Method, device and medium for generating formalized structure of function code in binary program

Abstract

The present invention proposes a method, device, and medium for generating a formalized structure of function codes in binary programs. The method takes function codes in binary programs as the basic granularity of analysis, classifies binary program codes based on functional attributes, divides the address space of binary codes, and generates each Function code collection of class function attributes, and establish classification function information table and function distribution table describing function code attributes; build machine instruction operand type collection, and generate formal structure of various function codes by formalizing operands in function codes Set; use the formalized structure of the classified function information table, function distribution table, and function code to establish the formalized structure matrix of the function code, which can effectively analyze the formalization of the entire function code in the binary program at the two levels of the whole and the function structure. The invention realizes the effective analysis of the function code structure in the binary program, and provides practical support for accurately detecting the functional attributes of the binary program.

Description

technical field

[0001] The invention relates to the field of information security, in particular to a method, device and medium for generating a formalized structure of function codes in a binary program. Background technique

[0002] In today's era, systems such as cloud computing platforms, Internet of Things, mobile networks, and industrial Internet have developed rapidly. As an important component of various systems, binary programs are increasingly important for their security, reliability, and credibility. With the development of information security technology, its countermeasure technology has also been developed rapidly. The types of harmful technologies that endanger network and system security are constantly increasing, and the applied technologies are constantly innovating. Since the binary program is composed of machine instructions, it is difficult for existing methods to effectively analyze its code structure, and cannot effectively combat harmful technologies...

Images