• 主题
高级搜索  >
历史搜索 清空历史
首页> 外文会议>Recent advances in intrusion detection >Automated Identification of Cryptographic Primitives in Binary Programs
【24h】

Automated Identification of Cryptographic Primitives in Binary Programs

机译：在二进制程序中自动识别密码基元

获取原文
获取原文并翻译 | 示例
页面导航
  • 摘要
  • 著录项
  • 相似文献
  • 相关主题

摘要

Identifying that a given binary program implements a specific cryptographic algorithm and finding out more information about the cryptographic code is an important problem. Proprietary programs and especially malicious software (so called malware) often use cryptography and we want to learn more about the context, e.g., which algorithms and keys are used by the program. This helps an analyst to quickly understand what a given binary program does and eases analysis. In this paper, we present several methods to identify cryptographic primitives (e.g., entire algorithms or only keys) within a given binary program in an automated way. We perform fine-grained dynamic binary analysis and use the collected information as input for several heuristics that characterize specific, unique aspects of cryptographic code. Our evaluation shows that these methods improve the state-of-the-art approaches in this area and that we can successfully extract cryptographic keys from a given malware binary.
机译：识别给定的二进制程序实现了特定的加密算法并找出有关加密代码的更多信息是一个重要的问题。专有程序，特别是恶意软件（所谓的恶意软件）通常使用加密技术，我们希望了解更多有关上下文的信息，例如，程序使用了哪些算法和密钥。这有助于分析人员快速了解给定二进制程序的功能并简化分析。在本文中，我们介绍了几种以自动方式在给定的二进制程序中识别密码原语（例如整个算法或仅密钥）的方法。我们执行细粒度的动态二进制分析，并将收集到的信息用作几种启发式方法的输入，这些启发式方法表征了加密代码的特定，独特方面。我们的评估表明，这些方法改进了该领域的最新技术，并且我们可以成功地从给定的恶意软件二进制文件中提取加密密钥。

著录项

相似文献

  • 外文文献
  • 中文文献
  • 专利
获取原文

客服邮箱：kefu@zhangqiaokeyan.com

京公网安备：11010802029741号 ICP备案号：京ICP备15016152号-6 六维联合信息科技 (北京) 有限公司©版权所有

  • 客服微信

  • 服务号