A static-analysis-derived database containing 3.1 million decoded IOCTL codes from 27k signed Windows drivers, with additional reachability and call-graph data for 64-bit binaries.
Rajamani, and Abdullah Ustuner
2 Pith papers cite this work. Polarity classification is still indexing.
years
2026 2representative citing papers
Presents the Linux IOCTL Census, a source-derived database of 586 dispatch points, 1289 command codes, 3583 input sinks and 1298 permission gates extracted from the kernel, with capability-ungated surface separated and backtested on 22 CVEs.
citing papers explorer
-
The Windows IOCTL Census: A Corpus-Scale, Multi-Architecture Database of the Driver Control-Code Surface
A static-analysis-derived database containing 3.1 million decoded IOCTL codes from 27k signed Windows drivers, with additional reachability and call-graph data for 64-bit binaries.
-
The Linux IOCTL Census: A Source-Derived Database of the Linux Kernel Control-Code Surface
Presents the Linux IOCTL Census, a source-derived database of 586 dispatch points, 1289 command codes, 3583 input sinks and 1298 permission gates extracted from the kernel, with capability-ungated surface separated and backtested on 22 CVEs.