Abstract:Binary code similarity comparison is a methodology for identifying similar or identical code fragments in binary programs. It is indispensable in fields of software engineering and security, which has many important applications (e.g., plagiarism detection, bug detection). With the widespread of smart and Internet of Things (IoT) devices, an increasing number of programs are ported to multiple architectures (e.g., ARM, MIPS). It becomes necessary to detect similar binary code across architectures as well. The main challenge of this topic lies in the semantics-equivalent code transformation resulting from different compilation settings, code obfuscation, and varied instruction set architectures. Another challenge is the trade-off between comparison accuracy and coverage. Unfortunately, existing methods still heavily rely on semantics-less code features which are susceptible to the code transformation. Additionally, they perform the comparison merely either in a static or in a dynamic manner, which cannot achieve high accuracy and coverage simultaneously. In this paper, we propose a semantics-based hybrid method to compare binary function similarity. We execute the reference function with test cases, then emulate the execution of every target function with the runtime information migrated from the reference function. Semantic signatures are extracted during the execution as well as the emulation. Lastly, similarity scores are calculated from the signatures to measure the likeness of functions. We have implemented the method in a prototype system designated as BinMatch which performs binary code similarity comparison across architectures of x86, ARM and MIPS on the Linux platform. We evaluate BinMatch with nine real-word projects compiled with different compilation settings, on variant architectures, and with commonly-used obfuscation methods, totally performing over 100 million pairs of function comparison. The experimental results show that BinMatch is resilient to the semantics-equivalent code transformation. Besides, it not only covers all target functions for similarity comparison, but also improves the accuracy comparing to the state-of-the-art solutions.

Binary Code Similarity Detection via Graph Contrastive Learning on Intermediate Representations

BinCola: Diversity-sensitive Contrastive Learning for Binary Code Similarity Detection

SimCGE: Simple Contrastive Learning of Graph Embeddings for Cross-Version Binary Code Similarity Detection

BinDeep: A Deep Learning Approach to Binary Code Similarity Detection.

A Lightweight Cross-Version Binary Code Similarity Detection Based on Similarity and Correlation Coefficient Features

CEBin: A Cost-Effective Framework for Large-Scale Binary Code Similarity Detection

$\\alpha$ Diff: Cross-Version Binary Code Similarity Detection with DNN

FastBCSD: Fast and Efficient Neural Network for Binary Code Similarity Detection

<tex>$\alpha$</tex> Diff: Cross-Version Binary Code Similarity Detection with DNN

IoTSim: Internet of Things-Oriented Binary Code Similarity Detection with Multiple Block Relations

Semantic aware-based instruction embedding for binary code similarity detection

Hierarchical Attention Graph Embedding Networks for Binary Code Similarity against Compilation Diversity

A Semantics-Based Hybrid Approach on Binary Code Similarity Comparison

FF-BCSD: A Binary Code Similarity Detection Method Based on Feature Fusion

DeepDual-SD: Deep Dual Attribute-Aware Embedding for Binary Code Similarity Detection

BSGAT: A Graph Attention Network for Binary Code Similarity Detection.

SemDiff: Binary Similarity Detection by Diffing Key-Semantics Graphs

Binary Code Clone Detection Across Architectures and Compiling Configurations

Neural Machine Translation Inspired Binary Code Similarity Comparison beyond Function Pairs

CBSDI: Cross-Architecture Binary Code Similarity Detection Based on Index Table

Deep Learning-Based Program-Wide Binary Code Similarity for Smart Contracts