.png){kind=icon}
返回
Static Analysis of JNI Programs via Binary Decompilation
.png){kind=icon}
PRE
AI
DOI：10.1109/TSE.2023.3241639.png)
.png){kind=icon}
原文求助.png){kind=icon}
分享.png){kind=icon}
收藏
摘要
En 中文
JNI programs are widely used thanks to the combined benefits of C and Java programs. However, because understanding the interaction behaviors between two different programming languages is challenging, JNI program development is difficult to get right and vulnerable to security attacks. Thus, researchers have proposed static analysis of JNI program source code to detect bugs and security vulnerabilities in JNI programs. Unfortunately, such source code analysis is not applicable to compiled JNI programs that are not open-sourced or open-source JNI programs containing third-party binary libraries. While JN-SAF, the state-of-the-art analyzer for compiled JNI programs, can analyze binary code, it has several limitations due to its symbolic execution and summary-based bottom-up analysis. In this paper, we propose a novel approach to statically analyze compiled JNI programs without their source code using binary decompilation. Unlike JN-SAF that analyzes binaries directly, our approach decompiles binaries and analyzes JNI programs with the decompiled binaries using an existing JNI program analyzer for source code. To decompile binaries to compilable C source code with precise JNI-interoperation-related types, we improve an existing decompilation tool by leveraging the characteristics of JNI programs. Our evaluation shows that the approach is precise as almost the same as the state-of-the-art JNI program analyzer for source code, and more precise than JN-SAF.
Keyword:
Java
Codes
Source coding
Static analysis
Libraries
Computer architecture
Security
Java native interface
binary decompilation
static analysis
期刊
IF:
5.6
论文数:
2.8K
被引数:
1.1W
机构
引用论文
分享收藏Field Research Cooperative Wearable Systems: Challenges in Requirements, Design and Validation.png)
Sensors
OAAI
SensorsIF0
OAAI分享收藏
查看更多内容