Backdoor Inspection Apparatus Data Flow Analysis

Resolve Bottlenecks,
Find Innovative Solutions
Generate Solutions

Solution Overview

Problem

Existing methods for detecting backdoors in programs are inefficient due to the high cost of reverse engineering and the low accuracy of inspection, particularly because many conditional branches are used in normal programs.

Innovation Solution

A backdoor inspection apparatus and method that includes an acquisition unit, a data flow analysis unit, and a conditional branch extraction unit. The apparatus acquires a program and starting point information, analyzes the data flow, and extracts conditional branches where external input data are directly propagated as potential backdoor triggers.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Measurement precision

If reverse engineering by expert is used to detect backdoor, then detection accuracy is improved, but inspection cost increases

Engineering Contradiction:
Improvebackdoor detection accuracyVSAvoidinspection cost
Core Design Contradiction:
Measurement precisionVSDevice complexity

Solution Approach 1:

The patent creates a virtual copy of the program's execution environment through virtual machine instantiation. This allows automated analysis of the program's behavior without requiring expert reverse engineering, thereby maintaining detection accuracy while reducing inspection costs. The virtual copy enables safe observation of program execution and data flow patterns that may indicate backdoors.

Inventive Principle:
Principle #26Copying

Solution Approach 2:

The patent replaces the mechanical process of expert reverse engineering with an automated computational system. The analysis unit automatically performs data flow analysis, conditional branch identification, and backdoor detection without human intervention. This substitution eliminates the need for expensive expert labor while maintaining systematic and consistent detection capabilities.

Inventive Principle:
Principle #28Mechanics substitution (Replace mechanical system)

2Productivity

If focusing on conditional branch as backdoor trigger is used, then inspection efficiency is improved, but inspection accuracy deteriorates

Engineering Contradiction:
Improveinspection efficiencyVSAvoidbackdoor trigger identification accuracy
Core Design Contradiction:
ProductivityVSMeasurement precision

Solution Approach 1:

The patent extracts and isolates specific conditional branches that are most likely to contain backdoor triggers by analyzing data flow patterns. Rather than examining all conditional branches equally, the system identifies and focuses on those where external input data directly influences the branch condition. This extraction approach maintains inspection efficiency while improving accuracy by concentrating resources on high-risk branches.

Inventive Principle:
Principle #2Taking out (Extraction)

Solution Approach 2:

The patent applies different analysis depths and methods to different conditional branches based on their characteristics. Conditional branches with direct external input propagation receive more rigorous analysis, while other branches are processed with standard methods. This localized quality approach optimizes the balance between inspection efficiency and accuracy by allocating analytical resources where they are most needed.

Inventive Principle:
Principle #3Local quality

3Measurement precision

If data flow analysis is performed to identify backdoor triggers, then backdoor detection accuracy is improved, but analysis complexity increases

Engineering Contradiction:
Improvebackdoor trigger detection accuracyVSAvoidanalysis system complexity
Core Design Contradiction:
Measurement precisionVSDevice complexity

Solution Approach 1:

The patent segments the data flow analysis process into distinct, manageable components: variable definition tracking, propagation path analysis, and conditional branch evaluation. Each component handles a specific aspect of the analysis, making the overall complex task more tractable. The segmentation allows the system to perform comprehensive data flow analysis without overwhelming complexity by breaking it into modular, reusable analysis units.

Inventive Principle:
Principle #1Segmentation

Data Source

PatentUS20250077390A1Backdoor inspection apparatus, method, and non-transitory computer readable medium
Publication Date: 2025.03.06 NEC CORP
  • US20250077390A1 patent drawing
  • US20250077390A1 patent drawing
  • US20250077390A1 patent drawing

AI summary

A backdoor inspection apparatus and the like with improved inspection accuracy of a backdoor trigger are provided. A backdoor inspection apparatus includes: an acquisition unit acquiring a program to be analyzed and starting point information of analysis; a data flow analysis unit analyzing a data flow included in the program, based on the acquired program to be analyzed and starting point information of analysis, and outputting data flow analysis information; and a conditional branch extraction unit extracting, as a candidate of a backdoor trigger, a conditional branch in which external input data are directly propagated, by using the data flow analysis information.