Abstract:Binary code similarity analysis is widely used in the field of vulnerability search where source code may not be available to detect whether two binary functions are similar or not. Based on deep learning and natural processing techniques, several approaches have been proposed to perform cross-platform binary code similarity analysis using control flow graphs. However, existing schemes suffer from the shortcomings of large differences in instruction syntaxes across different target platforms, inability to align control flow graph nodes, and less introduction of high-level semantics of stability, which pose challenges for identifying similar computations between binary functions of different platforms generated from the same source code. We argue that extracting stable, platform-independent semantics can improve model accuracy, and a cross-platform binary function similarity comparison model N_Match is proposed. The model elevates different platform instructions to the same semantic space to shield their underlying platform instruction differences, uses graph embedding technology to learn the stability semantics of neighbors, extracts high-level knowledge of naming function to alleviate the differences brought about by cross-platform and cross-optimization levels, and combines the stable graph structure as well as the stable, platform-independent API knowledge of naming function to represent the final semantics of functions. The experimental results show that the model accuracy of N_Match outperforms the baseline model in terms of cross-platform, cross-optimization level, and industrial scenarios. In the vulnerability search experiment, N_Match significantly improves hit@N, the mAP exceeds the current graph embedding model by 66%. In addition, we also give several interesting observations from the experiments. The code and model are publicly available at https://www.github.com/CSecurityZhongYuan/Binary-Name_Match.

jTrans: Jump-Aware Transformer for Binary Code Similarity

Jtrans: Jump-Aware Transformer for Binary Code Similarity Detection

kTrans: Knowledge-Aware Transformer for Binary Code Embedding

FastBCSD: Fast and Efficient Neural Network for Binary Code Similarity Detection

Codeformer: A GNN-Nested Transformer Model for Binary Code Similarity Detection

BinCola: Diversity-sensitive Contrastive Learning for Binary Code Similarity Detection

Binary Code Similarity Detection via Graph Contrastive Learning on Intermediate Representations

Unsupervised Binary Code Translation with Application to Code Similarity Detection and Vulnerability Discovery

<tex>$\alpha$</tex> Diff: Cross-Version Binary Code Similarity Detection with DNN

IoTSim: Internet of Things-Oriented Binary Code Similarity Detection with Multiple Block Relations

$\\alpha$ Diff: Cross-Version Binary Code Similarity Detection with DNN

CEBin: A Cost-Effective Framework for Large-Scale Binary Code Similarity Detection

Similarity-Based Source Code Vulnerability Detection Leveraging Transformer Architecture: Harnessing Cross- Attention for Hierarchical Analysis

Source Code Foundation Models are Transferable Binary Analysis Knowledge Bases

Semantic aware-based instruction embedding for binary code similarity detection

PromeTrans: Bootstrap binary functionality classification with knowledge transferred from pre-trained models

DeepDual-SD: Deep Dual Attribute-Aware Embedding for Binary Code Similarity Detection

UniBin: Assembly Semantic-enhanced Binary Vulnerability Detection without Disassembly

CodeTrans: Towards Cracking the Language of Silicon's Code Through Self-Supervised Deep Learning and High Performance Computing

Binary code similarity analysis based on naming function and common vector space

Hierarchical Attention Graph Embedding Networks for Binary Code Similarity against Compilation Diversity