基于静态模拟的二进制控制流恢复算法  

Control Flow Restoring Algorithm for Binary Program Based on Static Simulation

作　　者：胡刚[1] 张平[1] 李清宝[1] 张翠艳[1] 

机构地区：[1]解放军信息工程大学计算机科学与技术系,郑州450002

出　　处：《计算机工程》2011年第5期276-278,281,共4页Computer Engineering

基　　金：国家"863"计划基金资助项目(2009AA01Z434)

摘　　要：恢复完整的程序控制流图是软件逆向分析的关键,但传统恢复算法依赖于程序结构和编译器信息,不具通用性,无法满足无结构的二进制程序控制流恢复的需要。针对该问题,在传统控制流恢复算法的基础上,提出一种基于静态模拟策略的通用二进制程序控制流恢复算法,并与传统控制流恢复算法、基于切片技术的控制流恢复算法和动态控制流恢复算法在性能上进行比较分析,结果表明,该算法能够恢复出更加完整的控制流图。Binary program comprehension and analysis are based on Control Flow Graph（CFG） which is the key to reconstruct and reengineering a program and is the basis of software reversing engineering.Classic CFG restoring algorithm that is relevant to program structure and complier information is not applicable to some other binary program.Aiming at this problem,this paper presents a new CFG restoring algorithm that is based on static simulation strategy.The new algorithm derives from the classic CFG restoring method.It compares the new algorithm with other CFG recovery algorithms on performance.Results show that the algorithm can restore control flow from binary program more completely than others.

关 键 词：控制流图 静态模拟 二进制程序 

分 类 号：TP301.6[自动化与计算机技术—计算机系统结构]