作者投稿和查稿 主编审稿 专家审稿 编委审稿 远程编辑

计算机工程 ›› 2010, Vol. 36 ›› Issue (21): 31-33,36. doi: 10.3969/j.issn.1000-3428.2010.21.011

• 软件技术与数据库 • 上一篇    下一篇

基于可执行代码中间表示的控制流分析

窦增杰,王震宇,陈 楠,王瑞敏,田 佳   

  1. (解放军信息工程大学信息工程学院,郑州 450002)
  • 出版日期:2010-11-05 发布日期:2010-11-03
  • 作者简介:窦增杰(1983-),男,硕士研究生,主研方向:信息安全,可信计算;王震宇,副教授;陈 楠、王瑞敏、田 佳,硕士研 究生
  • 基金资助:
    国家“863”计划基金资助项目(2007AA01Z483);河南省高新领域重点攻关基金资助项目(082102210011)

Control Flow Analysis Based on Intermediate Representation of Executable Code

DOU Zeng-jie, WANG Zhen-yu, CHEN Nan, WANG Rui-min, TIAN Jia   

  1. (Institute of Information Engineering, PLA Information Engineering University, Zhengzhou 450002, China)
  • Online:2010-11-05 Published:2010-11-03

摘要: 为准确刻画程序的控制流和正确地提取程序控制结构,给出可执行代码控制流分析的整体架构和算法,阐述可执行代码反汇编结果的抽象表示、程序控制流构造等技术。反汇编结果抽象表示采用简化汇编语言中间表示(SAIR)以保证分析的简洁性和严密性。基于SAIR给出程序控制流构造函数,设计程序控制流构造算法并给出分析实例。

关键词: 逆向分析, 中间表示, 控制流, 抽象表示

Abstract: In order to analyze program control flow precisely and depict program control structure correctly, this paper introduces an overall architecture for control flow analysis and proposes an algorithm to generate the control flow of executable code. Key techniques such as abstraction of executable code and program control flow generation are described. Simple Assembly language Intermediate Representation(SAIR) is presented. Without changing semantics of the disassembly code, SAIR ensures thesimplicity and stringentness of analysis. The functions that create program control flow are defined based on SAIR and the algorithm that generates the control flow is proposed. The example of analyzing program control flow is given.

Key words: reverse analysis, intermediate representation, control flow, abstract representation

中图分类号: