检索结果-内蒙古大学图书馆

Is JavaScript Call Graph Extraction Solved Yet? A Comparative Study of Static and dynamic Tools

IEEE ACCESS 2023年 11卷 25266-25284页

作者： Antal, Gabor Hegedus, Peter Herczeg, Zoltan Loki, Gabor Ferenc, Rudolf Univ Szeged Dept Software Engn H-6720 Szeged Hungary

code analysis is more important than ever because JavaScript is increasingly popular and actively used, both on the client and server sides. Most algorithms for analyzing vulnerabilities, finding coding issues, or inferring type depend on the call graph representation of the underlying program. Luckily, there are quite a few tools to get this job done already. However, their performance in vitro and especially in vivo has not yet been extensively compared and evaluated. In this paper, we compare several approaches for building JavaScript call graphs, namely five static and two dynamic approaches on 26 WebKit SunSpider programs, and two static and two dynamic approaches on 12 real-world *** programs. The tools under examination using static techniques were npm call graph, IBM WALA, Google Closure Compiler, Approximate Call Graph, and Type Analyzer for JavaScript. We performed dynamic analyzes relying on the nodejs-cg tool (a customized *** runtime) and the NodeProf instrumentation and profiling framework. We provide a quantitative evaluation of the results, and a result quality analysis based on 941 manually validated call edges. On the SunSpider programs, which do not take any inputs, so dynamic extraction could be complete, all the static tools also performed well. For example, TAJS found 93% of all edges while having a 97% precision compared to the precise dynamic call graph. When it comes to real-world *** modules, our evaluation shows that static tools struggle with parsing the code and fail to detect a significant amount of call edges that dynamic approaches can capture. Nonetheless, a significant number of edges not detected by dynamic approaches are also reported. Among these, however, there are also edges that are real, but for some reason the unit tests did not execute the branches in which these calls were included.

关键词： Image edge detection codes Performance analysis Source coding Static analysis Servers Call graph comparative study dynamic code analysis JavaScript static code analysis

来源：评论

学校读者我要写书评

暂无评论

Hard-Detours: a New Technique for dynamic code analysis

Hard-Detours: a New Technique for Dynamic Code Analysis

引用

IEEE EUROCON Conference

作者： El-Mal, A. Osama Abo Sobh, M. Ali Eldin, Ayman M. Bahaa Ain Shams Univ Comp & Syst Dept Cairo Egypt

ISBN: (纸本)9781467322324;9781467322300

dynamic code analysis for malware detection has become the heart of modern security tools. Some researchers target Microsoft Detours system to perform the dynamic analysis in window environment. This paper reveals some weakness in Microsoft Detours system. It introduces a mechanism (Anti-Detours) to escape from the code analysis trap. The paper proposes a new technique (Hard-Detours) to perform the dynamic code analysis. It intercepts the communication between the application and the system. The interception mechanism depends on the nature of each system call, to avoid detection, removal and bypassing techniques. The proposed technique is implemented for windows 32 Bit Portable Executables. Both analysis techniques are tested over a set of executables with and without the breaking mechanism.

关键词： code analysis Microsoft Detours Hard Detours dynamic code analysis API interception

来源：评论

学校读者我要写书评

暂无评论

dynamic code Whitelist for Efficient analysis of Android code 18

Dynamic Code Whitelist for Efficient Analysis of Android Cod...

引用

Conference on Research in Adaptive and Convergent Systems (RACS)

作者： Choi, Jeongwoo Kim, Yongmin Lee, Jinwoo Hong, Jiman Soongsil Univ Seoul South Korea

ISBN: (纸本)9781450358859

Recently, as the number of malicious codes targeting Android platform is increasing, various researches are conducted to analyze them. However, Android applications tend to include various 3rd-party libraries which makes difficult to accurate analysis and takes long time. In this paper, we propose a dynamic code whitelist structure that excludes unnecessary 3rd-party libraries code. By using the proposed structures, we can efficiently analyze the malicious code in Android applications.

关键词： Whitelist Database Android 3rd-party library dynamic code analysis

来源：评论

学校读者我要写书评

暂无评论

UnSafengine64: A Safengine Unpacker for 64-Bit Windows Environments and Detailed analysis Results on Safengine 2.4.0

引用

SENSORS 2024年第3期24卷 840页

作者： Choi, Seokwoo Chang, Taejoo Park, Yongsu Affiliated Inst ETRI POB 1 Daejeon 305600 South Korea Hanyang Univ Dept Comp Sci Wangshimriro 222 Seoul 04763 South Korea

