CC 2025
Sat 1 - Sun 2 March 2025
Sat 1 Mar 2025 16:00 - 16:30 at Acacia A - Binary Analysis and Hardware I Chair(s): Sara Achour

Classifying programs based on their tasks is essential in fields such as plagiarism detection, malware analysis, and software auditing. Traditionally, two approaches are employed for this classification: static classifiers analyze program syntax, while dynamic classifiers observe their execution. Although dynamic analysis is commonly regarded as more precise, it is often considered impractical due to high overhead, leading the research community to largely dismiss it. In this paper, we revisit these assumptions by comparing static and dynamic analyses using the same classification representation: opcode histograms. We show that dynamic histograms—generated from instructions actually executed—are only marginally (4-5%) more accurate than static histograms in non-adversarial settings. However, if an adversary is allowed to obfuscate programs, the accuracy of the dynamic classifier is twice higher than the static one, due to its ability to avoid observing dead-code. Obtaining dynamic histograms with a state-of-the-art Valgrind-based tool incurs an 85x slowdown; however, once we account for the time to produce the representations for static analysis of executables, the overall slowdown reduces to 4x: a result significantly lower than previously reported in the literature.

Sat 1 Mar

Displayed time zone: Pacific Time (US & Canada) change

16:00 - 18:00
Binary Analysis and Hardware IMain Conference at Acacia A
Chair(s): Sara Achour Stanford University
16:00
30m
Talk
A Comparative Study on the Accuracy and the Speed of Static and Dynamic Program Classifiers
Main Conference
Anderson Faustino da Silva State University of Maringá, Jeronimo Castrillon TU Dresden, Germany, Fernando Magno Quintão Pereira Federal University of Minas Gerais
16:30
30m
Talk
Biotite: A High-Performance Static Binary Translator using Source-Level Information
Main Conference
Changbin Chen The University of Tokyo, Shu Sugita University of Tokyo, Yotaro Nada The University of Tokyo, Hidetsugu Irie University of Tokyo, Shuichi Sakai University of Tokyo, Ryota Shioya University of Tokyo
17:00
30m
Talk
Post-Link Outlining for Code Size Reduction
Main Conference
shaobai yuan Hunan University, Jihong He Hunan University, Yihui Xie Hunan University, Feng Wang Hunan University, Jie Zhao Hunan University
17:30
30m
Talk
A Deep Technical Review of nZDC Fault Tolerance
Main Conference
Minli Liao University of Cambridge, Sam Ainsworth University of Edinburgh, Lev Mukhanov Queen Mary University London, Timothy M. Jones University of Cambridge
Pre-print Media Attached