Fast Cross-Platform Binary Code Similarity Detection Framework Based on CFGs Taking Advantage of NLP and Inductive GNN

扫码查看

原文链接

万方数据

外文摘要：Cross-platform binary code similarity detection aims at detecting whether two or more pieces of bina-ry code are similar or not.Existing approaches that combine control flow graphs(CFGs)-based function representa-tion and graph convolutional network(GCN)-based similarity analysis are the best-performing ones.Due to a large amount of convolutional computation and the loss of structural information,the use of convolution networks will in-evitably bring problems such as high overhead and sometimes inaccuracy.To address these issues,we propose a fast cross-platform binary code similarity detection framework that takes advantage of natural language processing(NLP)and inductive graph neural network(GNN)for basic blocks embedding and function representation respectively by simulating extracting structural features and temporal features.GNN's node-centric and small batch is a suitable training way for large CFGs,it can greatly reduce computational overhead.Various NLP basic block embedding models and GNNs are evaluated.Experimental results show that the scheme with long short term memory(LSTM)for basic blocks embedding and inductive learning-based GraphSAGE(GAE)for function representation outperforms the state-of-the-art works.In our framework,we can take only 45％overhead.Improve efficiency significantly with a small performance trade-off.

外文关键词：

Control flow graphNatural language processingInductive graph neural networkBinary code similarity detection

作者：

Jinxue PENG、Yong WANG、Jingfeng XUE、Zhenyan LIU

展开 >

作者单位：

School of Computer Science and Technology,Beijing Institute of Technology,Beijing 100081,China

基金：

National Natural Science Foundation of ChinaMajor Scientific and Technological Innovation Projects of Shandong Province

项目编号：

621720422020CXGC010116

出版年：

2024

DOI：

10.23919/cje.2022.00.228

电子学报(英文)

CSTPCDEI

ISSN：1022-4653

年,卷(期)：2024.33(1)

参考文献量44