Program evolution model-based object code reverse engineering system

A technology of object code and program model, which is applied in the field of object code reverse engineering system, and can solve the problem that the reverse model cannot be correctly constructed.

Active Publication Date: 2016-10-26
EAST CHINA NORMAL UNIV
View PDF5 Cites 8 Cited by
  • Summary
  • Abstract
  • Description
  • Claims
  • Application Information

AI Technical Summary

Problems solved by technology

However, with the development of compilation, protection and obfuscation technologies, and the introduction of some specific compilation optimization techniques, traditional reverse engineering systems have been unable to correctly construct reverse models

Method used

the structure of the environmentally friendly knitted fabric provided by the present invention; figure 2 Flow chart of the yarn wrapping machine for environmentally friendly knitted fabrics and storage devices; image 3 Is the parameter map of the yarn covering machine
View more

Image

Smart Image Click on the blue labels to locate them in the text.
Viewing Examples
Smart Image
  • Program evolution model-based object code reverse engineering system
  • Program evolution model-based object code reverse engineering system

Examples

Experimental program
Comparison scheme
Effect test

Embodiment Construction

[0018] Exemplary embodiments of the present disclosure will be described in more detail below with reference to the accompanying drawings. Although exemplary embodiments of the present disclosure are shown in the drawings, it should be understood that the present disclosure may be embodied in various forms and should not be limited by the embodiments set forth herein. Rather, these embodiments are provided for more thorough understanding of the present disclosure and to fully convey the scope of the present disclosure to those skilled in the art.

[0019] According to the embodiment of the present invention, as attached figure 1 As shown, an object code reverse engineering system based on a program evolution model is disclosed. The program evolution model is to perform reverse engineering based on the evolution of the program model. The system specifically includes: a display unit, an output prompt unit, and a format recognition and printing unit , a sampling unit, an archite...

the structure of the environmentally friendly knitted fabric provided by the present invention; figure 2 Flow chart of the yarn wrapping machine for environmentally friendly knitted fabrics and storage devices; image 3 Is the parameter map of the yarn covering machine
Login to view more

PUM

No PUM Login to view more

Abstract

The invention discloses a program evolution model-based object code reverse engineering system. An object code file packaging format can be automatically identified; an object code file code segment is distinguished; analysis is carried out by a disassembly technology and a corresponding program model is generated; analysis is carried out again and a new program model is generated on the basis of the previous program model; the processes are continuously repeated; and gradual refinement is carried out to finally generate an ASM reassemble file. By the program evolution model-based object code reverse engineering system, accurate and effective reverse engineering can be carried out on a self-confused object code file comprising instruction overlapping; the program evolution model-based object code reverse engineering system can be applied to analysis and identification of packed malicious software comprising a self-confusion instruction, instruction overlapping and the like and analysis of anti-disassembly closed-source software.

Description

technical field [0001] The invention relates to the field of data processing, in particular to an object code reverse engineering system based on a program evolution model. Background technique [0002] With the increase of software complexity, reverse engineering has attracted more and more attention, and has become a new branch in the field of software engineering. The purpose of using object code reverse engineering technology is to start directly from the compiled or specially processed final object program without source code, and apply various technical means to restore the semantic information of program behavior, thereby helping to understand the principle of the program. Analyzing malware, vulnerabilities of closed source software, interoperability of closed source software, consistency of target program with source program, verifying compiler performance and accuracy, and displaying assembly instructions during debugging are all target code reverse engineering tech...

Claims

the structure of the environmentally friendly knitted fabric provided by the present invention; figure 2 Flow chart of the yarn wrapping machine for environmentally friendly knitted fabrics and storage devices; image 3 Is the parameter map of the yarn covering machine
Login to view more

Application Information

Patent Timeline
no application Login to view more
Patent Type & Authority Applications(China)
IPC IPC(8): G06F9/44
CPCG06F8/74
Inventor 史建琦熊家文黄滟鸿何积丰李昂方徽星
Owner EAST CHINA NORMAL UNIV
Who we serve
  • R&D Engineer
  • R&D Manager
  • IP Professional
Why Eureka
  • Industry Leading Data Capabilities
  • Powerful AI technology
  • Patent DNA Extraction
Social media
Try Eureka
PatSnap group products