Abstract:Applying neural network technology to binary similarity detection has become a promising search topic, and vulnerability detection is an important application field of binary similarity detection. When embedding binary code into matrix by neural network, the problem of feature representation also needs to be solved in vulnerability detection. However, most of the current researches extract the syntax or structural features of binary code, and take basic block as the minimum analysis unit, which is relatively coarse. In addition, the structural features of binary functions are usually represented by the dependency graph. In the embedding process, only the neighbour information of the node can be obtained, ignoring the global information of the graph. To solve these two problems, we propose a two-channel feature extraction method to obtain semantic feature in finer granularity and represent the structural features globally instead of locally. Inspired by natural language process, we propose a contextual semantic feature extraction method to obtain different granularity features of binary functions. It takes instruction as the minimum analysis unit and obtains the semantic relationship between instructions. Meanwhile, in order to represent the structural feature of each function, we propose a neural GAE model instead of the widely used structure2vec model. In this way, we can preserve and reconstruct the control dependencies between the basic blocks in the whole graph. We have implemented a prototype system BEDetector, evaluated the effectiveness of its neural model and compared the accuracy of vulnerability function detection with state-of-the-art system. Besides, we choose the real-world firmware files as the detection target and prove that BEDetector can achieve a relatively high detection rate. BEDetector could reach a precision of 88.8%, 86.7% and 100% when ranking top-50 candidate functions in the detectio- of the CVE vulnerability function $ssl3_{}get_{}key_{}exchange$ , $ssl3_{}get_{}new_{}session_{}ticket$ and ${udhcp_{}get_{}option}$ , proving the efficiency of our method.

BVDetector: A program slice-based binary code vulnerability intelligent detection system

Function-Level Vulnerability Detection Through Fusing Multi-Modal Knowledge

BinVulDet: Detecting Vulnerability in Binary Program Via Decompiled Pseudo Code and BiLSTM-attention

Research on Vulnerability Detection Techniques Based on Static Analysis and Program Slice

Ignnvd: A Novel Software Vulnerability Detection Model Based on Integrated Graph Neural Networks

BEDetector: A Two-Channel Encoding Method to Detect Vulnerabilities Based on Binary Similarity

Vulnerability Detection in C/C++ Code with Deep Learning

Deep Learning Vulnerability Detection Method Based on Optimized Inter-Procedural Semantics of Programs

UltraVCS: Ultra-fine-grained Variable-based Code Slicing for Automated Vulnerability Detection

VulCatch: Enhancing Binary Vulnerability Detection through CodeT5 Decompilation and KAN Advanced Feature Extraction

Cyber Vulnerability Intelligence for Internet of Things Binary

Deep-Learning-based Vulnerability Detection in Binary Executables

Program Slice Based Vulnerable Code Clone Detection

VulDetector: Detecting Vulnerabilities Using Weighted Feature Graph Comparison

Context and Multi-Features-Based Vulnerability Detection: A Vulnerability Detection Frame Based on Context Slicing and Multi-Features

Recurrent Semantic Learning-driven Fast Binary Vulnerability Detection in Healthcare Cyber Physical Systems

VulPin: Finer-Grained Slicing for Pinpointing Vulnerability in Binary Programs

HAN-BSVD: A Hierarchical Attention Network for Binary Software Vulnerability Detection

VDDA: An Effective Software Vulnerability Detection Model Based on Deep Learning and Attention Mechanism

A software vulnerability detection method based on deep learning with complex network analysis and subgraph partition

DeepVulSeeker: A novel vulnerability identification framework via code graph structure and pre-training mechanism