Despite recent remarkable advances in binary code analysis, malware developers still use complex anti-reversing techniques that make analysis difficult. Packers are used to protect malware, which are (commercial) tools that contain diverse anti-reversing techniques, including code encryption, anti-debugging, and code virtualization. In this study, we present UnSafengine64: a Safengine unpacker for 64-bit Windows. UnSafengine64 can correctly unpack packed executables using Safengine, which is considered one of the most complex commercial packers in Windows environments;to the best of our knowledge, there have been no published analysis results. UnSafengine64 was developed as a plug-in for Pin, which is one of the most widely used dynamic analysis tools for Microsoft Windows. In addition, we utilized Detect It Easy (DIE), IDA Pro, x64Dbg, and x64Unpack as auxiliary tools for deep analysis. Using UnSafengine64, we can analyze obfuscated calls for major application programming interface (API) functions or conduct fine-grained analyses at the instruction level. Furthermore, UnSafengine64 detects anti-debugging code chunks, captures a memory dump of the target process, and unpacks packed files. To verify the effectiveness of our scheme, experiments were conducted using Safengine 2.4.0. The experimental results show that UnSafengine64 correctly executes packed executable files and successfully produces an unpacked version. Based on this, we provided detailed analysis results for the obfuscated executable file generated using Safengine 2.4.0.

关键词： anti-forensics code obfuscation dynamic code analysis software reverse engineering computer security

来源：评论

学校读者我要写书评

暂无评论

Digital Transformation and the Role of dynamic Tooling in Extracting Microservices from Existing Software Systems 28th

Digital Transformation and the Role of Dynamic Tooling in Ex...

引用

28th European Conference on Systems, Software and Services Process Improvement (EuroSPI)

作者： Lapuz, Neil Clarke, Paul Abgaz, Yalemisew Dublin City Univ Dublin Ireland SFI Res Ctr Software Lero Dublin Ireland

ISBN: (纸本)9783030855215;9783030855208

The emergence of microservices architecture has promised to offer scalable, maintainable, evolvable, agile, and failure-resilient software products attracting software companies to migrate their legacy systems to a microservices architecture. However, the migration process imposes a technical challenge to effectively identify potential microservice candidates from medium and large monolithic codebases. In recent years, automatic and semi-automatic migration methods analysing the static and the dynamic behaviour of monoliths at runtime are getting a growing attention. Along with the methods, dynamic data collection tools are proposed. In this paper, we systematically review, compare, and contrast dynamic data collection tools using criteria that were developed from existing studies on monolithic to microservice migration. We identified eight dynamic data collection tools and analysed the features using four open source codebases from Github. The paper further presents an in-depth study of two fitting tools applying them over the selected codebases. Such analysis enables researchers and practitioners to make informed decisions in the selection of dynamic data collection tools to automatically/semi-automatically migrate legacy codebases.

关键词： dynamic data collection tools Monolith to microservices migration dynamic data analysis tools dynamic code analysis

来源：评论

学校读者我要写书评

暂无评论

Hard-Detours: a New Technique for dynamic code analysis

Hard-Detours: a New Technique for Dynamic Code Analysis

引用

IEEE EUROCON

作者： A. Osama Abo El-Mal M. Ali Sobh Ayman M. Bahaa Eldin Computer & Systems Department Ain-Shams University

ISBN: (纸本)9781467322331

关键词： code analysis Microsoft Detours Hard Detours dynamic code analysis API interception

来源：评论

学校读者我要写书评

暂无评论

Towards Fault Localization via Probabilistic Software Modeling 3

Towards Fault Localization via Probabilistic Software Modeli...

引用

3rd IEEE International Workshop on Validation, analysis, and Evolution of Software Tests (VST)

作者： Thaller, Hannes Linsbauer, Lukas Egyed, Alexander Fischer, Stefan Johannes Kepler Univ Linz Inst Software Syst Engn Linz Austria Software Competence Ctr Hagenberg GmbH Hagenberg Austria

ISBN: (纸本)9781728162713

Software testing helps developers to identify bugs. However, awareness of bugs is only the first step. Finding and correcting the faulty program components is equally hard and essential for high-quality software. Fault localization automatically pinpoints the location of an existing bug in a program. It is a hard problem, and existing methods are not yet precise enough for widespread industrial adoption. We propose fault localization via Probabilistic Software Modeling (PSM). PSM analyzes the structure and behavior of a program and synthesizes a network of Probabilistic Models (PMs). Each PM models a method with its inputs and outputs and is capable of evaluating the likelihood of runtime data. We use this likelihood evaluation to find fault locations and their impact on dependent code elements. Results indicate that PSM is a robust framework for accurate fault localization.

关键词： fault localization probabilistic modeling multivariate testing software modeling static code analysis dynamic code analysis runtime monitoring inference simulation deep learning

来源：评论

学校读者我要写书评

暂无评论

Towards Semantic Clone Detection via Probabilistic Software Modeling 14

Towards Semantic Clone Detection via Probabilistic Software ...

引用

IEEE 14th International Workshop on Software Clones (IWSC)

作者： Thaller, Hannes Linsbauer, Lukas Egyed, Alexander Johannes Kepler Univ Linz Inst Software Syst Engn Linz Austria

ISBN: (数字)9781728162690

ISBN: (纸本)9781728162690

Semantic clones are program components with similar behavior, but different textual representation. Semantic similarity is hard to detect, and semantic clone detection is still an open issue. We present semantic clone detection via Probabilistic Software Modeling (PSM) as a robust method for detecting semantically equivalent methods. PSM inspects the structure and runtime behavior of a program and synthesizes a network of Probabilistic Models (PMs). Each PM in the network represents a method in the program and is capable of generating and evaluating runtime events. We leverage these capabilities to accurately find semantic clones. Results show that the approach can detect semantic clones in the complete absence of syntactic similarity with high precision and low error rates.

