Backdoor Inspection Apparatus Static Dynamic Analysis
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing techniques for analyzing backdoors in software fail to accurately identify and analyze backdoors, as they do not consider the specific conditions under which these hidden functions are executed.
Innovation Solution
A backdoor inspection apparatus and method that combines static analysis to specify potentially malicious code blocks and their execution conditions, and dynamic analysis to execute and analyze these blocks with enhanced logging and notification capabilities, improving analysis accuracy.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Measurement precision
If static analysis is performed on each code block to specify potentially malicious code and execution conditions, then analysis precision is improved, but device complexity increases due to the combination of static and dynamic analysis systems
Solution Approach 1:
The inspection apparatus is divided into distinct functional modules: a static analysis module that analyzes code blocks to identify potential backdoors and their execution conditions, and a dynamic analysis module that executes the software under controlled conditions. This segmentation allows each module to specialize in specific tasks, improving overall analysis accuracy while managing system complexity through modular design.
Solution Approach 2:
The static analysis is performed before dynamic analysis to pre-identify code blocks that may contain backdoors and determine their execution conditions. This preliminary action allows the dynamic analysis phase to focus specifically on executing and verifying the behavior of identified suspicious code blocks, thereby improving analysis precision without requiring the entire system to be overly complex.
2Measurement precision
If dynamic analysis is controlled based on specified execution conditions, then backdoor detection accuracy is improved, but analysis time increases due to conditional execution control
Solution Approach 1:
Execution conditions for potential backdoor code blocks are determined through static analysis before the dynamic analysis phase. By pre-specifying the conditions under which backdoor code should execute (such as specific input values or environmental settings), the dynamic analysis can efficiently target only the relevant code paths without exhaustively testing all possible execution scenarios, thus improving detection accuracy while controlling analysis time.
3Measurement precision
If static analysis specifies execution conditions for backdoor code blocks, then analysis precision is improved, but the difficulty of detecting and measuring increases due to the complexity of condition verification
Solution Approach 1:
The dynamic analysis module acts as an intermediary that takes the execution conditions specified by the static analysis module and automatically verifies them during software execution. This intermediary role simplifies the verification process by automating the comparison between specified conditions and actual execution states, reducing the difficulty of detecting and measuring whether backdoor conditions are met while maintaining high analysis precision.
Data Source
AI summary
In a backdoor inspection apparatus, a static analysis unit executes static analysis processing for a backdoor on each code block included in target software to be inspected to thereby specify a first code block and a condition, the first code possibly being the backdoor and the first code block being executed under the condition. Next, the static analysis unit outputs the target software to which first information indicating the specified first code block is added and second information indicating the specified condition to a dynamic analysis unit. The dynamic analysis unit controls dynamic analysis processing for the backdoor performed on the target software to which the first information is added based on the first information and the second information.