203, :x2 0, :y2 832.076171875, :width 1224, :height 1584} {:x1 0, :y1 832.1959838867188, :x2 0, :y2 848.0799407958984, :width 1224, :height 1584} {:x1 450.8869323730469, :y1 1322.1680908203125, :x2 600.0559692382812, :y2 1344.6246948242188, :width 1224, :height 1584} {:x1 97.92252349853516, :y1 1345.3607177734375, :x2 600.064338684082, :y2 1367.8173217773438, :width 1224, :height 1584} {:x1 97.92252349853516, :y1 1368.5533447265625, :x2 236.13977813720703, :y2 1391.0099487304688, :width 1224, :height 1584}), :page 10}, :content {:text "Although we have spent tremendous efforts on labeling the ground truth of the reuse relations, "}, :properties {:color "green"}} {:id #uuid "636283cb-ff7d-4eb6-8187-b53aa90f53ae", :page 10, :position {:bounding {:x1 623.9501342773438, :y1 513.8750457763672, :x2 945.1011352539062, :y2 536.3316497802734, :width 1224, :height 1584}, :rects ({:x1 623.9501342773438, :y1 513.8750457763672, :x2 945.1011352539062, :y2 536.3316497802734, :width 1224, :height 1584}), :page 10}, :content {:text "Binary Software Composition Analysis"}, :properties {:color "blue"}} {:id #uuid "636283e1-06c2-46ac-b965-8ca3fac83342", :page 10, :position {:bounding {:x1 0, :y1 629.8467254638672, :x2 1126.0771484375, :y2 1264.177963256836, :width 1224, :height 1584}, :rects ({:x1 831.85595703125, :y1 629.8467254638672, :x2 1126.0771484375, :y2 652.3033294677734, :width 1224, :height 1584} {:x1 623.9501342773438, :y1 653.0393524169922, :x2 1082.798095703125, :y2 675.4960174560547, :width 1224, :height 1584} {:x1 0, :y1 1248.293930053711, :x2 0, :y2 1264.177963256836, :width 1224, :height 1584}), :page 10}, :content {:text "they discard semantic knowledge and cannot work when the OSS project has few unique strings"}, :properties {:color "green"}} {:id #uuid "636283ec-de12-44aa-a6ed-c646892a9bb9", :page 10, :position {:bounding {:x1 623.9501342773438, :y1 838.5803909301758, :x2 859.4112548828125, :y2 861.036994934082, :width 1224, :height 1584}, :rects ({:x1 623.9501342773438, :y1 838.5803909301758, :x2 859.4112548828125, :y2 861.036994934082, :width 1224, :height 1584}), :page 10}, :content {:text "Binary Similarity Analysis"}, :properties {:color "blue"}} {:id #uuid "63628406-8417-428b-b2d9-a3bdfd368877", :page 10, :position {:bounding {:x1 0, :y1 1275.7828063964844, :x2 1126.08349609375, :y2 1696.2796936035156, :width 1224, :height 1584}, :rects ({:x1 779.4763793945312, :y1 1275.7828063964844, :x2 1126.08349609375, :y2 1298.2394714355469, :width 1224, :height 1584} {:x1 623.9501342773438, :y1 1298.9754333496094, :x2 989.054931640625, :y2 1321.4320983886719, :width 1224, :height 1584} {:x1 0, :y1 1680.3957824707031, :x2 0, :y2 1696.2796936035156, :width 1224, :height 1584}), :page 10}, :content {:text " BSCA, a critical application widely needed in security and software re-engineering tasks"}, :properties {:color "green"}} {:id #uuid "63628422-490c-49fb-b91d-e53699218c2e", :page 10, :position {:bounding {:x1 0, :y1 1345.3606872558594, :x2 1126.092529296875, :y2 1744.2910461425781, :width 1224, :height 1584}, :rects ({:x1 904.0125122070312, :y1 1345.3606872558594, :x2 1126.092529296875, :y2 1367.8173522949219, :width 1224, :height 1584} {:x1 623.9501342773438, :y1 1368.5533142089844, :x2 734.4068603515625, :y2 1391.0099792480469, :width 1224, :height 1584} {:x1 0, :y1 1728.4070129394531, :x2 0, :y2 1744.2910461425781, :width 1224, :height 1584}), :page 10}, :content {:text "were incapable in version identification"}, :properties {:color "yellow"}} {:id #uuid "6362842c-c66a-4391-a7aa-159b922d3e5d", :page 10, :position {:bounding {:x1 0, :y1 1368.5533447265625, :x2 1126.0926513671875, :y2 1776.298583984375, :width 1224, :height 1584}, :rects ({:x1 745.4439697265625, :y1 1368.5533447265625, :x2 1126.0926513671875, :y2 1391.0099487304688, :width 1224, :height 1584} {:x1 623.9501342773438, :y1 1391.7459716796875, :x2 1126.08740234375, :y2 1414.2025756835938, :width 1224, :height 1584} {:x1 623.9501342773438, :y1 1414.9385986328125, :x2 889.9110107421875, :y2 1437.3952026367188, :width 1224, :height 1584} {:x1 0, :y1 1744.410888671875, :x2 0, :y2 1760.2947998046875, :width 1224, :height 1584} {:x1 0, :y1 1760.41455078125, :x2 0, :y2 1776.298583984375, :width 1224, :height 1584}), :page 10}, :content {:text "We then proposed optimization tactics from three aspects, which largely improved the accuracy of OSS identification with moderate cost"}, :properties {:color "yellow"}}], :extra {:page 4}}