Behavior specification, finding main, and call graph visualizations

Title: Behavior specification, finding main, and call graph visualizations

Abstract

A process transforms compiled software into a semantic form. The process transforms the code into a semantic form. The process analyzes behavior functionality by processing precise programming behavior abstractions stored in a memory and classifies the code as malware based on the code behavior. Another method identifies the starting point of execution of a compiled program. The method calculates a complexity measure by calculating the number of potential execution paths of local functions; identifies the number of arguments passed to local functions; and identifies the starting point of execution of the compiled program. Another method provides interactive, dynamic visualization of a group of related functions wherein a user can explore the rendered graph and select a specific function and display functions that are color coded by their ancestral relation and their function call distance to the selected function.

Inventors:: Sayre, Kirk D.; Willems, Richard A.; Lindberg, Stephen Lanse

Issue Date:: 2019-02-05

Research Org.:: Oak Ridge National Lab. (ORNL), Oak Ridge, TN (United States)

Sponsoring Org.:: USDOE

OSTI Identifier:: 1502364

Patent Number(s):: 10,198,580

Application Number:: 15/906,831

Assignee:: UT-BATTELLE, LLC (Oak Ridge, TN)

DOE Contract Number:: AC05-00OR22725

Resource Type:: Patent

Resource Relation:: Patent File Date: 2018 Feb 27

Country of Publication:: United States

Language:: English

Subject:: 97 MATHEMATICS AND COMPUTING

Citation Formats


                    Sayre, Kirk D., Willems, Richard A., and Lindberg, Stephen Lanse. Behavior specification, finding main, and call graph visualizations.  United States: N. p., 2019. 
        Web.

Copy to clipboard


                    Sayre, Kirk D., Willems, Richard A., & Lindberg, Stephen Lanse. Behavior specification, finding main, and call graph visualizations.  United States.

Copy to clipboard


                    Sayre, Kirk D., Willems, Richard A., and Lindberg, Stephen Lanse. Tue .  
        "Behavior specification, finding main, and call graph visualizations".  United States.  https://www.osti.gov/servlets/purl/1502364.

Copy to clipboard


                    
@article{osti_1502364,

  title        = {Behavior specification, finding main, and call graph visualizations},

  author       = {Sayre, Kirk D. and Willems, Richard A. and Lindberg, Stephen Lanse},

  abstractNote = {A process transforms compiled software into a semantic form. The process transforms the code into a semantic form. The process analyzes behavior functionality by processing precise programming behavior abstractions stored in a memory and classifies the code as malware based on the code behavior. Another method identifies the starting point of execution of a compiled program. The method calculates a complexity measure by calculating the number of potential execution paths of local functions; identifies the number of arguments passed to local functions; and identifies the starting point of execution of the compiled program. Another method provides interactive, dynamic visualization of a group of related functions wherein a user can explore the rendered graph and select a specific function and display functions that are color coded by their ancestral relation and their function call distance to the selected function.},

  doi          = {},

  journal      = {},
number       = ,

  volume       = ,

  place        = {United States},

  year         = {2019},

  month        = {2}

}

Copy to clipboard

Patent:

View Patent

Save / Share:

Export Metadata

Save to My Library

Works referenced in this record:

Large-scale malware indexing using function-call graphs
conference, January 2009

Hu, Xin; Chiueh, Tzi-cker; Shin, Kang G.
Proceedings of the 16th ACM conference on Computer and communications security - CCS '09
DOI: 10.1145/1653662.1653736

Similar records in DOE Patents and OSTI.GOV collections:

Systems configured to distribute a telephone call, communication systems, communication methods and methods of routing a telephone call to a service representative

Patent Harris, Scott H.; Johnson, Joel A.; Neiswanger, Jeffery R.; ...

The present invention includes systems configured to distribute a telephone call, communication systems, communication methods and methods of routing a telephone call to a customer service representative. In one embodiment of the invention, a system configured to distribute a telephone call within a network includes a distributor adapted to connect with a telephone system, the distributor being configured to connect a telephone call using the telephone system and output the telephone call and associated data of the telephone call; and a plurality of customer service representative terminals connected with the distributor and a selected customer service representative terminal being configuredmore »« less
Full Text Available
Systems and methods of generating a plurality of data visualizations in a data visualization region

Patent Stolte, Chris; Tang, Diane L.; Hanrahan, Patrick

An exemplary method of generating a plurality of data visualizations comprises displaying a graphical user interface that includes a schema information region and a data visualization region. The method further includes receiving user actions to associate first, second, and third fields included in the schema information region with a plurality of shelves of the data visualization region. The method further includes generating a plurality of data visualizations in the data visualization region in accordance with the received user actions, each data visualization includes a plurality of data marks corresponding to a respective retrieved tuple of data having the first, second,more »« less
Full Text Available
Systems and methods of generating color saturated data marks in data visualizations

Patent Stolte, Chris; Tang, Diane L.; Hanrahan, Patrick

A method of displaying data visualizations includes retrieving a dataset from a multidimensional database, where the dataset includes a plurality of fields, including first and second fields, and the first field is a data hierarchy that includes multiple subfields. The method further includes displaying a GUI with a first region displaying the plurality of fields (with the first field in a collapsed state), a second region with a plurality of shelves, and a third region. In response to receiving a user action to display the first field in an expanded state, the method displays the first field and the multiplemore »« less
Full Text Available
Inhibition Of Call-Cell Binding By Kipid Assemblies

Patent Nagy, Jon O. (Rodeo, CA), Bargatze, Robert F. (Bozeman, MT)

This invention relates generally to the field of therapeutic compounds designed to interfere between the binding of ligands and their receptors on cell surface. More specifically, it provides products and methods for inhibiting cell migration and activation using lipid assemblies with surface recognition elements that are specific for the receptors involved in cell migration and activation.
Full Text Available
Detection of counterfeit and compromised devices using system and function call tracing techniques

Patent Babun, Leonardo; Aksu, Hidayet; Uluagac, A. Selcuk

Frameworks, methods, and systems for securing a smart grid are provided. A framework can include data collection, call tracing techniques, and preparing call lists to detect counterfeit or compromised devices. The call tracing techniques can include call tracing and compiling all system and function calls over a time interval. The framework can further include data processing, in which a genuine device is identified and compared to unknown devices. A first statistical correlation can be used for resource-rich systems, and a second statistical correlation can be used for resource-limited systems. Threats of information leakage, measurement poisoning and store-and-send-later can be considered.
Full Text Available

Similar Records

Title: Behavior specification, finding main, and call graph visualizations

Abstract

Citation Formats

Large-scale malware indexing using function-call graphs conference, January 2009

Large-scale malware indexing using function-call graphs
conference, January 2009