###
DOI:
计算机系统应用英文版:2012,21(8):52-56
本文二维码信息
码上扫一扫!
基于特征值的模板化库函数识别
(中国科学技术大学 计算机科学与技术学院, 合肥 230027)
Recognition of Template Library Functions Based on Features
(School of Computer Science and Technology, University of Science and Technology of China, Hefei 230027, China)
摘要
图/表
参考文献
相似文献
本文已被:浏览 1513次   下载 2548
Received:November 15, 2011    Revised:December 15, 2011
中文摘要: 逆编译是编译的逆过程,目的是将可执行的二进制机器代码变换为功能等价的高级语言代码,它在监控恶意代码,挖掘软件漏洞的工作中起着重要的作用。而在面向对象语言的逆编译过程中,模板化库函数识别的难度和复杂性非常大。通过分析现有的C++库函数识别方法,针对库函数模板识别中特征值冲突的关键问题,提出一种改进的特征值构造方法,它能够更完整的保存库函数信息,降低特征值冲突出现的概率,并通过识别部分C++标准模板库函数验证了该算法。
中文关键词: 逆编译  模板  库函数  识别
Abstract:The decompilation decode binary instructions and data into high level source code against compilation. It plays an important part in finding malware and discovering software vulnerability. But the recognition of template library functions is very difficult in decompilation of object-oriented language. This paper analyzes the existing algorithm of library function recognition and aims at the key problem of feature conflicts to introduce an improved algorithm based on feature-recognition. This algorithm can store much more library function informations to avoid feature conflicts and has been verified in some experiments about C++ STL recognition.
文章编号:     中图分类号:    文献标志码:
基金项目:
引用文本:
汪玮,陈凯明.基于特征值的模板化库函数识别.计算机系统应用,2012,21(8):52-56
WANG Wei,CHEN Kai-Ming.Recognition of Template Library Functions Based on Features.COMPUTER SYSTEMS APPLICATIONS,2012,21(8):52-56