声明式需求驱动的逆向工程
Declarative Demand-Driven Reverse Engineering
摘要：
二进制逆向工程是一项具有挑战性的任务，因为它通常需要使用领域特定知识（例如，理解ABI常见的入口点习惯用法）和逻辑推理（例如，重构过程间控制流）。为了帮助执行这些任务，逆向工程师经常使用工具包（如IDA Pro或Ghidra），这些工具包允许他们交互式地解释二进制文件的属性。我们认为，演绎数据库作为一个自然的抽象之间的接口可视化为基础的二进制分析工具和高性能的逻辑推理引擎，计算有关二进制文件的事实。在本文中，我们提出了一个未来的愿景，逆向工程师使用基于可视化的工具来理解二进制文件，同时查询逻辑推理引擎执行任意复杂的演绎推理任务。我们称我们的愿景为声明性需求驱动的逆向工程（简称D^3RE），并勾勒出一个正式的语义，其目标是调解逻辑推理引擎（如Souffle）和逆向工程工具之间的交互。我们描述了一个原型工具，d3re，这是用来探索D^3RE愿景。虽然仍然是一个原型，但我们已经使用d3re在二进制文件上重新实现了几个常见的查询任务。我们的评估表明，d3re使更好的性能和更简洁的实现这些常见的RE任务。
英文摘要：
Binary reverse engineering is a challenging task because it often necessitates reasoning using both domain-specific knowledge (e.g., understanding entrypoint idioms common to an ABI) and logical inference (e.g., reconstructing interprocedural control flow). To help perform these tasks, reverse engineers often use toolkits (such as IDA Pro or Ghidra) that allow them to interactively explicate properties of binaries. We argue that deductive databases serve as a natural abstraction for interfacing between visualization-based binary analysis tools and high-performance logical inference engines that compute facts about binaries. In this paper, we present a vision for the future in which reverse engineers use a visualization-based tool to understand binaries while simultaneously querying a logical-inference engine to perform arbitrarily-complex deductive inference tasks. We call our vision declarative demand-driven reverse engineering (D^3RE for short), and sketch a formal semantics whose goal is to mediate interaction between a logical-inference engine (such Souffle) and a reverse engineering tool. We describe aprototype tool, d3re, which are using to explore the D^3RE vision. While still a prototype, we have used d3re to reimplement several common querying tasks on binaries. Our evaluation demonstrates that d3re enables both better performance and more succinct implementation of these common RE tasks.
机构、总结、中文摘要均由AI分析而来，可能存在错误，请以论文正文为准。
