基于流分析的可执行程序结构化表示工具

直接面向可执行程序进行安全漏洞分析时，首先需要得到二进制代码的中间语言表示。探讨了流分析技术在汇编代码理解中的应用，并在Linux平台上实现了一个轻量级汇编代码结构化表示工具BESTAR。该系统利用控制流和数据流分析技术识别通用控制结构，分析程序执行流，重构表达式和函数，发现数据依赖关系，将汇编代码转换成一个结构化、易理解的中间语言程序，为进一步进行安全分析打下了基础。

Executable program structural representation tool based on flow analysis

The first step of directly analyzing security vulnerabilities of an executable program is to obtain a structural intermediate representation of its binary code.This paper explores application of flow analysis in assembler understanding,and introduces a lightweight prototype of assembler structural representation tool that we implemented on Linux,named BESTAR.The system uses control flow analysis and data flow analysis techniques to identify common control structures,analyzes executive flow of a program,reconstruct expressions and functions,finds data dependency,finally transforms the assembler into a structural and easy-understanding intermediate language program and makes a good preparation for further security analysis.