arrow
Return

BinDeep: A deep learning approach to binary code similarity detection

delete2021-04-01
delete21
PRE
AI
田
田东海 (Donghai Tian)
X
Xiaoqi Jia
R
Rui Ma *
W
Wenjing Liu
C
Changzhen Hu
DOI:10.1016/j.eswa.2020.114348delete
deleteOriginal
deleteOriginal request for help
deleteShare
deleteSave
Abstract

Abstract

En 中文
Binary code similarity detection (BCSD) plays an important role in malware analysis and vulnerability discovery. Existing methods mainly rely on the expert's knowledge for the BCSD, which may not be reliable in some cases. More importantly, the detection accuracy (or performance) of these methods are not so satisfied. To address these issues, we propose BinDeep, a deep learning approach for binary code similarity detection. This method firstly extracts the instruction sequence from the binary function and then uses the instruction embedding model to vectorize the instruction features. Next, BinDeep applies a Recurrent Neural Network (RNN) deep learning model to identify the specific types of two functions for later comparison. According to the type information, BinDeep selects the corresponding deep learning model for similarity comparison. Specifically, BinDeep uses the Siamese neural networks, which combine the LSTM and CNN to measure the similarities of two target functions. Different from the traditional deep learning model, our hybrid model takes advantage of the CNN spatial structure learning and the LSTM sequence learning. The evaluation shows that our approach can achieve good BCSD between cross-architecture, cross-compiler, cross-optimization, and cross-version binary code.
Keywords:
Binary code
Deep learning
Similarity comparison
Siamese neural network
LSTM
CNN
AI Summary

AI Summary

Key information extracted from the uploaded paper, including a brief overview, abstract, background, key highlights, visual analysis, and future outlook.

Journal

Expert Systems with Applications cover
Expert Systems with Applications
IF:
7.5
Papers:
3.0W
Citations:
10.2W

Organization

B
beijing institute of technology
Scholars:
5.5W
Papers: 4.0W
Citations: 63
C
chinese academy of sciences
Scholars:
56.7W
Papers: 45.0W
Citations: 704
Cited Papers

Cited Papers

Program Characterization Using Runtime Values and Its Application to Software Plagiarism Detection
err2015-09-01
err35
PREAI
errJhi, Yoon-Chan; Jia, Xiaoqi; Wang, Xinran; Zhu, Sencun; Liu, Peng; Wu, Dinghao
errShare
errSave
Similarity-based Android malware detection using Hamming distance of static binary features
err2020-04-01
err116
errOAAI
errTaheri, Rahim; Ghahramani, Meysam; Javidan, Reza; Shojafar, Mohammad; Pooranian, Zahra; Conti, Mauro
errShare
errSave
Safety and Efficacy of BLU-5937 in the Treatment of Refractory Chronic Cough from the Phase 2b Soothe Trial
err2022-05-24
err0
PREAI
errJ. Smith; L. Mcgarvey; S.S. Birring; A.H. Morice; M.R. Sher; P. Dicpinigaitis; M. Blaiss; S. Lanouette; L. Harvey; R. Yang; J. Shaw; M. Garin; C.M. Bonuccelli
errShare
errSave
errShare
errSave
Staged Method of Code Similarity Analysis for Firmware Vulnerability Detection
err2019-01-01
err16
errOAAI
errWang, Yisen; Shen, Jianjing; Lin, Jian; Lou, Rui
errShare
errSave
A Tough Call: Mitigating Advanced Code-Reuse Attacks at the Binary Level
err2016-05-01
err0
PREAI
errVictor van der Veen; Enes Goktas; Moritz Contag; Andre Pawoloski; Xi Chen; Sanjay Rawat; Herbert Bos; Thorsten Holz; Elias Athanasopoulos; Cristiano Giuffrida
errShare
errSave
no more