关键词： clone detection semantic clone detection probabilistic modeling multivariate testing software modeling static code analysis dynamic code analysis runtime monitoring inference simulation deep learning

来源：评论

学校读者我要写书评

暂无评论

Design and Implementation of Preprocessor for dynamic analysis of Sports Information 10th

Design and Implementation of Preprocessor for Dynamic Analys...

引用

iCatse International Conference on Information Science and Applications (ICISA)

作者： Kim, Hyuncheol Namseoul Univ Dept Comp Software Cheonan South Korea

ISBN: (纸本)9789811514654;9789811514647

Recently, due to the appearance of various types of malware, the existing static analysis exposes many limitations. Static analysis means analyzing the structure of a code or program with source code or object code without actually executing the (malicious) code. On the other hand, dynamic analysis in the field of information security generally refers to a form that directly executes and analyzes (malware) code and compares and examines and analyzes the state before and after execution of (malware) code to grasp the execution flow of the program. However, dynamic analysis required analyzing huge amounts of data and logs, and it was difficult to actually store all execution flows. Intel Processor Trace (PT) is a new hardware-based tracing that tracks branches running on the CPU, allowing you to reconfigure the control flow of any executable code with minimal effort. These hardware trace functions are integrated into the operating system, enabling tight integration with profiling and debugging mechanisms. In this paper, we propose and implement a preprocessor architecture of a system that performs malware detection and realtime multi-dynamic analysis based on 2nd generation PT in Windows environment (Windows 10 R5 and above).

关键词： Processor Trace dynamic code analysis

来源：评论

学校读者我要写书评

暂无评论

x64Unpack: Hybrid Emulation Unpacker for 64-bit Windows Environments and Detailed analysis Results on VMProtect 3.4

引用

IEEE ACCESS 2020年 8卷 127939-127953页

作者： Choi, Seokwoo Chang, Taejoo Kim, Changhyun Park, Yongsu ETRI Affiliated Inst Daejeon 305600 South Korea Hanyang Univ Dept Comp Sci Seoul 04763 South Korea

In spite of recent remarkable advances in binary code analysis, malware developers are still using complex anti-reversing techniques to make analysis difficult. To protect malware, they use packers, which are (commercial) tools that contain various anti-reverse engineering techniques such as code encryption, anti-debugging, and code virtualization. In this paper, we present x64Unpack: a hybrid emulation scheme that makes it easier to analyze packed executable files and automatically unpacks them in 64-bit Windows environments. The most distinguishable feature of x64Unpack compared to other dynamic analysis tools is that x64Unpack and the target program share virtual memory to support both instruction emulation and direct execution. Emulation runs slow but provides detailed information, whereas direct execution of the code chunk runs very fast and can handle complex cases regarding to operating systems or hardware devices. With x64Unpack, we can monitor major API (Application Programming Interface) function calls or conduct fine-grained analysis at the instruction-level. Furthermore, x64Unpack can detect anti-debugging code chunks, dump memory, and unpack the packed files. To verify the effectiveness of x64Unpack, experiments were conducted on the obfuscation tools: UPX 3.95, MPRESS 2.19, Themida 2.4.6, and VMProtect 3.4. Especially, VMProtect and Themida are considered as some of the most complex commercial packers in 64-bit Windows environments. Experimental results show that x64Unpack correctly emulates the packed executable files and successfully produces the unpacked version. Based on this, we provide the detailed analysis results on the obfuscated executable file that was generated by VMProtect 3.4.

关键词： Anti-forensics code obfuscation computer security dynamic code analysis reverse engineering

来源：评论

学校读者我要写书评

暂无评论

建议与咨询留下您的常用邮箱和电话号码，以便我们向您反馈解决方案和替代方法

时间限定

文献类型

馆藏选择

核心期刊

语言

文献类型

帮助

文字说明：

检索规则说明：

检索范例：

分类表

所选分类

限定检索结果

文献类型

馆藏范围

日期分布

学科分类号

主题

机构

作者

语言

请选择保存的检索档案：

请选择收藏分类：

通借通还

建议与咨询 留下您的常用邮箱和电话号码，以便我们向您反馈解决方案和替代方法

时间限定

文献类型

馆藏选择

核心期刊

语言

文献类型

帮助

文字说明：

检索规则说明：

检索范例：

分类表

所选分类

限定检索结果

文献类型

馆藏范围

日期分布

学科分类号

主题

机构

作者

语言

请选择保存的检索档案： 新增检索档案 确定 取消

请选择收藏分类： 新增自定义分类 确定 取消

通借通还

建议与咨询留下您的常用邮箱和电话号码，以便我们向您反馈解决方案和替代方法

请选择保存的检索档案：

请选择收藏分类：