NDLI: WYSINWYX: What you see is not what you eXecute

Content Provider	ACM Digital Library
Author	Balakrishnan, Gogul Reps, Thomas
Copyright Year	2010
Abstract	Over the last seven years, we have developed static-analysis methods to recover a good approximation to the variables and dynamically allocated memory objects of a stripped executable, and to track the flow of values through them. The article presents the algorithms that we developed, explains how they are used to recover Intermediate Representations (IRs) from executables that are similar to the IRs that would be available if one started from source code, and describes their application in the context of program understanding and automated bug hunting. Unlike algorithms for analyzing executables that existed prior to our work, the ones presented in this article provide useful information about memory accesses, even in the absence of debugging information. The ideas described in the article are incorporated in a tool for analyzing Intel x86 executables, called CodeSurfer/x86. CodeSurfer/x86 builds a system dependence graph for the program, and provides a GUI for exploring the graph by (i) navigating its edges, and (ii) invoking operations, such as forward slicing, backward slicing, and chopping, to discover how parts of the program can impact other parts. To assess the usefulness of the IRs recovered by CodeSurfer/x86 in the context of automated bug hunting, we built a tool on top of CodeSurfer/x86, called Device-Driver Analyzer for x86 (DDA/x86), which analyzes device-driver executables for bugs. Without the benefit of either source code or symbol-table/debugging information, DDA/x86 was able to find known bugs (that had been discovered previously by source-code analysis tools), along with useful error traces, while having a low false-positive rate. DDA/x86 is the first known application of program analysis/verification techniques to industrial executables.
Starting Page	1
Ending Page	84
Page Count	84
File Format	PDF
ISSN	01640925
e-ISSN	15584593
DOI	10.1145/1749608.1749612
Volume Number	32
Issue Number	6
Journal	ACM Transactions on Programming Languages and Systems (TOPLAS)
Language	English
Publisher	Association for Computing Machinery (ACM)
Publisher Date	2010-08-13
Publisher Place	New York
Access Restriction	One Nation One Subscription (ONOS)
Subject Keyword	Abstract interpretation Context-sensitive analysis Data structure recovery Interprocedural dataflow analysis Pointer analysis Reverse engineering Static analysis
Content Type	Text
Resource Type	Article
Subject	Software

Sl.	Authority	Responsibilities	Communication Details
1	Ministry of Education (GoI), Department of Higher Education	Sanctioning Authority	https://www.education.gov.in/ict-initiatives
2	Indian Institute of Technology Kharagpur	Host Institute of the Project: The host institute of the project is responsible for providing infrastructure support and hosting the project	https://www.iitkgp.ac.in
3	National Digital Library of India Office, Indian Institute of Technology Kharagpur	The administrative and infrastructural headquarters of the project	Dr. B. Sutradhar bsutra@ndl.gov.in
4	Project PI / Joint PI	Principal Investigator and Joint Principal Investigators of the project	Dr. B. Sutradhar bsutra@ndl.gov.in Prof. Saswat Chakrabarti will be added soon
5	Website/Portal (Helpdesk)	Queries regarding NDLI and its services	support@ndl.gov.in
6	Contents and Copyright Issues	Queries related to content curation and copyright issues	content@ndl.gov.in
7	National Digital Library of India Club (NDLI Club)	Queries related to NDLI Club formation, support, user awareness program, seminar/symposium, collaboration, social media, promotion, and outreach	clubsupport@ndl.gov.in
8	Digital Preservation Centre (DPC)	Assistance with digitizing and archiving copyright-free printed books	dpc@ndl.gov.in
9	IDR Setup or Support	Queries related to establishment and support of Institutional Digital Repository (IDR) and IDR workshops	idr@ndl.gov.in

Wysinwyx: what you see is not what you execute (2009).

A relational approach to interprocedural shape analysis

WYSINWYX: What You See Is Not What You eXecute (2005)

WYSINWYX: What You See Is Not What You eXecute (2010)

WYSINWYX: What You See Is Not What You eXecute (2005)

WYSINWYX: What You See Is Not What You eXecute (2005)

Making context-sensitive points-to analysis with heap cloning practical for the real world

Making context-sensitive points-to analysis with heap cloning practical for the real world

Selective X-Sensitive Analysis Guided by Impact Pre-Analysis

WYSINWYX: What you see is not what you eXecute

Similar Documents

Wysinwyx: what you see is not what you execute (2009).

A relational approach to interprocedural shape analysis

WYSINWYX: What You See Is Not What You eXecute (2005)

WYSINWYX: What You See Is Not What You eXecute (2010)

WYSINWYX: What You See Is Not What You eXecute (2005)

WYSINWYX: What You See Is Not What You eXecute (2005)

Making context-sensitive points-to analysis with heap cloning practical for the real world

Making context-sensitive points-to analysis with heap cloning practical for the real world

Selective X-Sensitive Analysis Guided by Impact Pre-Analysis

WYSINWYX: What you see is not what you eXecute