Library Function Identification

Saed Alrabaee; Mourad Debbabi; Paria Shirani; Lingyu Wang; Amr Youssef; Ashkan Rahimian; Lina Nouh; Djedjiga Mouheb; He Huang; Aiman Hanna

doi:10.1007/978-3-030-34238-8_4

Library Function Identification

Saed Alrabaee, Mourad Debbabi, Paria Shirani, Lingyu Wang, Amr Youssef, Ashkan Rahimian, Lina Nouh, Djedjiga Mouheb, He Huang, Aiman Hanna

Department of Information System and Security

Research output: Chapter in Book/Report/Conference proceeding › Chapter

Abstract

Program binaries typically contain a significant amount of library functions taken from standard libraries or free open-source software packages. Automatically identifying such library functions not only enhances the quality and efficiency of threat analysis and reverse engineering tasks, but also improves their accuracy by avoiding false correlations between irrelevant code bases. Furthermore, such automation has a strong positive impact in other applications such as clone detection, function fingerprinting, authorship attribution, vulnerability analysis, and malware analysis.

Original language	English
Title of host publication	Advances in Information Security
Publisher	Springer
Pages	79-99
Number of pages	21
DOIs	https://doi.org/10.1007/978-3-030-34238-8_4
Publication status	Published - 2020

Publication series

Name	Advances in Information Security
Volume	78
ISSN (Print)	1568-2633

ASJC Scopus subject areas

Information Systems
Computer Networks and Communications

Access to Document

10.1007/978-3-030-34238-8_4

Cite this

@inbook{2ec7bb4a20884c88a2c98a96826de836,

title = "Library Function Identification",

abstract = "Program binaries typically contain a significant amount of library functions taken from standard libraries or free open-source software packages. Automatically identifying such library functions not only enhances the quality and efficiency of threat analysis and reverse engineering tasks, but also improves their accuracy by avoiding false correlations between irrelevant code bases. Furthermore, such automation has a strong positive impact in other applications such as clone detection, function fingerprinting, authorship attribution, vulnerability analysis, and malware analysis.",

author = "Saed Alrabaee and Mourad Debbabi and Paria Shirani and Lingyu Wang and Amr Youssef and Ashkan Rahimian and Lina Nouh and Djedjiga Mouheb and He Huang and Aiman Hanna",

note = "Publisher Copyright: {\textcopyright} 2020, Springer Nature Switzerland AG.",

year = "2020",

doi = "10.1007/978-3-030-34238-8_4",

language = "English",

series = "Advances in Information Security",

publisher = "Springer",

pages = "79--99",

booktitle = "Advances in Information Security",

}

TY - CHAP

T1 - Library Function Identification

AU - Alrabaee, Saed

AU - Debbabi, Mourad

AU - Shirani, Paria

AU - Wang, Lingyu

AU - Youssef, Amr

AU - Rahimian, Ashkan

AU - Nouh, Lina

AU - Mouheb, Djedjiga

AU - Huang, He

AU - Hanna, Aiman

PY - 2020

Y1 - 2020

N2 - Program binaries typically contain a significant amount of library functions taken from standard libraries or free open-source software packages. Automatically identifying such library functions not only enhances the quality and efficiency of threat analysis and reverse engineering tasks, but also improves their accuracy by avoiding false correlations between irrelevant code bases. Furthermore, such automation has a strong positive impact in other applications such as clone detection, function fingerprinting, authorship attribution, vulnerability analysis, and malware analysis.

AB - Program binaries typically contain a significant amount of library functions taken from standard libraries or free open-source software packages. Automatically identifying such library functions not only enhances the quality and efficiency of threat analysis and reverse engineering tasks, but also improves their accuracy by avoiding false correlations between irrelevant code bases. Furthermore, such automation has a strong positive impact in other applications such as clone detection, function fingerprinting, authorship attribution, vulnerability analysis, and malware analysis.

UR - http://www.scopus.com/inward/record.url?scp=85080874394&partnerID=8YFLogxK

UR - http://www.scopus.com/inward/citedby.url?scp=85080874394&partnerID=8YFLogxK

U2 - 10.1007/978-3-030-34238-8_4

DO - 10.1007/978-3-030-34238-8_4

M3 - Chapter

AN - SCOPUS:85080874394

T3 - Advances in Information Security

SP - 79

EP - 99

BT - Advances in Information Security

PB - Springer

ER -

Library Function Identification

Abstract

Publication series

ASJC Scopus subject areas

Access to Document

Other files and links

Fingerprint

Cite this