An abstract interpretation-based framework for control flow reconstruction from binaries

Lecture Notes in Computer Science (including subseries Lecture Notes in Artificial Intelligence and Lecture Notes in Bioinformatics)

Volumn 5403 LNCS, Issue , 2009, Pages 214-228

  Kinder, Johannes ^a   Zuleger, Florian ^a,b   Veith, Helmut ^a  

^a DARMSTADT UNIVERSITY OF TECHNOLOGY   (Germany)

^b TECHNICAL UNIVERSITY OF MUNICH   (Germany)

Author keywords

[No Author keywords available]

Indexed keywords

ABSTRACTING; CONCURRENCY CONTROL; MODEL CHECKING; PROGRAM INTERPRETERS; RESTORATION; SECURITY OF DATA;

ABSTRACT DOMAINS; ABSTRACT INTERPRETATIONS; BRANCH INSTRUCTIONS; CONTROL FLOW GRAPH (CFG); CONTROL FLOWS; DATA FLOWS; RECONSTRUCTION ALGORITHMS;

DATA FLOW ANALYSIS;

EID: 58449105414     PISSN: 03029743     EISSN: 16113349     Source Type: Book Series    
DOI: 10.1007/978-3-540-93900-9_19     Document Type: Conference Paper

References (20)

1. Theiling, H.: Extracting safe and precise control flow from binaries. In: 7th Int'l. Workshop on Real-Time Computing and Applications Symp (RTCSA 2000), pp. 23-30. IEEE Computer Society, Los Alamitos (2000)
2. Schwarz, B., Debray, S.K., Andrews, G.R.: Disassembly of executable code revisited. In: 9th Working Conf. Reverse Engineering (WCRE 2002), pp. 45-54. IEEE Computer Society, Los Alamitos (2002)
3. Balakrishnan, G., Reps, T.W.: Analyzing memory accesses in x86 executables. In: Duester- wald, E. (ed.) CC 2004. LNCS, vol. 2985, pp. 5-23. Springer, Heidelberg (2004)
4. Harris, L.C., Miller, B.P.: Practical analysis of stripped binary code. SIGARCH Comput. Archit. News 33(5), 63-68 (2005)
5. Kastner, D., Wilhelm, S.: Generic control flow reconstruction from assembly code. In: 2002 Jt. Conf. Languages, Compilers, and Tools for Embedded Systems & Software and Compilers for Embedded Systems (LCTES 2002-SCOPES 2002), pp. 46-55. ACM Press, New York (2002)
6. Kinder, J., Veith, H.: Jakstab: A static analysis platform for binaries. In: Gupta, A., Malik, S. (eds.) CAV 2008. LNCS, vol. 5123, pp. 423-427. Springer, Heidelberg (2008)
7. De Sutter, B., De Bus, B., De Bosschere, K.: Link-time binary rewriting techniques for program compaction. ACM Trans. Program. Lang. Syst. 27(5), 882-945 (2005)
8. Chang, P.P., Mahlke, S.A., Chen, W.Y., Hwu, W.W.: Profile-guided automatic inline expansion for C programs. Softw., Pract. Exper. 22(5), 349-369 (1992)
9. Nielson, F., Nielson, H.R., Hankin, C.: Principles of Program Analysis. Springer, Heidelberg (1999)
10. Tarski, A.: A lattice-theoretical fixpoint theorem and its applications. Pacific J. Math. 5(2), 285-309 (1955)
11. Cifuentes, C., Gough, K.J.: Decompilation of binary programs. Softw., Pract. Exper. 25(7), 811-829 (1995)
12. van Emmerik, M., Waddington, T: Using a decompiler for real-world source recovery. In: 11th Working Conf. Reverse Engineering (WCRE 2004), pp. 27-36. IEEE Computer Society Press, Los Alamitos (2004)
13. Chang, B., Harren, M., Necula, G.: Analysis of low-level code using cooperating decompilers. In: Yi, K. (ed.) SAS 2006. LNCS, vol. 4134, pp. 318-335. Springer, Heidelberg (2006)
14. Schwarz, B., Debray, S.K., Andrews, G.R.: PLTO: A link-time optimizer for the intel IA-32 architecture. In: Proc. Workshop on Binary Translation, WBT 2001 (2001)
15. Ferdinand, C., Heckmann, R., Langenbach, M., Martin, F., Schmidt, M., Theiling, H., Thesing, S., Wilhelm, R.: Reliable and precise WCET determination for a real-life processor. In: Henzinger, T.A., Kirsch, CM. (eds.) EMSOFT 2001. LNCS, vol. 2211, pp. 469-485. Springer, Heidelberg (2001)
16. Nethercote, N., Seward, J.: Valgrind: a framework for heavyweight dynamic binary instrumentation. In: Proc. ACM SIGPLAN 2007 Conf. Programming Language Design and Implementation (PLDI 2007), pp. 89-100. ACM Press, New York (2007)
17. Cifuentes, C., van Emmerik, M.: UQBT: Adaptive binary translation at low cost. IEEE Computer 33(3), 60-66 (2000)
18. Kinder, J., Katzenbeisser, S., Schallhart, C., Veith, H.: Detecting malicious code by model checking. In: Julisch, K., Krügel, C. (eds.) DIMVA 2005. LNCS, vol. 3548, pp. 174-187. Springer, Heidelberg (2005)
19. Christodorescu, M., Jha, S., Seshia, S.A., Song, D.X., Bryant, R.E.: Semantics-aware malware detection. In: IEEE Symp. Security and Privacy (S&P 2005), pp. 32-46. IEEE Computer Society, Los Alamitos (2005)
20. Cifuentes, C., van Emmerik, M.: Recovery of jump table case statements from binary code. Sci. Comput. Program. 40(2-3), 171-188 (2001)