arrow
返回

GENDA: A Graph Embedded Network Based Detection Approach on encryption algorithm of binary program

delete2022-03-01
delete2
PRE
AI
X
Xiao Li
Y
Y. N. Chang
G
Guixin Ye
X
Xiaoqing Gong *
Z
Zhanyong Tang
DOI:10.1016/j.jisa.2021.103088delete
delete原文链接
delete原文求助
delete分享
delete收藏
摘要

摘要

En 中文
The cryptographic techniques are commonly used in software protection against malicious re-engineering. How to efficiently detect encryption algorithms used in the software to determine if they meet protection requirements is an interesting and significant task. However, existing encryption algorithm detection methods suffer from a high alarm rate or low efficiency as they fail to extract the complete program structure and semantic features of the encryption algorithms. In this article, we proposed GENDA, a graph embedding network-based detection method on encrypted binary code. We first analyze the characteristics of various encryption algorithms and construct the program graph for each encryption algorithm. Then the program graph is recursively embedded into the graph neural network as a basic unit, and the vector representation of the encryption algorithm graph is obtained. Finally, the type of encryption algorithm is determined by comparing the distance between these vectors. To evaluate GENDA, we collected a number of cryptographic libraries and real application programs from the open-source software. The experimental results show that GENDA can reach over a detection success rate of 92%. We also compared GENDA to existing state-of-the-art detection methods. The comparison results show that GENDA outperforms most of the existing methods.
Keyword:
Software security
Binary code analysis
Cryptographic algorithm analysis
Deep learning

期刊

Journal of Information Security and Applications 封面图
Journal of Information Security and Applications
IF:
3.7
论文数:
2.0K
被引数:
4.9K

机构

N
northwest university xi'an
学者数:
1.8W
论文数: 1.2W
被引数: 22
引用论文

引用论文

Spiking Suppression Precedes Cued Attentional Enhancement of Neural Responses in Primary Visual Cortex
err2017-11-23
err0
errOAAI
errMichele A Cox; Kacie Dougherty; Geoffrey K Adams; Eric A Reavis; Jacob A Westerberg; Brandon S Moore; David A Leopold; Alexander Maier
err分享
err收藏
A Neural Network-Based Approach for Cryptographic Function Detection in Malware
err2020-01-01
err8
errOAAI
errJia, Li; Zhou, Anmin; Jia, Peng; Liu, Luping; Wang, Yan; Liu, Liang
err分享
err收藏
The Complete Genome Sequence of ‘Candidatus Liberibacter solanacearum’, the Bacterium Associated with Potato Zebra Chip Disease
err2011-04-28
err0
errOAAI
errHong Lin; Binghai Lou; Jonathan M. Glynn; Harshavardhan Doddapaneni; Edwin L. Civerolo; Chuanwu Chen; Yongping Duan; Lijuan Zhou; Cheryl M. Vahling
err分享
err收藏
Using the Pull-In Voltage as Voltage Reference
err2001-01-01
err0
PREAI
errE. Cretu; L. A. Rocha; R. F. Wolffenbuttel
err分享
err收藏
Combining Graph-Based Learning With Automated Data Collection for Code Vulnerability Detection基于图的学习与自动数据收集相结合的代码漏洞检测
err2021-01-01
err166
errOAAI
errWang, Huanting; Ye, Guixin; Tang, Zhanyong; Tan, Shin Hwei; Huang, Songfang; Fang, Dingyi; Feng, Yansong; Bian, Lizhong; Wang, Zheng
err分享
err收藏
没有更多内容