REVIEW 3 cited by
jTrans: Jump-Aware Transformer for Binary Code Similarity
Not yet reviewed by Pith; the record is open.
This paper has not been read by Pith yet. Machine review is queued; the pith claim, tier, and objections will appear here once it completes.
SPECIMEN: schema-true, not a live event
T0 review · schema-true
One-sentence machine reading of the paper's core claim.
pith:XXXXXXXX · record.json · timestamp
read the original abstract
Binary code similarity detection (BCSD) has important applications in various fields such as vulnerability detection, software component analysis, and reverse engineering. Recent studies have shown that deep neural networks (DNNs) can comprehend instructions or control-flow graphs (CFG) of binary code and support BCSD. In this study, we propose a novel Transformer-based approach, namely jTrans, to learn representations of binary code. It is the first solution that embeds control flow information of binary code into Transformer-based language models, by using a novel jump-aware representation of the analyzed binaries and a newly-designed pre-training task. Additionally, we release to the community a newly-created large dataset of binaries, BinaryCorp, which is the most diverse to date. Evaluation results show that jTrans outperforms state-of-the-art (SOTA) approaches on this more challenging dataset by 30.5% (i.e., from 32.0% to 62.5%). In a real-world task of known vulnerability searching, jTrans achieves a recall that is 2X higher than existing SOTA baselines.
Forward citations
Cited by 3 Pith papers
-
Preserving Privacy in Software Composition Analysis: A Study of Technical Solutions and Enhancements
Using MPC and program-analysis filters, the authors build a privacy-preserving SCA pipeline that keeps F1 around 0.81 and cuts MPC overhead from 184x to 23x.
-
StrTune: Data Dependence-based Code Slicing for Binary Similarity Detection with Fine-tuned Representation
Representing binary functions as data-dependence slices and fine-tuning slice embeddings on cross-optimization pairs raises Recall@1 over prior detectors in the reported benchmarks.
-
CveBinarySheet: A Comprehensive Pre-built Binaries Database for IoT Vulnerability Analysis
A dataset paper that proposes prebuilt vulnerable binaries for 1,033 CVEs across 16 components and 5 architectures, but supplies no way to access or verify the data.
Discussion (0). Continue with ORCID to comment.