Publication Details

Generic detection of the statically linked code

ĎURFINA Lukáš and KOLÁŘ Dušan. Generic detection of the statically linked code. In: Proceedings of the Twelfth International Conference on Informatics INFORMATICS 2013. Spišská Nová Ves: Faculty of Electrical Engineering and Informatics, University of Technology Košice, 2013, pp. 157-161. ISBN 978-80-8143-127-2. Available from: http://informatics.kpi.fei.tuke.sk/
Czech title
Generická detekcia staticky linkovaného kódu
Type
conference paper
Language
english
Authors
Ďurfina Lukáš, Ing. (DIFS FIT BUT)
Kolář Dušan, doc. Dr. Ing. (DIFS FIT BUT)
URL
Keywords

statically linked code, signature, detection

Abstract
Detection of a statically linked code is an important step in a process of decompilation. It eliminates a code, which has to be processed by decompiler. It provides an additional information about recognized code as linked functions with the types and number of arguments and return values. The detection is based on signatures, which are generated from the static libraries. The signatures are composed of the first bytes of library modules, CRC codes, module sizes, and public symbols. A tree structure of signature improves performance by decreasing a number of compared bytes. Generic approach of detection is achieved by an usage of a common object file format. This ensures that the process is not restricted on specific architecture or file format. However, this lightly increases a number of functions, which cannot be distinguished.
Published
2013
Pages
157-161
Proceedings
Proceedings of the Twelfth International Conference on Informatics INFORMATICS 2013
Conference
Informatics 2013 - 12th International Scientific Conference on Informatics, Spišská Nová Ves, SK
ISBN
978-80-8143-127-2
Publisher
Faculty of Electrical Engineering and Informatics, University of Technology Košice
Place
Spišská Nová Ves, SK
BibTeX 
@INPROCEEDINGS{FITPUB10461,
   author = "Luk\'{a}\v{s} \v{D}urfina and Du\v{s}an Kol\'{a}\v{r}",
   title = "Generic detection of the statically linked code",
   pages = "157--161",
   booktitle = "Proceedings of the Twelfth International Conference on Informatics INFORMATICS 2013",
   year = 2013,
   location = "Spi\v{s}sk\'{a} Nov\'{a} Ves, SK",
   publisher = "Faculty of Electrical Engineering and Informatics, University of Technology Ko\v{s}ice",
   ISBN = "978-80-8143-127-2",
   language = "english",
   url = "https://www.fit.vut.cz/research/publication/10461"
}
Back to top