.png){kind=icon}
返回
Using Reduced Execution Flow Graph to Identify Library Functions in Binary Code
.png){kind=icon}
PRE
AI
DOI：10.1109/TSE.2015.2470241.png)
.png){kind=icon}
原文求助.png){kind=icon}
分享.png){kind=icon}
收藏
摘要
En 中文
Discontinuity and polymorphism of a library function create two challenges for library function identification, which is a key technique in reverse engineering. A new hybrid representation of dependence graph and control flow graph called Execution Flow Graph (EFG) is introduced to describe the semantics of binary code. Library function identification turns to be a subgraph isomorphism testing problem since the EFG of a library function instance is isomorphic to the sub-EFG of this library function. Subgraph isomorphism detection is time-consuming. Thus, we introduce a new representation called Reduced Execution Flow Graph (REFG) based on EFG to speed up the isomorphism testing. We have proved that EFGs are subgraph isomorphic as long as their corresponding REFGs are subgraph isomorphic. The high efficiency of the REFG approach in subgraph isomorphism detection comes from fewer nodes and edges in REFGs and new lossless filters for excluding the unmatched subgraphs before detection. Experimental results show that precisions of both the EFG and REFG approaches are higher than the state-of-the-art tool and the REFG approach sharply decreases the processing time of the EFG approach with consistent precision and recall.
Keyword:
Reverse engineering
static analysis
inline function
library function identification
subgraph isomorphism and graph mining
AI总结
对已上传原文的论文进行重点信息的提取，主要内容包括：简要概述、研究摘要、背景介绍、关键亮点、图文解析、展望与总结。
期刊
IF:
5.6
论文数:
2.9K
被引数:
1.1W
机构
引用论文
分享收藏Late Bronze Age climate change and the destruction of the Mycenaean Palace of Nestor at Pylos青铜时代晚期的气候变化和皮洛斯内斯特迈锡尼宫的破坏.png)
PLOS ONE
OAAI
PLOS ONEIF0
OAAI分享收藏Restriction Enzyme Body Doubles and PCR Cloning: On the General Use of Type IIS Restriction Enzymes for CloningPLoS ONE
OAAI
PLoS ONEIF0
OAAI分享收藏
查看更多内容