通信学报 ›› 2013, Vol. 34 ›› Issue (9): 177-184.doi: 10.3969/j.issn.1000-436x.2013.09.021

• 学术通信 • 上一篇    下一篇

基于软件执行轨迹差异比对的关键函数定位技术研究

康绯1,王乾2,肖亚南1,黄荷洁1   

  1. 1 信息工程大学 数学工程与先进计算国家重点实验室,河南 郑州 450001
    2 中国北方电子设备研究所,北京 100191
  • 出版日期:2013-09-25 发布日期:2017-07-05
  • 基金资助:
    国家保密局科研基金资助项目

Research on key functions locating technique based on software execution trace difference comparison

Fei KANG1,Qian WANG2,Ya-nan XIAO1,He-jie HUANG1   

  1. 1 State Key Laboratory of Mathematical Engineering and Advanced Computing,Information Engineering University,Zhengzhou 450001,China
    2 Institute of North Electronic Equipment,Beijing 10091,China
  • Online:2013-09-25 Published:2017-07-05
  • Supported by:
    Scientific Research Project of State Secrets Bureau

摘要:

关键函数是指应用软件在某个运行阶段发挥着关键作用的核心功能函数。对软件中的关键函数进行快速定位是提高逆向分析效率的有效手段。目前,在软件逆向工程领域对关键函数进行定位大多是利用人工分析的方法。利用动态二进制插桩技术,提出了一种切实可行的基于软件执行轨迹差异的关键函数自动定位方法。当软件具有 2 类不同的输入,分别触发、不触发关键函数时,该方法能够快速、准确地识别关键函数。

关键词: 关键函数, 软件执行轨迹, 动态二进制插桩

Abstract:

Key functions are the core functions which play vital es in certain run phase of application software.The quick locating of key functions is a valid method to improve the efficiency of software reverse analysis.In the field of software reverse engineering,locating key functions is mostly based on l analysis.Dynamic binary Instrumentation (DBI) techniques were employed to present a practicabletechnique to automatically locating the key functions based on software execution trace difference.Key functions can be quickly and precisely located when key functions can be triggered or not by two different kinds of software inputs.

Key words: locating function, software execution trace, dynamic binary instrumentation

No Suggested Reading articles found!