English
 
Help Privacy Policy Disclaimer
  Advanced SearchBrowse

Item

ITEM ACTIONSEXPORT
  Cross-Architecture Comparison of Binary Executables

Sanchez Bach, A. (2017). Cross-Architecture Comparison of Binary Executables. Master Thesis, Universität des Saarlandes, Saarbrücken.

Item is

Files

show Files
hide Files
:
2017_Sanchez Bach_MSc thesis.pdf (Any fulltext), 2MB
 
File Permalink:
-
Name:
2017_Sanchez Bach_MSc thesis.pdf
Description:
-
Visibility:
Restricted (Max Planck Institute for Informatics, MSIN; )
MIME-Type / Checksum:
application/pdf
Technical Metadata:
Copyright Date:
-
Copyright Info:
-
License:
-

Locators

show

Creators

show
hide
 Creators:
Sanchez Bach, Alexandro1, Author              
Rossow, Christian2, Advisor
Hack, Sebastian2, Referee
Affiliations:
1International Max Planck Research School, MPI for Informatics, Max Planck Society, ou_1116551              
2External Organizations, ou_persistent22              

Content

show
hide
Free keywords: -
 Abstract: The proliferation of IoT-devices is turning different kinds of embedded systems into another relevant target for malware developers. Consequently, recent botnets are providing clients for multiple host architectures, making the clustering of malware samples a non-trivial task. While several approaches exist for statically comparing binaries of the same architecture, there are no proposed methods to compare binaries across different architectures. Based on previous approaches for cross-architecture bug identification, we present CrossDiff, a tool to compare executable binaries compiled for ARM, MIPS, PowerPC and x86. CrossDiff detects functions in the input executables and translates their instructions into a common intermediate representation. Then, by pairwise comparing functions based on features at IR-level and analyzing module-level properties we compute a similarity score for pairs of binaries. Finally, we evaluate this approach and the stages of the pipeline on the SPEC CPU2006 dataset with a build matrix that iterates over different architectures, compilers, languages and optimization flags.

Details

show
hide
Language(s): eng - English
 Dates: 2017-09-292017
 Publication Status: Published in print
 Pages: 50 p.
 Publishing info: Saarbrücken : Universität des Saarlandes
 Table of Contents: -
 Rev. Type: -
 Identifiers: BibTex Citekey: SanchezMaster2017
 Degree: Master

Event

show

Legal Case

show

Project information

show

Source

show