Static Analysis of JNI Programs via Binary Decompilation

计算机科学 程序设计语言 源代码 静态分析 Java 静态程序分析 操作系统 软件 软件开发
作者
Ji-Hee Park,Sungho Lee,Jaemin Hong,Sukyoung Ryu
出处
期刊:IEEE Transactions on Software Engineering [IEEE Computer Society]
卷期号:49 (5): 3089-3105 被引量:9
标识
DOI:10.1109/tse.2023.3241639
摘要

JNI programs are widely used thanks to the combined benefits of C and Java programs. However, because understanding the interaction behaviors between two different programming languages is challenging, JNI program development is difficult to get right and vulnerable to security attacks. Thus, researchers have proposed static analysis of JNI program source code to detect bugs and security vulnerabilities in JNI programs. Unfortunately, such source code analysis is not applicable to compiled JNI programs that are not open-sourced or open-source JNI programs containing third-party binary libraries. While JN-SAF, the state-of-the-art analyzer for compiled JNI programs, can analyze binary code, it has several limitations due to its symbolic execution and summary-based bottom-up analysis. In this paper, we propose a novel approach to statically analyze compiled JNI programs without their source code using binary decompilation. Unlike JN-SAF that analyzes binaries directly, our approach decompiles binaries and analyzes JNI programs with the decompiled binaries using an existing JNI program analyzer for source code. To decompile binaries to compilable C source code with precise JNI-interoperation-related types, we improve an existing decompilation tool by leveraging the characteristics of JNI programs. Our evaluation shows that the approach is precise as almost the same as the state-of-the-art JNI program analyzer for source code, and more precise than JN-SAF.
最长约 10秒,即可获得该文献文件

科研通智能强力驱动
Strongly Powered by AbleSci AI
更新
PDF的下载单位、IP信息已删除 (2025-6-4)

科研通是完全免费的文献互助平台,具备全网最快的应助速度,最高的求助完成率。 对每一个文献求助,科研通都将尽心尽力,给求助人一个满意的交代。
实时播报
znn发布了新的文献求助10
刚刚
桐桐应助昵昵昵昵呀采纳,获得10
1秒前
log发布了新的文献求助10
1秒前
TGU2331161488发布了新的文献求助10
1秒前
1秒前
明理的霸完成签到,获得积分10
2秒前
3秒前
3秒前
yue957完成签到,获得积分10
3秒前
今后应助csu_zs采纳,获得10
3秒前
大个应助帅气的可乐采纳,获得10
5秒前
大宝慧发布了新的文献求助10
5秒前
5秒前
晴天完成签到,获得积分10
6秒前
FireNow完成签到,获得积分10
6秒前
7秒前
温热如河应助zhangyu采纳,获得10
7秒前
xy完成签到,获得积分10
7秒前
Lucas应助付品聪采纳,获得10
7秒前
yue957发布了新的文献求助10
7秒前
希望天下0贩的0应助77采纳,获得10
8秒前
zzr真真97发布了新的文献求助10
8秒前
8秒前
狄谷南完成签到,获得积分10
8秒前
脑洞疼应助潘2333采纳,获得10
8秒前
SciGPT应助Chong采纳,获得10
9秒前
9秒前
10秒前
正直的沛凝完成签到,获得积分10
10秒前
科研通AI2S应助Wu采纳,获得10
10秒前
CodeCraft应助lmg采纳,获得10
11秒前
基尔霍夫完成签到,获得积分10
11秒前
11秒前
CR7应助Yue采纳,获得20
11秒前
haha发布了新的文献求助10
12秒前
我是老大应助开放雪曼采纳,获得10
12秒前
彩色的向珊完成签到,获得积分20
12秒前
kx发布了新的文献求助10
13秒前
Avert.发布了新的文献求助30
13秒前
13秒前
高分求助中
Picture Books with Same-sex Parented Families: Unintentional Censorship 700
ACSM’s Guidelines for Exercise Testing and Prescription, 12th edition 500
Nucleophilic substitution in azasydnone-modified dinitroanisoles 500
不知道标题是什么 500
Indomethacinのヒトにおける経皮吸収 400
Phylogenetic study of the order Polydesmida (Myriapoda: Diplopoda) 370
Effective Learning and Mental Wellbeing 300
热门求助领域 (近24小时)
化学 材料科学 医学 生物 工程类 有机化学 生物化学 物理 内科学 纳米技术 计算机科学 化学工程 复合材料 遗传学 基因 物理化学 催化作用 冶金 细胞生物学 免疫学
热门帖子
关注 科研通微信公众号,转发送积分 3974712
求助须知:如何正确求助?哪些是违规求助? 3519159
关于积分的说明 11197254
捐赠科研通 3255257
什么是DOI,文献DOI怎么找? 1797724
邀请新用户注册赠送积分活动 877130
科研通“疑难数据库(出版商)”最低求助积分说明 806132