Date: | Fri, 23 Jan 2015 11:21:54 -0600 |
---|---|
From: | Xiaozhu Meng <xmeng@xxxxxxxxxxx> |
Subject: | Re: [DynInst_API:] Can dyninst statically recover the whole assembly program from binaries? |
Hi Shuai,
On Fri, Jan 23, 2015 at 9:37 AM, Shuai Wang <wangshuai901@xxxxxxxxx> wrote:
We are writing a paper that covers some latest improvement of Dyninst on statically analyzing binaries. However, the latest published paper on this topic dates back to 2005 (ftp://ftp.cs.wisc.edu/paradyn/papers/Harris05WBIA.pdf). Many aspects of Dyninst have changed since then. Â
Dyninst borrows the concept of abstract location (You can search for paper "what you see is not what you execute" for more details). An abstract location can be seen as a pair of memory region (heap, stack or global) and an offset inside the region. Dyninst has some decent analysis to identify stack and global abstract locations, but does not have static analysis to deal with dynamically allocated memory regions (like heap). Â
Dyninst can identify function entry points in stripped binaries using a machine learning based technique (see the following paper for more details ftp://ftp.cs.wisc.edu/paradyn/papers/Rosenblum08aaai.pdf). Then Dyninst will determine other function-level information from the identified function entry points. Â
|
[← Prev in Thread] | Current Thread | [Next in Thread→] |
---|---|---|
|
Previous by Date: | Re: [DynInst_API:] Can dyninst statically recover the whole assembly program from binaries?, Shuai Wang |
---|---|
Next by Date: | Re: [DynInst_API:] Can dyninst statically recover the whole assembly program from binaries?, Barton Miller |
Previous by Thread: | Re: [DynInst_API:] Can dyninst statically recover the whole assembly program from binaries?, Shuai Wang |
Next by Thread: | Re: [DynInst_API:] Can dyninst statically recover the whole assembly program from binaries?, Barton Miller |
Indexes: | [Date] [Thread] |