.png){kind=icon}
返回
SELF: A method of searching for library functions in stripped binary code
.png){kind=icon}
PRE
AI
DOI：10.1016/j.cose.2021.102473.png)
.png){kind=icon}
原文求助.png){kind=icon}
分享.png){kind=icon}
收藏
摘要
En 中文
During software development, numerous third-party library functions are often reused. Accurately recognizing library functions reused in software is of great significance for some security scenarios, such as the detection of known vulnerabilities and reverse analyses of malware. An optional method for recognizing library functions is matching the functions in the library to those in the target software. However, due to the diversity of function library versions, compilers, build options, etc., there are differences between the two corresponding functions. Recognizing library functions used in target software precisely is still a challenging task. In this paper, we propose a novel method named SELF (SEarch for Library Functions) to recognize library functions used in target software. In SELF, the function is represented with a co-occurrence matrix and encoded by a convolutional auto-encoder (CAE). Then, the similarity between two functions is detected using the generated bottleneck features. This scheme focuses on the discriminative semantic features; thus, this method can not only distinguish different functions but also tolerate the subtle differences between two pairing functions, which is specifically required for library function recognition. We collected 451 software projects, including approximately 3 million functions, to train and evaluate SELF. The experimental results show that SELF performs well in both Recall@1 and Recall@5. Especially when the library version gap is large, SELF significantly outperforms classic BINDIFF. In addition, SELF shows good computational efficiency. (c) 2021 Elsevier Ltd. All rights reserved.
Keyword:
Software reverse engineering
Binary code analysis
Library function
Semantic feature
Bigram
Co-occurrence matrix
Convolutional autoencoder
AI总结
对已上传原文的论文进行重点信息的提取，主要内容包括：简要概述、研究摘要、背景介绍、关键亮点、图文解析、展望与总结。
期刊
C
IF:
5.4
论文数:
4.6K
被引数:
1.4W
机构
查看更多机构
引用论文
分享收藏Allosteric Regulation in Phosphofructokinase from the Extreme Thermophile Thermus thermophilus.png)
Biochemistry
OAAI
BiochemistryIF0
OAAI分享收藏Semantics-Based Obfuscation-Resilient Binary Code Similarity Comparison with Applications to Software and Algorithm Plagiarism Detection基于语义的混淆-弹性二进制代码相似性比较及其在软件和算法剽窃检测中的应用OAAI
OAAI分享收藏分享收藏
没有更多内容