Skip to main navigation Skip to search Skip to main content

Array type abstraction reconstruction in binary code

  • Jinxin Ma
  • , Zhoujun Li*
  • , Chaojian Hu
  • , Junxian Zhang
  • , Tao Guo
  • *Corresponding author for this work
  • Beihang University
  • China Information Technology Security Evaluation Center

Research output: Contribution to journalArticlepeer-review

Abstract

Reconstruction of array abstractions plays a crucial role in vulnerability detection, reverse engineering and malicious code analyses. This paper presents a method for reconstructing multi-dimensional arrays. The loop semantics is extracted and transformed to the relative FOREACH formula set. Five FOREACH formula regulations are presented to calculate the dimensions, size, multi-dimension array bounds, basic element size and scale of each dimension to reconstruct the array. The results are compared to 15 programs in CoreUtils tools which are compiled by the gcc compiler. The present method can reconstruct 16.3% more files than the IDA Pro Hex-ray plugin.

Original languageEnglish
Pages (from-to)1329-1334
Number of pages6
JournalQinghua Daxue Xuebao/Journal of Tsinghua University
Volume52
Issue number10
StatePublished - Oct 2012

Keywords

  • Loop semantics
  • Multi-dimension array
  • Type reconstruction

Fingerprint

Dive into the research topics of 'Array type abstraction reconstruction in binary code'. Together they form a unique fingerprint.

Cite this