ACM SURE Workshop

The Workshop on Software Understanding and Reverse Engineering (SURE). Co-located at ACM CCS 2026 in The Hague.

[ACM SURE Workshop @sureworkshop]

We are thrilled to announce that the workshop on Software Understanding and Reverse Engineering (SURE) is back for its second iteration, co-located with ACM CCS in The Hague!

We invite the community to submit their research to SURE:
https://t.co/Nlt1lgw0UV

[ACM SURE Workshop @sureworkshop]

We thank our amazing organizers for their support. None of this would be possible without them:
https://t.co/qTD2EBBHFr

[ACM SURE Workshop @sureworkshop]

We are thrilled to announce that the workshop on Software Understanding and Reverse Engineering (SURE) is back for its second iteration, co-located with ACM CCS in The Hague!

We invite the community to submit their research to SURE:
https://t.co/Nlt1lgw0UV

[ACM SURE Workshop @sureworkshop]

Help us move the needle on securing the next generation of software. We’re looking for awesome research on decompilation, agentic AI approaches, benchmarking, and program visualization & metrics and more.

Check out the CFP: https://t.co/Nlt1lgw0UV

[ACM SURE Workshop @sureworkshop]

Reflecting on the success of our first SURE and beginning the planning for the next year!

[ACM SURE Workshop @sureworkshop]

@moyix Finally, stay in touch. We have an associated Discord (unorthodox, we know) to connect academics and practitioners: https://t.co/xPA9o2HSKw

In fact, some of the attendees this year only made it due to the outreach on Discord. Come and chat!

[ACM SURE Workshop @sureworkshop]

CCS has come to a close, and so has the first-ever SURE Workshop. We want to thank the authors, the PC, @moyix, our panel, and CCS for making SURE a success. We felt the support for this research area (the room was packed out for more than half the day).

See you all next year!

[ACM SURE Workshop @sureworkshop]

@moyix Also, go read some of the papers:
https://t.co/4e4NFH5wpv

Keep, a lookout for our executive summary of papers/discussions/conclusions at SURE 2025 for those who could not attend IRL. We will post it in the coming days.

[ACM SURE Workshop @sureworkshop]

Check out the paper:
https://t.co/fPqHtZih8F

[ACM SURE Workshop @sureworkshop]

On our last presented work at SURE, we have Noriki Sakamoto presenting "Toward Inferring Structural Semantics from Binary Code Using Graph Neural Networks"

[ACM SURE Workshop @sureworkshop]

In the special sub-area of type inferencing on binary code, Noriki's work explores the recovery of structs and how different GNN architectures may have better performance.

[ACM SURE Workshop @sureworkshop]

Check out the paper:
https://t.co/UEWwvK1bzg

[ACM SURE Workshop @sureworkshop]

We're so back, and on our last session: Applications & Future Work.
Changyu "Thomason" Zhao is presenting "LibIHT: A Hardware-Based Approach to Efficient and Evasion-Resistant Dynamic Binary Analysis".

He is presenting virtually.

[ACM SURE Workshop @sureworkshop]

Indeed, LibIHT is more robust. They achieve better results on binaries that attempt to evade their analysis.

[ACM SURE Workshop @sureworkshop]

Find the paper here:
https://t.co/8NIhOkDP1v

[ACM SURE Workshop @sureworkshop]

We're on our last talk of the session, remaining with the obfuscation topic. Dongpeng Xu is presenting "DEBRA: A Real-World Benchmark For Evaluating Deobfuscation Methods" in the place of Zheyun Feng.

[ACM SURE Workshop @sureworkshop]

Now, you got your crazy code, how do you select which functions in the code to obfuscate and evaluate on?

Functions must be "sensitive" and "central". Sensitive: has sensitive info like a uid or gid or a password. Central: many other functions should depend on it (calls).