Abstract:Binary similarity detection is a critical technique that has been applied in many real-world scenarios where source code is not available, e.g., bug search, malware analysis, and code plagiarism detection. Existing works are ineffective in detecting similar binaries in cases where different compiling optimizations, compilers, source code versions, or obfuscation are deployed. We observe that all the cases do not change a binary's key code behaviors although they significantly modify its syntax and structure. With this key observation, we extract a set of key instructions from a binary to capture its key code behaviors. By detecting the similarity between two binaries' key instructions, we can address well the ineffectiveness limitation of existing works. Specifically, we translate each extracted key instruction into a self-defined key expression, generating a key-semantics graph based on the binary's control flow. Each node in the key-semantics graph denotes a key instruction, and the node attribute is the key expression. To quantify the similarity between two given key-semantics graphs, we first serialize each graph into a sequence of key expressions by topological sort. Then, we tokenize and concatenate key expressions to generate token lists. We calculate the locality-sensitive hash value for all token lists and quantify their similarity. %We implement a prototype, called SemDiff, consisting of two modules: graph generation and graph diffing. The first module generates a pair of key-semantics graphs and the second module diffs the graphs. Our evaluation results show that overall, SemDiff outperforms state-of-the-art tools when detecting the similarity of binaries generated from different optimization levels, compilers, and obfuscations. SemDiff is also effective for library version search and finding similar vulnerabilities in firmware.

SoliDiffy: AST Differencing for Solidity Smart Contracts

A Novel Refactoring and Semantic Aware Abstract Syntax Tree Differencing Tool and a Benchmark for Evaluating the Accuracy of Diff Tools

SAT-DIFF: A Tree Diffing Framework Using SAT Solving

Differential testing solidity compiler through deep contract manipulation and mutation

A Differential Testing Approach for Evaluating Abstract Syntax Tree Mapping Algorithms

Low-level Comments auto-generation for Solidity Smart Contracts

Studying differentiated code to support smart contract update

SolaSim: Clone Detection for Solana Smart Contracts Via Program Representation

Sfuzz: an Efficient Adaptive Fuzzer for Solidity Smart Contracts

SmartBugs: A Framework to Analyze Solidity Smart Contracts

EtherSolve: Computing an Accurate Control-Flow Graph from Ethereum Bytecode

Towards benchmarking of Solidity verification tools

Securing Smart Contract On The Fly

A Comparative Evaluation of Automated Analysis Tools for Solidity Smart Contracts

Solvent: liquidity verification of smart contracts

SPrune: A Code Pruning Tool for Ethereum Solidity Contract Static Analysis

DiffSharp: An AD Library for .NET Languages

MAD: Move AI Decompiler to Improve Transparency and Auditability on Non-Open-Source Blockchain Smart Contract

SemDiff: Binary Similarity Detection by Diffing Key-Semantics Graphs

Tool Demonstration: FSolidM for Designing Secure Ethereum Smart Contracts

ClDiff: generating concise linked code differences.