.png){kind=icon}
Return
Empirical Study of Software Composition Analysis Tools for C/C plus plus Binary Programs
.png){kind=icon}
OA
AI
DOI：10.1109/ACCESS.2023.3341224.png)
.png){kind=icon}
Original request for help.png){kind=icon}
Share.png){kind=icon}
Save
Abstract
En 中文
Software composition analysis (SCA) is essential for understanding and optimizing complex C programs, ensuring system reliability and efficiency. Analyzing programs at the binary level provides insights into behavior, performance, and security. However, comprehensive evaluations of both academic and commercialized SCA tools are lacking. To this end, this paper presents a comprehensive evaluation of software composition analysis techniques for accurately identifying components in C/C++ binary programs. The study examines different analysis techniques in terms of accuracy, performance, domain-specific capabilities, and additional abilities such as detecting security vulnerabilities and code reuse potential. The results show that SCA tools reach over 70% accuracy in detecting general libraries and the accuracy drops to less than 45% for libraries in domain-specific software. Commercialized tools exhibit better efficiency and practicalness than academic tools. The evaluation provides insights into the strengths and limitations of various approaches, offering suggestions for SCA development and the selection of the most suitable tools.
Keywords:
Binary program analysis
software composition analysis
Journal
IF:
3.6
Papers:
9.8W
Citations:
29.4W
Organization
No organization information available
Cited Papers
ShareSaveProspective clinical observational study evaluating gender-associated differences of preoperative pain intensity.png)
Medicine
OAAI
MedicineIF0
OAAIShareSaveShareSaveShareSaveShareSaveShareSave
View more