摘要
由于动静态分析相结合的软件逆向分析方法缺乏规范的交互模式,软件逆向分析工作的效率低下,可复用性不强。基于嵌入式软件动静态分析流程,提出了由静至动(STD)、由动至静(DTS)以及动静结合(SDM)的3种动静态分析交互机制,详细给出了3种交互机制的实现方法。测试结果表明,STD、DTS和SDM交互机制适用于静态分析结果中异常结点的修正,动态提取信息的优化以及隐藏代码的识别等,能大幅提高嵌入式软件逆向分析工作的效率。
Due to the lack of standard interactive modes in the procedure of static and dynamic com-bined software reverse analysis, the reverse analysis efficiency is very low and the reusability isweak. Based on the static and dynamic analysis procedures in embedded platforms, three interactivemechanisms are proposed, which are Static To Dynamic （STD） , Dynamic To Static （DTS） , Staticand Dynamic Simultaneous （SDM） , and the realization details are given. Test results show that themechanisms of STD, DTS, SDM are applicable to static abnormal results correction, dynamic extractinformation optimization, and hidden codes identification, and thus can greatly increase the efficien-cy of embedded software reverse analysis.
出处
《信息工程大学学报》
2015年第5期613-618,共6页
Journal of Information Engineering University
关键词
软件逆向分析
静态分析
动态分析
动静结合
交互机制
software reverse analysis
static analysis
dynamic analysis
the combination of staticand dynamic analysis
interactive mechanism
