Abstract:With the increasing availability of the computational power and constraint solving technology, the symbolic execution technology has regained interest in recent years. However, it still suffers from state explosion and low efficiency issues due to the large number of paths that need to be analyzed and the complexity of the constraints generated. Meanwhile, most of the present symbolic execution techniques are working on the source code, but the source code of most software is hard to acquire in practice. In order to cope with these issues, this paper presents BinSE, a lightweight dynamic symbolic execution framework for analyzing x86 binary programs. The framework adapts the dynamic analysis model, which combines symbolic execution with concrete execution to simplify the complexity of the path conditions. Furthermore, the hierarchical backward program slicing and the revised irrelevant API filtration mechanisms are introduced to optimize the performance of the framework. According to the experimental results, the proposed framework is efficient and can cover almost all the effective paths of the target program. Meanwhile, it also holds a promise to provide novel solutions to a broad spectrum of security problems. To demonstrate our technique, we apply the framework to detect buffer overflow vulnerability from binary executables.

Approach of Binary Code Analysis Based on Full-System Emulation and Instruction-Flow Analysis

Method Based on Data Flow Analysis to Understanding Binary Program

Reverse Technique Of Malicious Obfuscated Binary Code Based On Control Flow Graph

Digital Forensic Analysis on Runtime Instruction Flow.

Differential analysis on dynamic binary and its application in malicious code analysis

Program Understanding Approach for Binary Code Based on Data Flow Analysis

A Program Understanding Approach for Stripped Binary Code

Semantics-based binary code automated de-obfuscation approach

Binary Code Execution Path Based on Symbolic and Actual Program Execution

Automated Binary Analysis: A Survey.

An efficient control flow security analysis approach for binary executables

Dynamic Analysis and Debugging of Binary Code for Security Applications

CP-BCS: Binary Code Summarization Guided by Control Flow Graph and Pseudo Code

Machine Learning-Based Analysis of Program Binaries: A Comprehensive Study

Control Flow Analysis Based on Intermediate Representation of Executable Code

Construction Approach for Control Flow Graph from Binaries Using Hybrid Analysis

Reverse Analysis of Software Based on IDA-Pro

Implementation of an Effective Dynamic Concolic Execution Framework for Analyzing Binary Programs.

Program Execution Tracer based on Dynamic Binary Instrumentation

A New Disassembly Approach for Binary Code Using Dynamic Multiple-Path Exploration and Static Disassembly

Dynamic Symbolic Execution Based Defect Detection System for Binary Programs