SROBR: Semantic Representation of Obfuscation‐Resilient Binary Code
Open Access
- 1 January 2022
- journal article
- research article
- Published by Wiley in Wireless Communications and Mobile Computing
- Vol. 2022 (1)
Abstract
With the rapid development of information technology, the scale of software has increased exponentially. Binary code similarity detection technology plays an important role in many fields, such as detecting software plagiarism, vulnerabilities discovery, and copyright solution issues. Nevertheless, what cannot be ignored is that a variety of approaches to binary code semantic representation have been introduced recently, but few can catch up with existing code obfuscation techniques due to their maturing and extensive development. In order to solve this problem, we propose a new neural network model, named SROBR, which is a deep integration of natural language processing model and graph neural network. In SROBR, BERT is applied to capture sequence information of the binary code at the first place, and then GAT is utilized to capture the structural information. It combines natural language processing and graph neural network, which can capture the semantic information of binary programs while resisting obfuscation options in a more efficient way. Through binary code similarity detection task and obfuscated option classification task, the experimental results demonstrate that SROBR outperforms existing binary similarity detection methods in resisting obfuscation techniques.Keywords
Funding Information
- National Natural Science Foundation of China (61802435)
This publication has 19 references indexed in Scilit:
- SAFE: Self-Attentive Function Embeddings for Binary Similarity2019
- Asm2Vec: Boosting Static Representation Robustness for Binary Clone Search against Code Obfuscation and Compiler Optimization2019
- Investigating Graph Embedding Neural Networks with Unsupervised Features Extraction for Binary Analysis2019
- Neural Machine Translation Inspired Binary Code Similarity Comparison beyond Function Pairs2019
- VulSeeker: a semantic learning based vulnerability seeker for cross-platform binary2018
- FOSSILACM Transactions on Privacy and Security, 2018
- Neural Network-based Graph Embedding for Cross-Platform Binary Code Similarity Detection2017
- Scalable Graph-based Bug Search for Firmware Images2016
- Deviation-Based Obfuscation-Resilient Program Equivalence Checking With Application to Software Plagiarism DetectionIEEE Transactions on Reliability, 2016
- Obfuscator-LLVM -- Software Protection for the Masses2015