北京大学学报（自然科学版）

反编译中的复合条件分支识别算法

韦韬,毛剑,邹维   

  1. 北京大学计算机科学技术研究所，北京100871；
  • 收稿日期:2007-01-09 出版日期:2008-01-20 发布日期:2008-01-20

A Novel Compound Conditions Recognition Algorithm in Decompilation

WEI Tao，MAO Jian，ZOU Wei     

  1. Institute of Computer Science & Technology, Peking University, Beijing 100871；
  • Received:2007-01-09 Online:2008-01-20 Published:2008-01-20

PDF (翻译版)

摘要： 首次对复合条件分支编译后的结构进行形式化描述，应用图论方法提出了复合分支网络概念，并在此基础上提出了一种新的识别算法。通过理论分析并采用该算法对多个典型样本进行实验，均显示该算法与现有算法相比，识别正确性有明显改善。

关键词: 逆向工程, 信息安全, 反编译, 控制流分析, 复合条件分支

Abstract: A novel recognition algorithm is proposed. Compared with previous works, the algorithm is deterministic rather than heuristic, and it does not use complicated data structures. The new algorithm is more accurate than typical current approaches; furthermore, the new method has been applied to several real-world binaries, and experimental results validate such theoretical analysis.

Key words: reverse engineering, information security, decompilation, control flow analysis, compound condition

中图分类号: 

版权所有 © 《北京大学学报（自然科学版）》编辑部
技术支持：北京玛格泰克科技发展有限公司