基于执行路径的嵌入式计量软件后门检测

An Approach to Detect Embedded Software′s Backdoor Based on Execution-path

方便高效的嵌入式计量软件后门检测是打击不法经营、加强计量监督的重要手段。在分析一般的软件后门检测方法和二进制可执行程序检测方法的基础上,针对一般软件后门检测方法的不足,提出了基于执行路径,通过动态运行二进制可执行程序,检测计量器具中是否存在通过作弊命令触发作弊行为的后门程序。首先定义了程序的执行路径,然后基于命令树设计了执行路径跟踪算法,最后通过例子说明了该方法的有效性。

It is an important method to crack down illegal business and enhance metric supervision by detec ting embedded software backdoor. The paper proposed an execution-path-based testing method that decides whether a binary execution software exist in backdoors. Firstly it defined what the execution path is, and then designed a path tracking algorithm based on command tree. Finally it illustrated the effectiveness of the method.