Conference paper

 
Křoustek, J., Matula, P., Končický, J., Kolář, D.: Accurate Retargetable Decompilation Using Debug Information, In: Proceedings of the Sixth International Conference on Emerging Security Information, Systems and Technologies (SECURWARE'12), Rome, IT, IARIA, 2012, p. 79-84, ISBN 978-1-61208-209-7
Publication language:english
Original title:Accurate Retargetable Decompilation Using Additional Debugging Information
Title (cs):Přesný rekonfigurovatelný zpětný překlad pomocí ladicích informací
Pages:79-84
Proceedings:Proceedings of the Sixth International Conference on Emerging Security Information, Systems and Technologies (SECURWARE'12)
Conference:The Sixth International Conference on Emerging Security Information, Systems and Technologies SECURWARE 2012
Place:Rome, IT
Year:2012
ISBN:978-1-61208-209-7
Publisher:International Academy, Research, and Industry Association
Keywords
decompilation, debugging information, PDB, DWARF, Lissom
Annotation
In this paper, we present an extension of an existing automatically generated retargetable decompiler that is capable to parse, process, and utilize compiler-generated debugging information. This tool can be used for dealing with several security-related issues (e.g., forensics, malware analysis, vulnerability detection). Additional debugging information is used for an accurate reconstruction of platform-dependent binary applications into a well-readable high-level-language representation. The proposed solution is platform and debugging-format independent. In present, two major debugging formats - DWARF and Microsoft PDB - are supported; the extracted information is used for a recovery of several high-level constructions (e.g., variables, functions and their arguments). The proposed concept was validated by experimental results.
BibTeX:
@INPROCEEDINGS{
   author = {Jakub Křoustek and Peter Matula and Jaromír Končický and
	Dušan Kolář},
   title = {Accurate Retargetable Decompilation Using Additional
	Debugging Information},
   pages = {79--84},
   booktitle = {Proceedings of the Sixth International Conference on
	Emerging Security Information, Systems and Technologies
	(SECURWARE'12)},
   year = {2012},
   location = {Rome, IT},
   publisher = {International Academy, Research, and Industry Association},
   ISBN = {978-1-61208-209-7},
   language = {english},
   url = {http://www.fit.vutbr.cz/research/view_pub.php?id=10006}
}