Analysis model of binary code security flaws based on structure characteristics

Tuan XU; Lei-lei QU; Wen-chang SHI

doi:10.11959/j.issn.2096-109x.2017.00200

您当前的位置：

首页 >

文章列表页 >

Analysis model of binary code security flaws based on structure characteristics

Papers | 更新时间：2024-06-03

- Analysis model of binary code security flaws based on structure characteristics
- Chinese Journal of Network and Information Security Vol. 3, Issue 9, Pages: 31-39(2017)
- 作者机构：
- 作者简介：
- 基金信息：
- DOI：10.11959/j.issn.2096-109x.2017.00200
  CLC： TP309.5
- Online First：2017-09，
  
  Published：15 September 2017
- 稿件说明：
移动端阅览
Tuan XU, Lei-lei QU, Wen-chang SHI. Analysis model of binary code security flaws based on structure characteristics[J]. Chinese Journal of Network and Information Security, 2017, 3(9): 31-39.
DOI：

Tuan XU, Lei-lei QU, Wen-chang SHI. Analysis model of binary code security flaws based on structure characteristics[J]. Chinese Journal of Network and Information Security, 2017, 3(9): 31-39. DOI： 10.11959/j.issn.2096-109x.2017.00200.

摘要

针对现有方法检测复杂结构二进制代码安全缺陷的不足，提出新的分析模型，并给出其应用方法。首先以缺陷的源代码元素集合生成特征元素集合，抽取代码结构信息，构建分析模型。然后依据各类中间表示（IR

intermediate representation）语句的统计概率计算分析模型，查找满足特征模型的IR代码组，通过IR代码与二进制代码的转换关系，实现对二进制程序中代码安全缺陷的有效检测。分析模型可应用于二进制单线程程序和并行程序。实验结果表明，相对于现有方法，应用该分析模型能够更全面深入地检测出各类结构复杂的二进制代码安全缺陷，且准确率更高。

Abstract

Aiming at the shortcomings of the existing methods to detect the security flaws that have complex structures

a new analysis model and its application method was proposed.First

analysis models based on key information of code structures extracted from path subsets of characteristic element sets that are generated by source code element sets of code security flaws were constructed.Then the analysis model according to the statistical probability of each kind of IR statement was calculated

and the IR code group which matched the feature model was found.Finally

through the translating relation between binary codes and IR codes

various code security flaws of binary program were found out.The analysis models can be applied to both common single-process binary programs and binary parallel programs.Experimental results show that compared with the existing methods

the application of the analysis model can be more comprehensive and in-depth in detecting various types of complex binary code security flaws with higher accuracy.

关键词

Keywords

references

LANDWEHR C E , BULL A R , MCDERMOTT J P , et al . A taxonomy of computer program security flaws [J ] . Computing Surveys , 1994 , 26 ( 3 ): 211 - 254 .

WEBER S , KARGER P A , PARADKAR A . A software flaw taxonomy:aiming tools at security [C ] // The Workshop on Software Engineering for Secure Systems—Building Trustworthy Applications . 2005 : 1 - 7 .

HUI Z , HUANG S , REN Z , et al . Review of software security defects taxonomy [C ] // The 5th International Conference on Rough Set and Knowledge Technology,Lecture Notes in Computer Science . 2010 : 310 - 321 .

ZHANG B , FENG C , WU B , et al . Detecting integer overflow in windows binary executables based on symbolic execution [C ] // The 17th IEEE/ACIS International Conference on Software Engineering,Artificial Intelligence,Networking and Parallel/Distributed Computing . 2016 : 385 - 390 .

SIDIROGLOU-DOUSKOS S , LAHTINEN ERIC , RITTENHOUSE N , et al . Targeted automatic integer overflow discovery using goal-directed conditional branch enforcement [C ] // The Twentieth International Conference on Architectural Support for Programming Languages and Operating Systems . 2015 : 473 - 486 .

YADEGARI B , STEPHENS J , DEBRAY S . Analysis of exception-based control transfers [C ] // The Seventh ACM on Conference on Data and Application Security and Privacy . 2017 : 205 - 216 .

MING J , WU D , WANG J , et al . StraightTaint:decoupled offline symbolic taint analysis [C ] // The 31st IEEE/ACM International Conference on Automated Software Engineering . 2016 : 308 - 319 .

CHA S K , WOO M , BRUMLEY D . Program-adaptive mutational fuzzing [C ] // The IEEE Symposium on Security and Privacy . 2015 : 725 - 741 .

PHAM V , BÖHME M , ROYCHOUDHURY A . Model-based whitebox fuzzing for program binaries [C ] // The 31st IEEE/ACM International Conference on Automated Software Engineering . 2016 : 543 - 553 .

The valgrind developers [EB/OL ] . http://valgrind.org http://valgrind.org .

NETHERCOTE N , SEWARD J . Valgrind:a framework for heavyweight dynamic binary instrumentation [J ] . ACM SIGPLAN Notices , 2007 , 42 ( 6 ): 89 - 100 .

[EB/OL ] . https://github.com/wmkhoo/taintgrind https://github.com/wmkhoo/taintgrind .

HOLZMANN G J . The model checker SPIN [J ] . IEEE Transactions on Software Engineering , 1997 , 23 ( 5 ): 279 - 295 .

BANG K , CHOI J , YOO C . Comments on “the model checker SPIN” [J ] . IEEE Transactions on Software Engineering , 2001 , 27 ( 6 ): 573 - 576 .

BRÉMOND-GRÉGOIRE P , CHOI J , LEE I . A complete axiomatization of finite-state ACSR processes [J ] . Information and Computation , 1997 , 138 ( 2 ): 124 - 159 .

The valgrind developers [EB/OL ] . http://valgrind.org/docs/manual/hg-manual.html http://valgrind.org/docs/manual/hg-manual.html .

The valgrind developers [EB/OL ] . http://valgrind.org/docs/manual/drd-manual.html http://valgrind.org/docs/manual/drd-manual.html .

Views

3128

下载量

CSCD

Alert me when the article has been cited

提交

Tools

Publicity Resources

No data

Related Author

No data

Related Institution

No data

⁰