Abstract:Cross-platform binary analysis requires a common representation of binaries across platforms, on which a specific analysis can be performed. Recent work proposed to learn low-dimensional, numeric vector representations (i.e., embeddings) of disassembled binary code, and perform binary analysis in the embedding space. Unfortunately, however, existing techniques fall short in that they are either (i) specific to a single platform producing embeddings not aligned across platforms, or (ii) not designed to capture the rich contextual information available in a disassembled binary. We present a novel deep learning-based method, XBA, which addresses the aforementioned problems. To this end, we first abstract binaries as typed graphs, dubbed binary disassembly graphs (BDGs), which encode control-flow and other rich contextual information of different entities found in a disassembled binary, including basic blocks, external functions called, and string literals referenced. We then formulate binary code representation learning as a graph alignment problem, i.e., finding the node correspondences between BDGs extracted from two binaries compiled for different platforms. XBA uses graph convolutional networks to learn the semantics of each node, (i) using its rich contextual information encoded in the BDG, and (ii) aligning its embeddings across platforms. Our formulation allows XBA to learn semantic alignments between two BDGs in a semi-supervised manner, requiring only a limited number of node pairs be aligned across platforms for training. Our evaluation shows that XBA can learn semantically-rich embeddings of binaries aligned across platforms without apriori platform-specific knowledge. By training our model only with 50% of the oracle alignments, XBA was able to predict, on average, 75% of the rest. Our case studies further show that the learned embeddings encode knowledge useful for cross-platform binary analysis.

A Cross-Architecture Instruction Embedding Model for Natural Language Processing-Inspired Binary Code Analysis

Multi-Level Cross-Architecture Binary Code Similarity Metric

Neural Machine Translation Inspired Binary Code Similarity Comparison beyond Function Pairs

Semantic aware-based instruction embedding for binary code similarity detection

Inter-BIN: Interaction-based Cross-architecture IoT Binary Similarity Comparison

Double-Layer Positional Encoding Embedding Method for Cross-Platform Binary Function Similarity Detection

Cross-Architecture Binary Semantics Understanding Via Similar Code Comparison.

Unsupervised Binary Code Translation with Application to Code Similarity Detection and Vulnerability Discovery

Leveraging Artificial Intelligence on Binary Code Comprehension

Improving Binary Code Similarity Transformer Models by Semantics-Driven Instruction Deemphasis.

Improving cross-platform binary analysis using representation learning via graph alignment

Cross-Platform Binary Code Homology Analysis Based on GRU Graph Embedding

Exploring GNN Based Program Embedding Technologies for Binary Related Tasks

Understanding the AI-powered Binary Code Similarity Detection

Neural Code Comprehension: A Learnable Representation of Code Semantics

Hierarchical learning of cross-language mappings through distributed vector representations for code

Investigating Neural-based Function Name Reassignment from the Perspective of Binary Code Representation

How Far Have We Gone in Binary Code Understanding Using Large Language Models

On Training a Neural Network to Explain Binaries

Machine Learning-Based Analysis of Program Binaries: A Comprehensive Study

How Far Have We Gone in Stripped Binary Code Understanding Using Large Language Models