软件安全逆向分析中程序结构解析模型设计

提出了一种基于二进制文件的程序结构解析模型。该模型通过对二进制文件反汇编,去除汇编文件中的冗余信息,对汇编文件进行静态分析,构建带有索引依赖信息的基本块,并以该基本块为基础提取二进制程序的内部控制流与函数调用关系信息,最后给出程序内部控制流图以及函数调用关系图。该模型不依赖程序的源文件,以二进制文件为分析对象,实用性和通用性比较好;实验结果表明模型对二进制程序内部结构解析具有较高的准确性。

Program structure parsing model design in software security reverse analysis

A program structure parsing model for binary file reverse analysis is presented.The model disassembles a binary file to generate a corresponding assembly file,eliminates redundant information from the assembly file,and then statically analyzes the assembly file to construct basic blocks with index-dependent information.It extracts control flow and function call information of binary file based on basic blocks,and creates control flow and function call graphs.The model does not depend on source code, but shows better practicability and generality.Our experiments demonstrate that the proposed model has a high accuracy in pars- ing program structure of binary file.