Backdoor Inspection Apparatus Data Flow Analysis
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing methods for detecting backdoors in programs are inefficient due to the high cost of reverse engineering and the low accuracy of inspection, particularly because many conditional branches are used in normal programs.
Innovation Solution
A backdoor inspection apparatus and method that includes an acquisition unit, a data flow analysis unit, and a conditional branch extraction unit. The apparatus acquires a program and starting point information, analyzes the data flow, and extracts conditional branches where external input data are directly propagated as potential backdoor triggers.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Measurement precision
If reverse engineering by expert is used to detect backdoor, then detection accuracy is improved, but inspection cost increases
Solution Approach 1:
The patent creates a virtual copy of the program's execution environment through virtual machine instantiation. This allows automated analysis of the program's behavior without requiring expert reverse engineering, thereby maintaining detection accuracy while reducing inspection costs. The virtual copy enables safe observation of program execution and data flow patterns that may indicate backdoors.
Solution Approach 2:
The patent replaces the mechanical process of expert reverse engineering with an automated computational system. The analysis unit automatically performs data flow analysis, conditional branch identification, and backdoor detection without human intervention. This substitution eliminates the need for expensive expert labor while maintaining systematic and consistent detection capabilities.
2Productivity
If focusing on conditional branch as backdoor trigger is used, then inspection efficiency is improved, but inspection accuracy deteriorates
Solution Approach 1:
The patent extracts and isolates specific conditional branches that are most likely to contain backdoor triggers by analyzing data flow patterns. Rather than examining all conditional branches equally, the system identifies and focuses on those where external input data directly influences the branch condition. This extraction approach maintains inspection efficiency while improving accuracy by concentrating resources on high-risk branches.
Solution Approach 2:
The patent applies different analysis depths and methods to different conditional branches based on their characteristics. Conditional branches with direct external input propagation receive more rigorous analysis, while other branches are processed with standard methods. This localized quality approach optimizes the balance between inspection efficiency and accuracy by allocating analytical resources where they are most needed.
3Measurement precision
If data flow analysis is performed to identify backdoor triggers, then backdoor detection accuracy is improved, but analysis complexity increases
Solution Approach 1:
The patent segments the data flow analysis process into distinct, manageable components: variable definition tracking, propagation path analysis, and conditional branch evaluation. Each component handles a specific aspect of the analysis, making the overall complex task more tractable. The segmentation allows the system to perform comprehensive data flow analysis without overwhelming complexity by breaking it into modular, reusable analysis units.
Data Source
AI summary
A backdoor inspection apparatus and the like with improved inspection accuracy of a backdoor trigger are provided. A backdoor inspection apparatus includes: an acquisition unit acquiring a program to be analyzed and starting point information of analysis; a data flow analysis unit analyzing a data flow included in the program, based on the acquired program to be analyzed and starting point information of analysis, and outputting data flow analysis information; and a conditional branch extraction unit extracting, as a candidate of a backdoor trigger, a conditional branch in which external input data are directly propagated, by using the data flow analysis information.


