Multigranularity semantics based vulnerability search method for cross‐platform binary

Hao Liu,Huifang Ma,Yongchao Zhang

DOI: https://doi.org/10.1002/int.22436

IF: 8.993

2021-05-02

International Journal of Intelligent Systems

Abstract:Semantic learning is a common method for binary vulnerability detection, which can analyze the assembly structure of the binary code. The existing methods such as control flow graphs and labeled semantic flow graphs perform single semantic analysis to determine whether a known vulnerability is hidden in the binary function. However, challenge arises when they perform vulnerability detection cross‐platforms. In this paper, we propose a multigranularity semantic‐based vulnerability search method to deal with the challenge of cross‐platform vulnerability detection, and implement its prototype Taurus. Given the binary function to be searched and vulnerability function, Taurus first extracts their inter‐basic‐block, inter‐function, and inter‐module semantic features respectively, and then calculates the similarity distance between them at three levels. Finally, three similarity scores are combined to rank in descending order to obtain the vulnerability detection report. The performance comparison indicates that Taurus outperforms the state‐of‐the‐art approaches in terms of accuracy.