Cryfind: Using Static Analysis to Identify Cryptographic Algorithms in Binary Executables

Wei Chieh Chao; Chung Kuan Chen; Chen Mou Cheng

doi:10.1109/DSC49826.2021.9346229

Cryfind: Using Static Analysis to Identify Cryptographic Algorithms in Binary Executables

Wei Chieh Chao, Chung Kuan Chen, Chen Mou Cheng

Research output: Chapter in Book/Report/Conference proceeding › Conference contribution › peer-review

Abstract

In this paper, we present an automatic static tool CryFind to identify cryptographic algorithms in a binary executable. Our main strategy is using string match to search for cryptographic constants and API names. To expand our search range and improve our hit rate, our tool matches strings under different encodings and XOR'ed with different keys, as well as incorporates techniques to extract strings on stack. As a result, we have a more effective and efficient detection tool compared with a wide range of state-of-the-art static analysis tools.

Original language	English
Title of host publication	2021 IEEE Conference on Dependable and Secure Computing, DSC 2021
Publisher	Institute of Electrical and Electronics Engineers Inc.
ISBN (Electronic)	9781728175348
DOIs	https://doi.org/10.1109/DSC49826.2021.9346229
State	Published - 30 01 2021
Externally published	Yes
Event	2021 IEEE Conference on Dependable and Secure Computing, DSC 2021 - Aizuwakamatsu, Fukushima, Japan Duration: 30 01 2021 → 02 02 2021

Publication series

Name	2021 IEEE Conference on Dependable and Secure Computing, DSC 2021

Conference

Conference	2021 IEEE Conference on Dependable and Secure Computing, DSC 2021
Country/Territory	Japan
City	Aizuwakamatsu, Fukushima
Period	30/01/21 → 02/02/21

Bibliographical note

Publisher Copyright:
© 2021 IEEE.

Access to Document

10.1109/DSC49826.2021.9346229

Cite this

Chieh Chao, W., Chen, C. K., & Cheng, C. M. (2021). Cryfind: Using Static Analysis to Identify Cryptographic Algorithms in Binary Executables. In 2021 IEEE Conference on Dependable and Secure Computing, DSC 2021 Article 9346229 (2021 IEEE Conference on Dependable and Secure Computing, DSC 2021). Institute of Electrical and Electronics Engineers Inc.. https://doi.org/10.1109/DSC49826.2021.9346229

@inproceedings{ff4f97f34c6f4089aaf9f5a668fbd92d,

title = "Cryfind: Using Static Analysis to Identify Cryptographic Algorithms in Binary Executables",

abstract = "In this paper, we present an automatic static tool CryFind to identify cryptographic algorithms in a binary executable. Our main strategy is using string match to search for cryptographic constants and API names. To expand our search range and improve our hit rate, our tool matches strings under different encodings and XOR'ed with different keys, as well as incorporates techniques to extract strings on stack. As a result, we have a more effective and efficient detection tool compared with a wide range of state-of-the-art static analysis tools.",

author = "{Chieh Chao}, Wei and Chen, {Chung Kuan} and Cheng, {Chen Mou}",

note = "Publisher Copyright: {\textcopyright} 2021 IEEE.; 2021 IEEE Conference on Dependable and Secure Computing, DSC 2021 ; Conference date: 30-01-2021 Through 02-02-2021",

year = "2021",

month = jan,

day = "30",

doi = "10.1109/DSC49826.2021.9346229",

language = "英语",

series = "2021 IEEE Conference on Dependable and Secure Computing, DSC 2021",

publisher = "Institute of Electrical and Electronics Engineers Inc.",

booktitle = "2021 IEEE Conference on Dependable and Secure Computing, DSC 2021",

address = "美国",

}

Chieh Chao, W, Chen, CK & Cheng, CM 2021, Cryfind: Using Static Analysis to Identify Cryptographic Algorithms in Binary Executables. in 2021 IEEE Conference on Dependable and Secure Computing, DSC 2021., 9346229, 2021 IEEE Conference on Dependable and Secure Computing, DSC 2021, Institute of Electrical and Electronics Engineers Inc., 2021 IEEE Conference on Dependable and Secure Computing, DSC 2021, Aizuwakamatsu, Fukushima, Japan, 30/01/21. https://doi.org/10.1109/DSC49826.2021.9346229

Cryfind: Using Static Analysis to Identify Cryptographic Algorithms in Binary Executables. / Chieh Chao, Wei; Chen, Chung Kuan; Cheng, Chen Mou.
2021 IEEE Conference on Dependable and Secure Computing, DSC 2021. Institute of Electrical and Electronics Engineers Inc., 2021. 9346229 (2021 IEEE Conference on Dependable and Secure Computing, DSC 2021).

Research output: Chapter in Book/Report/Conference proceeding › Conference contribution › peer-review

TY - GEN

T1 - Cryfind

T2 - 2021 IEEE Conference on Dependable and Secure Computing, DSC 2021

AU - Chieh Chao, Wei

AU - Chen, Chung Kuan

AU - Cheng, Chen Mou

PY - 2021/1/30

Y1 - 2021/1/30

N2 - In this paper, we present an automatic static tool CryFind to identify cryptographic algorithms in a binary executable. Our main strategy is using string match to search for cryptographic constants and API names. To expand our search range and improve our hit rate, our tool matches strings under different encodings and XOR'ed with different keys, as well as incorporates techniques to extract strings on stack. As a result, we have a more effective and efficient detection tool compared with a wide range of state-of-the-art static analysis tools.

AB - In this paper, we present an automatic static tool CryFind to identify cryptographic algorithms in a binary executable. Our main strategy is using string match to search for cryptographic constants and API names. To expand our search range and improve our hit rate, our tool matches strings under different encodings and XOR'ed with different keys, as well as incorporates techniques to extract strings on stack. As a result, we have a more effective and efficient detection tool compared with a wide range of state-of-the-art static analysis tools.

UR - http://www.scopus.com/inward/record.url?scp=85101693480&partnerID=8YFLogxK

U2 - 10.1109/DSC49826.2021.9346229

DO - 10.1109/DSC49826.2021.9346229

M3 - 会议稿件

AN - SCOPUS:85101693480

T3 - 2021 IEEE Conference on Dependable and Secure Computing, DSC 2021

BT - 2021 IEEE Conference on Dependable and Secure Computing, DSC 2021

PB - Institute of Electrical and Electronics Engineers Inc.

Y2 - 30 January 2021 through 2 February 2021

ER -

Cryfind: Using Static Analysis to Identify Cryptographic Algorithms in Binary Executables

Abstract

Publication series

Conference

Bibliographical note

Access to Document

Other files and links

Fingerprint

Cite this