DDE: dynamic data structure excavation

Dynamic Datastructure Excavation (DDE) is a new approach to extract datastructures from C binaries without any need for debugging symbols. Unlike most existing tools, DDE uses dynamic analysis (on a QEMU-based emulator) and detects data structures by tracking how a program uses memory. Its results are much more accurate than those of previous methods. Categories and Subject Descriptors D.2.7 [Software Engineering]: Distribution, Maintenance, and Enhancement--Restructuring, reverse engineering, and reengineering; D.2.11 [Software Engineering]: Software Architectures General Terms Algorithms, Design, Experimentation Keywords binary, detecting data structures, dynamic analysis

• Type: Conference
• Year: 2010
• Where: SIGCOMM
• Authors: Asia Slowinska, Traian Stancescu, Herbert Bos
• Keywords: Communications, Data Structures, Dynamic Analysis, Dynamic Datastructure Excavation, SIGCOMM 2010