{ "added_at": "2026-10-20", "arxiv_id": "2605.25923", "arxiv_version_reviewed": "v3", "authors": [ "Fangtian Zhong", "Zhuoyun Qian", "Yili Jiang", "Jiaqi Huang", "Yunming Pang", "Xiuzhen Cheng" ], "bibtex_url": "https://awesomerea.org/papers/citations/paper-packer-identification-semantic-validation.bib", "code_url": null, "date_basis": "First arXiv submission was 2026-05-25; reviewed v3 was revised on 2026-10-19. No formal publication was verified.", "date_basis_zh": "arXiv 首次提交为 2026-05-25；所审阅 v3 修订于 2026-10-19。未核实正式出版。", "date_precision": "day", "description_en": "Uses unpacking outcomes as reference evidence to assess packer labels, normalizes heterogeneous tool results, and evaluates complementary signature/heuristic pools with static predicates derived from unpacker implementations. It traces how identification errors affect later unpacking and malware classification.", "description_zh": "以脱壳结果作为参考证据评估壳标签，规范化不同工具的输出，并评估互补签名／启发式规则池及从脱壳器实现提取的静态判定条件；同时追踪识别错误对后续脱壳和恶意软件分类的影响。", "doi": "10.48550/arxiv.2605.25923", "entry_url": "https://awesomerea.org/papers/paper-packer-identification-semantic-validation/", "entry_url_zh": "https://awesomerea.org/zh/papers/paper-packer-identification-semantic-validation/", "evidence_urls": [ "https://arxiv.org/abs/2605.25923", "https://arxiv.org/html/2605.25923v3", "https://api.datacite.org/dois/10.48550/arxiv.2605.25923", "https://arxiv.org/pdf/2605.25923v3", "https://arxiv.org/abs/2605.25923v2" ], "first_arxiv_date": "2026-05-25", "id": "paper-packer-identification-semantic-validation", "json_url": "https://awesomerea.org/papers/paper-packer-identification-semantic-validation/record.json", "kind": "research", "markdown_url": "https://awesomerea.org/papers/paper-packer-identification-semantic-validation/index.md", "markdown_url_zh": "https://awesomerea.org/zh/papers/paper-packer-identification-semantic-validation/index.md", "metadata_notes": "October v3 while retaining the May first-submission date. Its six-author list agrees across the current abstract, versioned PDF and updated DataCite record; v2 lists seven authors and is not combined with v3. The article is CC BY-SA 4.0, which does not license malware samples or third-party tools. Reviewed sources and focused search did not establish a paper-specific public release or its license.", "metadata_notes_zh": "十月 v3，同时保留五月首投日期。当前摘要、固定版本 PDF 与已更新 DataCite 记录的六位作者名单一致；v2 列七位作者，不与 v3 混用。文章采用 CC BY-SA 4.0，不构成恶意软件样本或第三方工具的许可。所审阅来源及定向检索未确立论文专属公开发布或其许可。", "pdf_url": "https://arxiv.org/pdf/2605.25923v3", "project_url": null, "publication_date": "2026-05-25", "publication_status": "preprint", "record_type": "paper", "runtime_tested": false, "scope_limitations_en": "The corpus is approximately 160,000 Windows PE samples, split into roughly 130,000 for analysis/rule construction and 30,000 for testing. Unpacker failures or partial recovery can compromise the derived reference labels. Family-identification improvements use common pooled-rule configurations, not independently validated patches to seven separate tools. Repair evaluation excludes proprietary implementations and graph/learning-based methods. Results do not establish coverage of other executable formats, all packer families or general semantic equivalence.", "scope_limitations_zh": "语料约含 160,000 个 Windows PE 样本，其中约 130,000 个用于分析与构造规则，约 30,000 个用于测试。脱壳失败或仅部分恢复可能影响由此生成的参考标签。壳家族识别改进采用公共规则池配置，并非对七个独立工具分别验证补丁。修正评测不涵盖专有实现及基于图或学习的方法；结果不证明覆盖其他可执行格式、所有壳家族或一般语义等价。", "targets": [ "binary" ], "title": "Semantic Validation of Packer Identification Tools: Characterization, Repair, and Downstream Impact", "title_zh": "加壳识别工具的语义验证：特征分析、修正与下游影响", "url": "https://arxiv.org/abs/2605.25923", "venue": "arXiv", "verification": "source-reviewed", "verified_at": "2026-10-20", "why_fits_en": "Examines the reliability of packer identification as a prerequisite for recovering analyzable binary content; it is a foundation-tool evaluation rather than an agent benchmark.", "why_fits_zh": "评估加壳识别作为恢复可分析二进制内容的前置步骤是否可靠；它属于基础工具评估，而非智能体基准。", "year": 2026 }