基于可执行代码中间表示的控制流分析  

Control Flow Analysis Based on Intermediate Representation of Executable Code

作　　者：窦增杰[1] 王震宇[1] 陈楠[1] 王瑞敏[1] 田佳[1] 

机构地区：[1]解放军信息工程大学信息工程学院,郑州450002

出　　处：《计算机工程》2010年第21期31-33,36,共4页Computer Engineering

基　　金：国家"863"计划基金资助项目(2007AA01Z483);河南省高新领域重点攻关基金资助项目(082102210011)

摘　　要：为准确刻画程序的控制流和正确地提取程序控制结构,给出可执行代码控制流分析的整体架构和算法,阐述可执行代码反汇编结果的抽象表示、程序控制流构造等技术。反汇编结果抽象表示采用简化汇编语言中间表示(SAIR)以保证分析的简洁性和严密性。基于SAIR给出程序控制流构造函数,设计程序控制流构造算法并给出分析实例。In order to analyze program control flow precisely and depict program control structure correctly, this paper introduces an overall architecture for control flow analysis and proposes an algorithm to generate the control flow of executable code. Key techniques such as abstraction of executable code and program control flow generation are described. Simple Assembly language Intermediate Representation（SAIR） is presented. Without changing semantics of the disassembly code, SAIR ensures thesimplicity and stringentness Of analysis. The functions that create program control flow are defined based on SAIR and the algorithm that generates the control flow is proposed. The example of analyzing program control flow is given.

关 键 词：逆向分析 中间表示 控制流 抽象表示 

分 类 号：TP311[自动化与计算机技术—计算机软件与理论]