Method and device for generating formal structure of function code in binary program and medium

A binary program and binary code technology, applied in the field of function code formal structure generation in binary programs, can solve problems such as difficult binary program code structure analysis, and achieve the effects of ensuring security, wide application range, and strong portability

Active Publication Date: 2021-10-26
武汉江民网安科技有限公司
View PDF14 Cites 0 Cited by
  • Summary
  • Abstract
  • Description
  • Claims
  • Application Information

AI Technical Summary

Problems solved by technology

[0004] In view of this, the present invention proposes a method, device and medium for generating a formalized structure of a function code in a binary program to solve the problem that it is difficult to effectively analyze the code structure of a binary program

Method used

the structure of the environmentally friendly knitted fabric provided by the present invention; figure 2 Flow chart of the yarn wrapping machine for environmentally friendly knitted fabrics and storage devices; image 3 Is the parameter map of the yarn covering machine
View more

Image

Smart Image Click on the blue labels to locate them in the text.
Viewing Examples
Smart Image
  • Method and device for generating formal structure of function code in binary program and medium
  • Method and device for generating formal structure of function code in binary program and medium
  • Method and device for generating formal structure of function code in binary program and medium

Examples

Experimental program
Comparison scheme
Effect test

Embodiment

[0072] The work flow of the method for generating a formalized structure of function codes in a binary program of the present invention is shown in figure 1 , the processing steps are as follows:

[0073] Because the formats of binary programs in different operating system environments are different, the method for generating the formalized structure of function codes in a binary program proposed by the present invention is used below to generate the matrix representation of the formalized structure of function codes in PE programs in the Windows environment. The specific workflow as an example mainly includes the following steps:

[0074] The first step is to extract effective data describing the binary program and its code based on the file structure description information contained in the binary program. In the Windows environment, common PE files include EXE, DLL, OCX, SYS, COM and other formats. The main file structure is shown in Table 1 below:

[0075] Table 1 Overa...

the structure of the environmentally friendly knitted fabric provided by the present invention; figure 2 Flow chart of the yarn wrapping machine for environmentally friendly knitted fabrics and storage devices; image 3 Is the parameter map of the yarn covering machine
Login to view more

PUM

No PUM Login to view more

Abstract

The invention provides a method and device for generating a formal structure of a function code in a binary program and a medium, and the method comprises the steps of taking the function code in the binary program as the basic granularity of analysis, classifying the binary program codes based on functional attributes, dividing the address space of the binary codes, and generating a function code set of various functional attributes; establishing a classification function information table and a function distribution table for describing the function code attributes; constructing a machine instruction operand type set, and generating a formalized structure set of various function codes through the operands in the formalized function codes; establishing a function code formalized structure matrix through the classification function information table, the function distribution table and the formalized structures of function codes, wherein the matrix can effectively analyze the formalized structures of all the function codes in the binary program on the overall level and the function level. According to the present invention, the function code structures in the binary program are effectively analyzed, and actual support is provided for accurately detecting the function attributes of the binary program.

Description

technical field [0001] The invention relates to the field of information security, in particular to a method, device and medium for generating a formalized structure of function codes in a binary program. Background technique [0002] In today's era, systems such as cloud computing platforms, Internet of Things, mobile networks, and industrial Internet have developed rapidly. As an important component of various systems, binary programs are increasingly important for their security, reliability, and credibility. With the development of information security technology, its countermeasure technology has also been developed rapidly. The types of harmful technologies that endanger network and system security are constantly increasing, and the applied technologies are constantly innovating. Since the binary program is composed of machine instructions, it is difficult for existing methods to effectively analyze its code structure, and cannot effectively combat harmful technologies...

Claims

the structure of the environmentally friendly knitted fabric provided by the present invention; figure 2 Flow chart of the yarn wrapping machine for environmentally friendly knitted fabrics and storage devices; image 3 Is the parameter map of the yarn covering machine
Login to view more

Application Information

Patent Timeline
no application Login to view more
Patent Type & Authority Applications(China)
IPC IPC(8): G06F8/30G06F8/75
CPCG06F8/30G06F8/75
Inventor 郭昌盛黄河许团聂永春汪文晓
Owner 武汉江民网安科技有限公司
Who we serve
  • R&D Engineer
  • R&D Manager
  • IP Professional
Why Eureka
  • Industry Leading Data Capabilities
  • Powerful AI technology
  • Patent DNA Extraction
Social media
Try Eureka
PatSnap group products