Processing

Please wait...

Settings

Settings

Goto Application

1. WO2020111482 - REVERSE ENGINEERING METHOD AND SYSTEM UTILIZING BIG DATA BASED ON PROGRAM EXECUTION CONTEXT

Publication Number WO/2020/111482
Publication Date 04.06.2020
International Application No. PCT/KR2019/012480
International Filing Date 26.09.2019
IPC
G06F 21/14 2013.01
GPHYSICS
06COMPUTING; CALCULATING OR COUNTING
FELECTRIC DIGITAL DATA PROCESSING
21Security arrangements for protecting computers, components thereof, programs or data against unauthorised activity
10Protecting distributed programs or content, e.g. vending or licensing of copyrighted material
12Protecting executable software
14against software analysis or reverse engineering, e.g. by obfuscation
CPC
G06F 21/14
GPHYSICS
06COMPUTING; CALCULATING; COUNTING
FELECTRIC DIGITAL DATA PROCESSING
21Security arrangements for protecting computers, components thereof, programs or data against unauthorised activity
10Protecting distributed programs or content, e.g. vending or licensing of copyrighted material
12Protecting executable software
14against software analysis or reverse engineering, e.g. by obfuscation
Applicants
  • 한국과학기술원 KOREA ADVANCED INSTITUTE OF SCIENCE AND TECHNOLOGY [KR]/[KR]
Inventors
  • 강병훈 KANG, BrentByungHoon
  • 박민준 PARK, Minjoon
  • 장대희 JANG, Daehee
  • 김종환 KIM, Jonghwan
Agents
  • 양성보 YANG, Sungbo
Priority Data
10-2018-014702726.11.2018KR
Publication Language Korean (KO)
Filing Language Korean (KO)
Designated States
Title
(EN) REVERSE ENGINEERING METHOD AND SYSTEM UTILIZING BIG DATA BASED ON PROGRAM EXECUTION CONTEXT
(FR) PROCÉDÉ ET SYSTÈME D'INGÉNIERIE INVERSE UTILISANT DES MÉGADONNÉES EN FONCTION DU CONTEXTE D'EXÉCUTION DE PROGRAMME
(KO) 프로그램 실행 컨텍스트 기반의 빅데이터를 활용한 역공학 방법 및 시스템
Abstract
(EN)
A reverse engineering method and system utilizing big data based on a program execution context are provided. A reverse engineering method according to one embodiment can comprise the steps of: executing, through a debugger, a program to be analyzed; using the debugger so as to set a break point in an instruction included in a region of interest of the program to be analyzed; storing, in a context database, an execution context at a corresponding time point through an event handler for an event occurring in the instruction in which the break point is set; and processing data stored in the context database so as to generate an information analysis result for the program to be analyzed.
(FR)
L'invention concerne un procédé et un système d'ingénierie inverse utilisant des mégadonnées en fonction du contexte d'exécution de programme. Un procédé d'ingénierie inverse selon un mode de réalisation peut comprendre les étapes consistant : à exécuter, par l'intermédiaire d'un débogueur, un programme à analyser ; à utiliser le débogueur pour définir un point de rupture dans une instruction comprise dans une région d'intérêt du programme à analyser ; à stocker, dans une base de données de contexte, un contexte d'exécution à un instant correspondant par l'intermédiaire d'un gestionnaire d'événement correspondant à un événement se produisant dans l'instruction dans laquelle est défini le point de rupture ; et à traiter les données stockées dans la base de données de contexte, afin de générer un résultat d'analyse d'informations correspondant au programme à analyser.
(KO)
프로그램 실행 컨텍스트 기반의 빅데이터를 활용한 역공학 방법 및 시스템을 제공한다. 일실시예에 따른 역공학 방법은, 분석 대상 프로그램을 디버거를 통해 실행하는 단계, 상기 디버거를 이용하여 상기 분석 대상 프로그램의 관심 영역에 포함된 인스트럭션에 브레이크 포인트를 설정하는 단계, 상기 브레이크 포인트가 설정된 인스트럭션에서 발생하는 이벤트에 대해 이벤트 핸들러를 통해 해당 시점에서의 실행 컨텍스트(execution context)를 컨텍스트 데이터베이스에 저장하는 단계 및 상기 컨텍스트 데이터베이스에 저장된 데이터를 처리하여 상기 분석 대상 프로그램에 대한 정보 분석 결과를 생성하는 단계를 포함할 수 있다.
Also published as
Latest bibliographic data on file with the International Bureau