OpenFunctionID: a collaborative database for function identification in Software Reverse Engineering
Files
JanssensDeBisthoven_53871600_Rasoamanana_07131700_2022.pdf
Open access - Adobe PDF
- 2.87 MB
Details
- Supervisors
- Faculty
- Degree label
- Abstract
- Software reverse engineering is the process of recovering back the source code of a program from the machine code. It has several applications, ranging from the comprehension of program operations to the analysis of viruses and malwares. Among the collections of existing reverse engineering frameworks, Ghidra stands out due to its performance, availability over open-source, and expandability through homemade plugins. This Master Thesis aims to extend FunctionID, a plugin that improves the readability of decompilation. Currently, FunctionID performs hash database fingerprinting to improve the accuracy of the commonly found functions. However, the database covers only a narrow range of functions. This work presents and evaluates OpenFunctionID, an open source collaborative database integrated with Ghidra and that intent to provide an exhaustive database of function fingerprints.