Paper Info
Title
Discovery of C++ data structures from binaries
Abstract
This extended abstract presents the techniques to identify C++ data structures in binary executables. With respect to automated tools, this is a largely open problem and generally requires significant manual intervention, inspection, and tracing to establish. The techniques for manual evaluation of C++ data structures are well known, but tedious. Because of this manual handling, the results are error prone and sensitive to the time available and experience of the analyst. All of our work is accomplished using the ROSE compiler infrastructure. ROSE is an open source compiler infrastructure that handles source code, and also binary executables. Uniquely ROSE handles binary executables much like source code, parsing them to identify and represent their internal parts in an intermediate representation (IR), disassembling the appropriate segments containing instructions, defining a number of standard forms of program analysis, and permitting users to define there own specialized forms of analysis. The work to reconstruct C++ data structures is part of larger work that reconstructs all the data used in the binary more generally.
Year
DOI
Venue
2010
10.1145/1852666.1852743
CSIIRW
Keywords
Field
DocType
manual evaluation,rose compiler infrastructure,binary executables,uniquely rose,source code,significant manual intervention,larger work,open source compiler infrastructure,manual handling,data structure,program analysis,csp,hypervisor,intermediate representation
Data structure,Source code,Computer science,Computer security,Compiler,Parsing,Program analysis,Tracing,Executable,Binary number
Conference
Citations 
PageRank 
References 
0
0.34
0
Authors
2
Name
Order
Citations
PageRank
Daniel Quinlan11398.27
Cory Cohen2222.55