基于路径驱动的多路径分析算法

摘要

To solve the problem in dynamic analysis for binary program that not all program execution paths can be explored, a algorithm based on execution path driven was presented. The main idea of the algorithm is to run the program in a controllable simulation instrument environment,and drive it to execute the program paths that can't be executed under current input set by modifying the value of program counter (PC), so that multiple execution paths can be explored. Based on this algorithms prototype system of dynamic analysis for binary based on execution path driven was designed and implemented. Experiments results illustrate that the algorithm is effective in exploring execution path from binary program.%针对动态二进制程序分析方法存在路径覆盖不全的问题,提出了基于路径驱动的多路径分析算法.其核心思想是在可控的模拟调试环境中动态执行被分析的二进制程序,通过修改CPU程序计数器PC值,驱动程序执行在当前输入条件下无法访问的程序路径,实现对多条程序路径的访问.基于该算法,设计并实现了一个基于路径驱动的多路径二进制程序分析系统.测试结果表明,该算法能够较全面地发掘程序执行路径,有效提高了分析代码的覆盖率.