Paper Info
Title
Interactive Function Identification Decreasing the Effort of Reverse Engineering.
Abstract
Today's software is growing in size and complexity. Consequently analysing closed-source binaries becomes time-consuming and labour-intensive. In the common use case, the analyst is only interested in specific functions of the given application. Identifying the relevant functions is difficult since no related meta information is given. In this paper we present a framework which speeds up the reverse-engineering process using interactive function identification. We use the benefits of Dynamic Binary Instrumentation as base to collect the executed function calls. We support the analyst in filtering the relevant functions for specific functionality. Our approach is divided into three process steps. Real-time data gathering, user defined information processing/filtering and graphical representation. We show a significant speed up in the reverse engineering process using our framework. We reduce the number of executed functions to be viewed by the analyst more than 90﾿% and due to visual components we help the analyst pre-selecting the functions on an abstract level.
Year
DOI
Venue
2015
10.1007/978-3-319-38898-4_27
Inscrypt
Keywords
Field
DocType
Reverse engineering, Information visualisation, Security, IP protection
Data mining,Data collection,Information processing,Information visualization,Computer science,Reverse engineering,Filter (signal processing),Software,Speedup,Binary number
Conference
Volume
ISSN
Citations 
9589
0302-9743
0
PageRank 
References 
Authors
0.34
11
3
Name
Order
Citations
PageRank
Fatih Kiliç110.71
Hannes Laner200.34
Claudia Eckert37613.13