OpenFunctionID: a collaborative database for function identification in Software Reverse Engineering

Janssens de Bisthoven, Cyprien ; Rasoamanana, Zina
(2022)

Files

JanssensDeBisthoven_53871600_Rasoamanana_07131700_2022.pdf
  • Open access
  • Adobe PDF
  • 2.87 MB
Download

Details

Supervisors
Sadre, Ramin
Faculty
Ecole polytechnique de Louvain
Degree label
Master [120] : ingénieur civil en informatique, à finalité spécialisée
Master [120] en sciences informatiques, à finalité spécialisée
Abstract
Software reverse engineering is the process of recovering back the source code of a program from the machine code. It has several applications, ranging from the comprehension of program operations to the analysis of viruses and malwares. Among the collections of existing reverse engineering frameworks, Ghidra stands out due to its performance, availability over open-source, and expandability through homemade plugins. This Master Thesis aims to extend FunctionID, a plugin that improves the readability of decompilation. Currently, FunctionID performs hash database fingerprinting to improve the accuracy of the commonly found functions. However, the database covers only a narrow range of functions. This work presents and evaluates OpenFunctionID, an open source collaborative database integrated with Ghidra and that intent to provide an exhaustive database of function fingerprints.