Abstract:Software vulnerabilities are a challenge in cybersecurity. Manual security patches are often difficult and slow to be deployed, while new vulnerabilities are created. Binary code vulnerability detection is less studied and more complex compared to source code, and this has important practical implications. Deep learning has become an efficient and powerful tool in the security domain, where it provides end-to-end and accurate prediction. Modern deep learning approaches learn the program semantics through sequence and graph neural networks, using various intermediate representation of programs, such as abstract syntax trees (AST) or control flow graphs (CFG). Due to the complex nature of program execution, the output of an execution depends on the many program states and inputs. Also, a CFG generated from static analysis can be an overestimation of the true program flow. Moreover, the size of programs often does not allow a graph neural network with fixed layers to aggregate global information. To address these issues, we propose DeepEXE, an agent-based implicit neural network that mimics the execution path of a program. We use reinforcement learning to enhance the branching decision at every program state transition and create a dynamic environment to learn the dependency between a vulnerability and certain program states. An implicitly defined neural network enables nearly infinite state transitions until convergence, which captures the structural information at a higher level. The experiments are conducted on two semi-synthetic and two real-world datasets. We show that DeepEXE is an accurate and efficient method and outperforms the state-of-the-art vulnerability detection methods.

Flaw function static detection method for executable

Static Detecting Techniques of Software Security Flaws

Securing c programs by dynamic type checking

Static Information Flow Tracking Based Approach to Detect Input Validation Vulnerabilities

Control-flow Monitoring Method Based on Function Signature

An efficient control flow security analysis approach for binary executables

A Function Call Graph Extraction Method Combining Static and Dynamic Analysis

Vulnerability Analysis Framework for Binaries Based on Model Checking

A Hybrid Approach to Detecting Security Defects in Programs

A Static Method for Detection of Information Theft Malware

Application of Computer Finite Element Simulation to the Quantitative Inspection of Flaw MFL

Detect Use-after-free Vulnerabilities in Binaries

A method for hidden malcode anomaly detection using dynamic control-flow analysis

Towards Optimal Use of Exception Handling Information for Function Detection

Dynamic Symbolic Execution Method Oriented to Critical Operation

Implicit-Flow-Sensitive Method for Detection of Trojan-Spy Programs

Executable Program Structural Representation Tool Based on Flow Analysis

Dynamic Neural Control Flow Execution: An Agent-Based Deep Equilibrium Approach for Binary Vulnerability Detection

Malware Detection Based on Critical Application Programming Interface Graph

Detecting Malware Variants Via Function-Call Graph Similarity

Static Detection of Control-Flow-Related Vulnerabilities Using Graph Embedding