arrow
返回

A Semantics-Based Approach on Binary Function Similarity Detection

delete2024-08-01
delete1
PRE
AI
张云涛 封面图
张云涛 (Yuntao Zhang)
B
Binxing Fang
Zehui Xiong 封面图
Zehui Xiong (Zehui Xiong)
Y
Yanhao Wang
Y
Yuwei Liu
C
Chao Zheng
Q
Qinnan Zhang *
DOI:10.1109/JIOT.2024.3389014delete
delete原文链接
delete原文求助
delete分享
delete收藏
摘要

摘要

En 中文
As a fundamental component of Internet of Things (IoT) devices, firmware plays an essential role. Nowadays, the development of IoT firmware relies extensively on third-party components and substantially enhances development efficiency. However, these components are not inherently secure, and their vulnerabilities can adversely affect the security of IoT firmware. Existing research adopts binary code similarity analysis to detect known vulnerabilities in firmware. However, it encounters significant challenges, primarily in extracting function features from the limited semantic information within binary code. Another challenge is the need for real-world data sets to assess the model's performance in practical scenarios, such as firmware supply chain analysis. We present a detection model named program dependence graph to vector (PDG2Vec) based on program dependence graphs (PDGs) to tackle these challenges. PDG2Vec extracts function features at the variable level on PDG and assesses function similarity by evaluating whether two functions can represent each other. We conducted evaluations using three data sets, including one we created to simulate a firmware supply chain scenario. The experimental results demonstrate that PDG2Vec exhibits resilience to cross-architecture challenges and captures more precise semantics than other approaches. Furthermore, PDG2Vec outperforms state-of-the-art tools in the supply chain analysis scenario, with a 16% higher area under the curve (AUC) value average against baseline approaches.
Keyword:
Feature extraction
Microprogramming
Semantics
Binary codes
Internet of Things
Supply chains
Vectors
Binary function similarity
binary lifting
semantic extraction
static analysis
vulnerable function search

期刊

IEEE Internet of Things Journal 封面图
IEEE Internet of Things Journal
IF:
8.9
论文数:
1.4W
被引数:
7.8W

机构

I
institute of software, cas
学者数:
445
论文数: 387
被引数: 0
B
beijing university of posts & telecommunications
学者数:
1.4W
论文数: 1.2W
被引数: 9
B
Beihang University
学者数:
5.2W
论文数: 4.1W
被引数: 37
S
singapore university of technology & design
学者数:
2.8K
论文数: 3.6K
被引数: 5
C
chinese academy of sciences
学者数:
56.7W
论文数: 45.0W
被引数: 704
学者 查看更多机构
引用论文

引用论文

Asteria-Pro: Enhancing Deep Learning-based Binary Code Similarity Detection by Incorporating Domain Knowledge
err2023-11-24
err16
errOAAI
errYang, Shouguo; Dong, Chaopeng; Xiao, Yang; Cheng, Yiran; Shi, Zhiqiang; Li, Zhi; Sun, Limin
err分享
err收藏
pointcloudset: Efficient Analysis of Large Datasets of Point Clouds Recorded Over Time
err2021-09-28
err0
errOAAI
errThomas Goelles; Birgit Schlager; Stefan Muckenhuber; Sarah Haas; Tobias Hammer
err分享
err收藏
Aurora A Protein Kinase: To the Centrosome and Beyond
err2019-01-15
err0
errOAAI
errLaura Magnaghi-Jaulin; Grégory Eot-Houllier; Emmanuel Gallaud; Régis Giet
err分享
err收藏
Lithium ion adsorption–desorption properties on spinel Li4Mn5O12 and pH-dependent ion-exchange model
err2015-03-01
err0
PREAI
errJiali Xiao; Xiaoyao Nie; Shuying Sun; Xingfu Song; Ping Li; Jianguo Yu
err分享
err收藏
Spiking Suppression Precedes Cued Attentional Enhancement of Neural Responses in Primary Visual Cortex
err2017-11-23
err0
errOAAI
errMichele A Cox; Kacie Dougherty; Geoffrey K Adams; Eric A Reavis; Jacob A Westerberg; Brandon S Moore; David A Leopold; Alexander Maier
err分享
err收藏
Editorial: Neurotransmitters and Emotions
err2020-01-29
err0
errOAAI
errFushun Wang; Jiongjiong Yang; Fang Pan; Roger C. Ho; Jason H. Huang
err分享
err收藏
Incorporation of a chiral gem-disubstituted nitrogen heterocycle yields an oxazolidinone antibiotic with reduced mitochondrial toxicity
err2019-09-01
err0
errOAAI
errAlexander W. Sun; Philip L. Bulterys; Michael D. Bartberger; Peter A. Jorth; Brendan M. O'Boyle; Scott C. Virgil; Jeff F. Miller; Brian M. Stoltz
err分享
err收藏
学者 查看更多内容