基于控制流精化的反汇编方法  

Disassembly method based on control flow refining

作　　者：马金鑫[1] 忽朝俭[1] 李舟军[1] 

机构地区：[1]北京航空航天大学计算机学院,北京100191

出　　处：《清华大学学报（自然科学版）》2011年第10期1345-1350,共6页Journal of Tsinghua University(Science and Technology)

基　　金：国家自然科学基金资助项目(60973105;90718017)

摘　　要：反汇编过程是整个逆向工程的基础和重要部分。为提高反汇编过程的效率及反汇编结果的准确度,通过对传统反汇编方法的探究,提出了一种基于控制流图精化的静态反汇编方法。该方法把二进制代码通过函数定位切分成单个函数,然后再对单个函数生成初始的过程内控制流图,使用图论的方法与汇编指令的特征匹配相结合,提炼出真实的控制流图。使用CoreUtils中的22个程序作为测试基准,使用2种线性扫描算法作为比较基准。实验结果表明:本文所提出的反汇编方法比Objdump快63.2%,并且可以高度精确地绘制出控制流图,因此具有准确度高、效率高的显著特性。Disassembly plays a fundamental and important role in reverse engineering.A static disassembly method based on a refining control flow graph was developed to improve disassembly accuracy and efficiency.The method slices the binary into functions and constructs an intra-procedure control flow graph for each function.Then,it extracts the real control flow graph as per graph theory and the assembly code features.This program evaluated 22 coreutils programs between these two linear sweep algorithms and is 63.2% faster than Objdump for drawing accurate control flow graphs.Therefore,it is more efficient and accurate.

关 键 词：反汇编 控制流图 模糊化 

分 类 号：TP393[自动化与计算机技术—计算机应用技术]