Publication Details

Accurate Retargetable Decompilation Using Additional Debugging Information

KŘOUSTEK Jakub, MATULA Peter, KONČICKÝ Jaromír and KOLÁŘ Dušan. Accurate Retargetable Decompilation Using Debug Information. In: Proceedings of the Sixth International Conference on Emerging Security Information, Systems and Technologies (SECURWARE'12). Rome: International Academy, Research, and Industry Association, 2012, pp. 79-84. ISBN 978-1-61208-209-7.
Czech title
Přesný rekonfigurovatelný zpětný překlad pomocí ladicích informací
Type
conference paper
Language
english
Authors
Křoustek Jakub, Ing. (DIFS FIT BUT)
Matula Peter, Ing. (FIT BUT)
Končický Jaromír, Ing. (FIT BUT)
Kolář Dušan, doc. Dr. Ing. (DIFS FIT BUT)
Keywords

decompilation, debugging information, PDB, DWARF, Lissom

Abstract

In this paper, we present an extension of an existing automatically generated retargetable decompiler that is capable to parse, process, and utilize compiler-generated debugging information. This tool can be used for dealing with several security-related issues (e.g., forensics, malware analysis, vulnerability detection). Additional debugging information is used for an accurate reconstruction of platform-dependent binary applications into a well-readable high-level-language representation. The proposed solution is platform and debugging-format independent. In present, two major debugging formats - DWARF and Microsoft PDB - are supported; the extracted information is used for a recovery of several high-level constructions (e.g., variables, functions and their arguments). The proposed concept was validated by experimental results.

Published
2012
Pages
79-84
Proceedings
Proceedings of the Sixth International Conference on Emerging Security Information, Systems and Technologies (SECURWARE'12)
Conference
The Sixth International Conference on Emerging Security Information, Systems and Technologies SECURWARE 2012, Rome, IT
ISBN
978-1-61208-209-7
Publisher
International Academy, Research, and Industry Association
Place
Rome, IT
BibTeX 
@INPROCEEDINGS{FITPUB10006,
   author = "Jakub K\v{r}oustek and Peter Matula and Jarom\'{i}r Kon\v{c}ick\'{y} and Du\v{s}an Kol\'{a}\v{r}",
   title = "Accurate Retargetable Decompilation Using Additional Debugging Information",
   pages = "79--84",
   booktitle = "Proceedings of the Sixth International Conference on Emerging Security Information, Systems and Technologies (SECURWARE'12)",
   year = 2012,
   location = "Rome, IT",
   publisher = "International Academy, Research, and Industry Association",
   ISBN = "978-1-61208-209-7",
   language = "english",
   url = "https://www.fit.vut.cz/research/publication/10006"
}
Back to top