Recovering C++ objects from binaries using inter-procedural data-flow analysis

Proceedings of the 3rd ACM SIGPLAN Program Protection and Reverse Engineering Workshop 2014, PPREW 2014

Volumn , Issue , 2014, Pages

  Jin, Wesley ^a   Cohen, Cory ^b   Gennari, Jeffrey ^b   Hines, Charles ^b   Chaki, Sagar ^c   Gurfinkel, Arie ^c   Havrilla, Jeffrey ^b   Narasimhan, Priya ^a  

^a CARNEGIE MELLON UNIVERSITY   (United States)

^b CERT   (United States)

^c SEI CMU and U of Hawaii   (United States)

Author keywords

[No Author keywords available]

Indexed keywords

C++ (PROGRAMMING LANGUAGE); COMPUTER SOFTWARE; DATA FLOW ANALYSIS; DATA TRANSFER; OBJECT ORIENTED PROGRAMMING; REVERSE ENGINEERING;

DATA-FLOW ANALYSIS; ENGINEERING SOFTWARE; INTER-PROCEDURAL; MALWARES; MANUAL PROCESS; OBJECT ORIENTED METHOD; OBJECTORIENTED PROGRAMMING (OOP); SHARED DATA STRUCTURE; STATIC APPROACH; SYMBOLIC EXECUTION;

MALWARE;

EID: 84893931163     PISSN: None     EISSN: None     Source Type: Conference Proceeding    
DOI: 10.1145/10.1145/2556464.2556465     Document Type: Conference Paper

References (21)

1. Aris Adamantiadis. Reversing C++ programs with IDA pro and and Hey-rays. http://blog.0xbadc0de.be/archives/67.
2. Gogul Balakrishnan and Thomas Reps. Divine: discovering variables in executables. In Proceedings of the 8th international conference on Verification, model checking, and abstract interpretation, VMCAI'07, pages 1-28, Berlin, Heidelberg, 2007. Springer-Verlag.
3. Keith D. Cooper, Timothy J. Harvey, and Ken Kennedy. Iterative data-flow analysis, revisited. Technical report, Rice University, 2004.
4. thAnnual Network and Distributed System Security Symposium, NDSS'12, http://www. internetsociety.org/static-detection-c-vtable-escape-vulnerabilitiesbinary-code, 2012.
5. Agner Fog, Technical University of Denmark. Calling conventions for different C++ compilers and operating systems. http://www.agner.org/optimize/ calling-conventions.pdf, pages 16- 17, Last Updated 04-09-2013.
6. thEuropean Conference on Software Maintenance and Reengineering (CSMR'10), IEEE, pages 240-243, 2010.
7. thWorking Conference on Reverse Engineering, WCRE'11, pages 347-356, 2011.
8. Jan Gray. C++: Under the Hood. http://www.openrce.org/articles/files/ jangrayhood.pdf, 1994.
9. S. Horwitz, T. Reps, and D. Binkley. Interprocedural Slicing Using Dependence Graphs. In Proceedings of the ACM SIGPLAN 1988 Conference on Programming Language Design and Implementation (PLDI'88), pages 35-46, 1988.
10. Harold Johnson. Data flow analysis for 'intractable' system software. In SIGPLAN Symposium on Compiler Construction, pages 109-117, 1986.
11. James C. King. Symbolic Execution and Program Testing. Communications of the ACM (CACM), 19(7), July 1976.
12. Ákos Kiss, Judit Jász, and Tibor Gyimóthy. Using dynamic information in the interprocedural static slicing of binary executables. Software Quality Control, 13(3):227-245, September 2005.
13. JongHyup Lee, Thanassis Avgerinos, and David Brumley. Tie: Principled reverse engineering of types in binary programs. In NDSS. The Internet Society, 2011.
14. Z. Lin, X. Zhang, and D. Xu. Automatic Reverse Engineering of Data Structures from Binary Execution. In Proceedings of the Network and Distributed System Security Symposium (NDSS'2010), March 2010.
15. Dan Quinlan. ROSE: Compiler support for object-oriented frameworks. In Parallel Processing Letters 10, no. 02n03, pages 215-226. 2000.
16. thACM SIGPLAN-SIGACT symposium on Principles of programming languages, POPL '99, pages 119-132, New York, NY, USA, 1999. ACM.
17. ROSE website. http://www.rosecompiler.org.
18. Paul Vincent Sabanal and Mark Vincent Yason. Reversing C++. http://www.blackhat.com/presentations/bh-dc-07/Sabanal-Yason/Paper/bh-\ dc-07-Sabanal-Yason-WP.pdf.
19. Asia Slowinska, Traian Stancescu, and Herbert Bos. Dde: dynamic data structure excavation. In Proceedings of the first ACM asia-pacific workshop on Workshop on systems, APSys '10, pages 13-18, New York, NY, USA, 2010. ACM.
20. V.K. Srinivasan and T. Reps. Software Architecture Recovery from Machine Code. Technical Report TR1781, University of Wisconsin - Madison, March 2013. http://digital.library.wisc.edu/1793/65091.
21. thWorking Conference on Reverse Engineering (WCRE '02), IEEE Computer Society, pages 65-, 2002.