.png){kind=icon}
返回
BEDetector: A Two-Channel Encoding Method to Detect Vulnerabilities Based on Binary Similarity
.png){kind=icon}
OA
AI
DOI：10.1109/ACCESS.2021.3064687.png)
.png){kind=icon}
.png){kind=icon}
分享.png){kind=icon}
收藏
摘要
En 中文
Applying neural network technology to binary similarity detection has become a promising search topic, and vulnerability detection is an important application field of binary similarity detection. When embedding binary code into matrix by neural network, the problem of feature representation also needs to be solved in vulnerability detection. However, most of the current researches extract the syntax or structural features of binary code, and take basic block as the minimum analysis unit, which is relatively coarse. In addition, the structural features of binary functions are usually represented by the dependency graph. In the embedding process, only the neighbour information of the node can be obtained, ignoring the global information of the graph. To solve these two problems, we propose a two-channel feature extraction method to obtain semantic feature in finer granularity and represent the structural features globally instead of locally. Inspired by natural language process, we propose a contextual semantic feature extraction method to obtain different granularity features of binary functions. It takes instruction as the minimum analysis unit and obtains the semantic relationship between instructions. Meanwhile, in order to represent the structural feature of each function, we propose a neural GAE model instead of the widely used structure2vec model. In this way, we can preserve and reconstruct the control dependencies between the basic blocks in the whole graph. We have implemented a prototype system BEDetector, evaluated the effectiveness of its neural model and compared the accuracy of vulnerability function detection with state-of-the-art system. Besides, we choose the real-world firmware files as the detection target and prove that BEDetector can achieve a relatively high detection rate. BEDetector could reach a precision of 88.8%, 86.7% and 100% when ranking top-50 candidate functions in the detection of the CVE vulnerability function ssl 3_get_key_exchange, ssl 3_get_new_session_ticket and udhcp_get _option, proving the efficiency of our method.
Keyword:
Semantic analysis
binary code embedding
graph autoencoder
binary similarity detection
AI总结
对已上传原文的论文进行重点信息的提取，主要内容包括：简要概述、研究摘要、背景介绍、关键亮点、图文解析、展望与总结。
期刊
IF:
3.6
论文数:
9.8W
被引数:
29.4W
机构
引用论文
Unsupervised Dimensionality Reduction for Hyperspectral Imagery via Local Geometric Structure Feature Learning基于局部几何结构特征学习的高光谱图像无监督降维
.png){kind=icon}
PREAI
分享收藏IN VITRO TESTING OF GENTAMICIN-VANCOMYCIN LOADED BONE CEMENT TO PREVENT PROSTHETIC JOINT INFECTION
OAAI
OAAI分享收藏分享收藏Stress Corrosion Cracking in Al-Zn-Mg-Cu Aluminum Alloys in Saline EnvironmentsAl-zn-mg-cu铝合金在盐碱环境中的应力腐蚀开裂
PREAI
分享收藏
查看更多内容