Reverse Analysis of Software Based on IDA-Pro

秦青文,王戟,孙旭光,梅文华
DOI: https://doi.org/10.3969/j.issn.1000-3428.2008.22.029
2008-01-01
Abstract:Binary program transformation has played an important role in reverse program analysis.This paper proposes a program transformation method.In the method,machine code is first disassembled by IDA Pro.Along with rules and optimizing strategies,the program is transformed to intermediate language.The deterministic finite automata and context-free grammars are designed to parse assembly language,and the code optimization theory is also included in dataflow analysis.The intermediate language has a good readability,generality and comprehensibility.After transformation,the code contracts dramatically.The technique described can run automatically,which effectively reduce the amount of time in solving software analysis problems and debugging executable programs.A transform instance using this technique is presented.
What problem does this paper attempt to address?