Cross-Architecture Binary Function Fingerprinting
By combining the SLEIGH decompiler in Ghidra with an machine learning-based technique we can fingerprint reused functions across processor architectures with high accuracy. This opens the door for reverse engineers and antivirus tools to more effectively identify vulnerable and malware code.
Authors
- Bhaskar Prasad Rimal (ORCID: https://orcid.org/0000-0001-7680-9293)
- Daniel Conte de Leon (ORCID: https://orcid.org/0000-0002-9857-3370)
- Corey M. Hartman
- Nirmal Budhathoki
Institutions
- Dakota State University (US)
- Microsoft (United States) (US)
- University of Idaho (US)
Publication Details
- Journal
- IEEE Security & Privacy
- Published
- 2024-10-09
- DOI
- https://doi.org/10.1109/msec.2024.3468153
- Primary Topic
- Digital Media Forensic Detection
- Type
- article
- Field-Weighted Citation Impact
- 0.00