Trace-Based Disassembly

Award Information
Agency:
Department of Defense
Branch
Air Force
Amount:
$99,993.00
Award Year:
2005
Program:
SBIR
Phase:
Phase I
Contract:
FA8650-05-C-8018
Agency Tracking Number:
O043-SP2-1117
Solicitation Year:
2004
Solicitation Topic Code:
OSD04-SP2
Solicitation Number:
2004.3
Small Business Information
GRAMMATECH, INC.
317 N. Aurora Street, Ithaca, NY, 14850
Hubzone Owned:
N
Socially and Economically Disadvantaged:
N
Woman Owned:
N
Duns:
n/a
Principal Investigator:
Thomas Johnson
Software Engineer
(607) 273-7340
tjohnson@grammatech.com
Business Contact:
Ray Teitelbaum
CEO
(607) 273-7340
tt@grammatech.com
Research Institution:
n/a
Abstract
We propose to develop a trace-based disassembler and integrate it with our break-through binary analysis tool, CodeSurfer/x86. A trace-based disassembler builds a trace of the instruction sequence that is executed at run time (during one or more runs of the program). The trace is analyzed to construct control-flow graphs for each of the procedures, which are then used to generate an assembly listing. This approach will make CodeSurfer/x86 applicable to binaries that employ anti-tamper techniques known as control-flow obfuscations. In particular, we will focus on the potential to unravel self-modifying code. CodeSurfer/x86 will also be used to drive a static disassembler to help "flesh out" the program listing generated by the trace-based disassembler.

* information listed above is at the time of submission.

Agency Micro-sites

US Flag An Official Website of the United States Government