Reverse platform based on fine-grained taint analysis

Abstract

Abstract: The advantages and disadvantages of?existing behavioral analysis?system are analysed. To solve the problems encounted in reverse?analysis, such as?code?protection, instruction-level?dynamic?taint?analysis is studied and improved. Based on virtualization technology, a common reverse?analysis?platform is designed?to provide?assistance for?fields such as fuzzing and malicious-code detection. Plug-in?feature is supported to provide extendibility. The experimental?results?prove that ?with conventional?means of?reverse analysis, the proposed method can significantly improve the?analysis?efficiency.

Key words: virtualization, taint?analysis, reverse?analysis

摘要： 分析对比了现有的行为分析系统的优缺点，针对逆向分析过程中所遇到的代码保护技术等困难，研究并改进了指令级的动态污点分析技术。利用虚拟化技术，设计了一套具有通用性的逆向分析平台。研究插件结构实现可扩展性，以适应漏洞挖掘、恶意行为检测等领域的应用。经实验测试，该设计能与常规的逆向手段配合，显著地提高分析的效率。

关键词: 虚拟化, 污点分析, 逆向分析

YE Yonghong, WU Dongying, CHEN Yang. Reverse platform based on fine-grained taint analysis[J]. Computer Engineering and Applications, 2012, 48(28): 90-96.

叶永宏，武东英，陈扬. 一种基于细粒度污点分析的逆向平台[J]. 计算机工程与应用, 2012, 48(28): 90-96.

[1]	WANG Xiao, TANG Lun, HE Xiaoyu, CHEN Qianbin. Multi-dimensional Resource Optimization of Service Function Chain Based on Deep Reinforcement Learning [J]. Computer Engineering and Applications, 2021, 57(4): 68-76.
[2]	CHANG Haifeng, SONG Tian, YANG Yating. Heuristic Method of Resource Allocation on Single Node in NFV [J]. Computer Engineering and Applications, 2020, 56(11): 105-111.
[3]	JIANG Shuli, LIU Yuan, WANG Xiaofeng. Broadband User Behavior Emulation Technology for Space-Ground Integrated Information Network [J]. Computer Engineering and Applications, 2020, 56(10): 75-82.
[4]	XU Daoqiang, ZOU Yunfeng, DENG Junhua, LI Hao, QIAN Zhuzhong. Research on Virtual Network Function Chain Deployment for NUMA Systems [J]. Computer Engineering and Applications, 2019, 55(21): 115-121.
[5]	LIU Bowen1，2，3, GU Naijie1，2，3, GU Dehe1，2，3, SU Junjie1，2，3. Implementation of OS-level virtualization technology for Android on mobile platform [J]. Computer Engineering and Applications, 2017, 53(14): 32-38.
[6]	KAN Wenxiao1，2，3, WU Wenjing1, Andrei Tsaregorodtsev3, CHEN Gang1. Research on key technology of supporting multi-application [J]. Computer Engineering and Applications, 2016, 52(23): 25-34.
[7]	DONG Weiyu, QI Xuyan, ZENG Yun, GUO Yudong, JIANG Liehui. Binary translation optimization on cross-platform system virtual machine [J]. Computer Engineering and Applications, 2016, 52(23): 42-49.
[8]	CUI Xuetao, ZHANG Xihuang. Mechanisms for energy efficiency based on reliability under cloud computing [J]. Computer Engineering and Applications, 2016, 52(1): 42-47.
[9]	XU Qian1，2，3, YI Huiyue2，3, ZHU Jun1, HU Honglin2，3. Virtual network mapping algorithm based on entropy weight method [J]. Computer Engineering and Applications, 2015, 51(23): 94-99.
[10]	ZHU Jiayu, XIAO Dan, WANG Fei. Multi-dimensional QoS constrained scheduling mechanism based on load balancing for cloud computing [J]. Computer Engineering and Applications, 2013, 49(9): 85-89.
[11]	WANG Huan, LI Zhanhuai, ZHANG Xiao. Design of cloud backup system architecture supporting continuous data protection [J]. Computer Engineering and Applications, 2012, 48(1): 90-93.
[12]	CHANG Jianzhong，LIU Xiaojian. Study of virtual machine co-scheduling [J]. Computer Engineering and Applications, 2011, 47(6): 38-41.
[13]	WANG Weibing. Dynamically scaling application model based on cloud computing [J]. Computer Engineering and Applications, 2011, 47(15): 15-18.
[14]	ZHENG Liang¹，ZHU Li-gu¹，ZHAO Ting-tao¹，YI Qi²，YAN Chu-ping²，HU Huai-xiang²，YANG Fan³. Design of evaluation method of storage virtualization [J]. Computer Engineering and Applications, 2010, 46(36): 98-100.
[15]	ZENG Sai-feng，ZHU Li-gu，LI Qiang，ZHANG Fu. Implementation of virtualization on private enterprise cloud storage system [J]. Computer Engineering and Applications, 2010, 46(36): 70-73.

Reverse platform based on fine-grained taint analysis

一种基于细粒度污点分析的逆向平台

PDF

Knowledge

Abstract

Cite this article

share this article

References

Related Articles 15

Recommended Articles

Metrics