Skip to main content
European Commission logo print header

Rosetta s Way Back to the Source: <br/>Towards Reverse Engineering of Complex Software

Objetivo

We propose a research program (Rossetta) towards reverse engineering of complex software that is available only in binary form. Most of the commercial software industry assumes that compilation (the translation of source code to binary code), is irreversible in practice for real applications. The research question for Rosetta is whether this irreversibility assumption is reasonable. If successful, the project will have a major impact on the software industry.

The challenge is daunting, because binary code after compilation lacks most of the visible structure and semantic information that is available at the source code level. There is no definition of data structures, no helpful names of variables and functions, no semantic information, and no indication of what chunks of instructions are supposed to do.

However, the Rosetta project has a clear methodology for source recovery. Reverse engineering is approached as an iterative process with an initial focus on recovering data structures, followed by recovery of code. We combine static and dynamic techniques with usage monitoring and machine learning. A key insight is that even if all visible structure has been removed from the data in memory, the structures will still be *used* in a way that corresponds to the source code. By observing the use of data and application of machine learning techniques, we will recover both the data and the source.

We store all information that we uncover in the Rosetta database. The database provides a handle on both the data structures and large sections of the code (and at various levels of abstraction). We believe that our methods will allow reverse engineering of very complex commercial software. Doing so will be our main criterion for success. In addition, however, we propose to demonstrate the usefulness of our analysis by automatically hardening software (to make it resilient against many types of attack) without requiring any access to the source co

Convocatoria de propuestas

ERC-2010-StG_20091028
Consulte otros proyectos de esta convocatoria

Régimen de financiación

ERC-SG - ERC Starting Grant

Institución de acogida

STICHTING VU
Aportación de la UE
€ 1 339 000,00
Dirección
DE BOELELAAN 1105
1081 HV Amsterdam
Países Bajos

Ver en el mapa

Región
West-Nederland Noord-Holland Groot-Amsterdam
Tipo de actividad
Higher or Secondary Education Establishments
Investigador principal
Hendrik Jaap Bos (Dr.)
Contacto administrativo
Yvonne Kops (Dr.)
Enlaces
Coste total
Sin datos

Beneficiarios (2)