Abstract:Disassembly is the preparative and crucial phase in reverse engineering and it helps people obtain the high-level semantics of binaries. However, considerable obfuscation technologies are presented to prevent the binary from the disassembler for the benefit and safety consideration. Unfortunately, hackers also could disguise their malware with obfuscation to escape the detection. Therefore, substantial literatures are published to thwart the obfuscation. Without discussing which side is legitimate conceptually, the paper proposed a measure to improving the disassembly result especially for the obfuscated binaries. By adopting some brilliant thought from the preceding publications, the paper presented several solutions to improve the result. A novel technique of verification stack pointer which is utilized to distinguish the bounds of functions, moreover, bytes-based pattern matching assist the disassembler to construct intra-procedural control flow graph dramatically. An implementation is designed and developed with the technology and considerable evaluations were taken on it. An example was provided in the evaluation section and it turned out that our disassembler could perform effectively and accurately.

Executable Program Structural Representation Tool Based on Flow Analysis

Control Flow Analysis Based on Intermediate Representation of Executable Code

Method Based on Data Flow Analysis to Understanding Binary Program

An efficient control flow security analysis approach for binary executables

Dynamic Analysis and Debugging of Binary Code for Security Applications

Executable Based Vulnerability Detection

Towards Extracting Control Flow Abstraction with Static Disassembly for Binary Code

Structuring 2-way Branches in Binary Executables

Approach of Binary Code Analysis Based on Full-System Emulation and Instruction-Flow Analysis

Continuous Flow Analysis to Detect Security Problems

Program Execution Tracer based on Dynamic Binary Instrumentation

Program Understanding Approach for Binary Code Based on Data Flow Analysis

Vulnerability Analysis Framework for Binaries Based on Model Checking

Program Structure Parsing Model Design in Software Security Reverse Analysis

Disassembly Method Based on Control Flow Refining

An Extensible Framework for Architecture-Based Data Flow Analysis for Information Security

Automatic Exploit Generation System Based on Symbolic Execution

Control flow analysis method of PLC program

Directed Symbolic Execution for Binary Vulnerability Mining

File Parsing Vulnerability Detection with Symbolic Execution.

Hybrid Information Flow Analysis for Python Bytecode