Efficient Binary Static Code Data Flow Analysis Using Unsupervised Learning

Technical Report · Tue Jan 21 04:00:00 EST 2020

DOI:https://doi.org/10.2172/1592974· OSTI ID:1592974

Obert, James ^[1]; Loffredo, Timothy James ^[1]

---

1. Sandia National Lab. (SNL-NM), Albuquerque, NM (United States)

The ever increasing need to ensure that code is reliably, efficiently and safely constructed has fueled the evolution of popular static binary code analysis tools. In identifying potential coding flaws in binaries, tools such as IDA Pro are used to disassemble the binaries into an opcode/assembly language format in support of manual static code analysis. Because of the highly manual and resource intensive nature involved with analyzing large binaries, the probability of overlooking potential coding irregularities and inefficiencies is quite high. In this paper, a light-weight data, unsupervised data flow methodology is described which uses highly-correlated data flow graph (CDFGs) to identify coding irregularities such that analysis time and required computing resources are minimized. Such analysis accuracy and efficiency gains are achieved by using a combination of graph analysis and unsupervised machine learning techniques which allows an analyst to focus on the most statistically significant flow patterns while performing binary static code analysis.

• Research Organization: Sandia National Laboratories (SNL-NM), Albuquerque, NM (United States)
• Sponsoring Organization: USDOE National Nuclear Security Administration (NNSA)
• DOE Contract Number: AC04-94AL85000; NA0003525
• OSTI ID: 1592974
• Report Number(s): SAND--2019-14311R; 682701
• Country of Publication: United States
• Language: English

Related Subjects

97 MATHEMATICS AND COMPUTING
Code Analysis
Code Inspection
Efficient Static Analysis
Static Code Analysis