一句话：对 ARM 反汇编工具进行实证评估，检验反汇编与函数识别可靠性这一隐含假设是否成立。
随着 ARM 成为嵌入式设备的主导架构，针对这些设备的安全评估常依赖现成工具反汇编 stripped ARM 二进制，并隐含假设反汇编与函数识别已是可靠解决的问题。然而该假设是否成立尚不清楚。本文围绕 ARM 反汇编工具开展实证研究，考察其在反汇编与函数识别任务上的表现，以检验上述假设在真实分析场景中的有效性。摘要未给出具体实验数据与结论，但该研究为理解现有 ARM 反汇编工具的可靠性、指导工具选择及后续改进提供了实证基础。
With the increasing popularity of embedded devices, ARM is becoming the dominant architecture for them. In the meanwhile, there is a pressing need to perform security assessments for these devices. Due to different types of peripherals, it is challenging to dynamically run the firmware of these devices in an emulated environment. Therefore, the static analysis is still commonly used. Existing work usually leverages off-the-shelf tools to disassemble stripped ARM binaries and (implicitly) assume that reliable disassembling binaries and function recognition are solved problems. However, whether this assumption really holds is unknown.
DOI 原文 ·
@inproceedings{paperbot6056,
title = {An empirical study on ARM disassembly tools},
author = {Muhui Jiang and Yajin Zhou and Xiapu Luo and Ruoyu Wang and Yang Liu and Kui Ren},
booktitle = {ISSTA},
year = {2020},
doi = {10.1145/3395363.3397377}
}