@inproceedings{9bfccfe986e74eb79a46ebabbc2d1688,
title = "Identifying ubiquitious third-party libraries in compiled executables using annotated and translated disassembled code with supervised machine learning",
abstract = "The size and complexity of the software ecosystem is a major challenge for vendors, asset owners and cybersecurity professionals who need to understand the security posture of these systems. Annotated and Translated Disassembled Code is a graph based datastore designed to organize firmware and software analysis data across builds, packages and systems, providing a highly scalable platform enabling automated binary software analysis tasks including corpora construction and storage for machine learning. This paper describes an approach for the identification of ubiquitous third-party libraries in firmware and software using Annotated and Translated Disassembled Code and supervised machine learning. Annotated and Translated Disassembled Code provide matched libraries, function names and addresses of previously unidentified code in software as it is being automatically analyzed. This data can be ingested by other software analysis tools to improve accuracy and save time. Defenders can add the identified libraries to their vulnerability searches and add effective detection and mitigation into their operating environment.",
keywords = "Bayes method, Classification algorithms, Clustering methods, Databases, Graph theory, Internet, K-nearest neighbor search, Machine learning, Matrices, Neural network, Reverse engineering, Supervised learning, Supply chain management, Support vector machines",
author = "Jedediah Haile and Sage Havens and Rita Foster",
note = "DBLP License: DBLP's bibliographic metadata records provided through http://dblp.org/ are distributed under a Creative Commons CC0 1.0 Universal Public Domain Dedication. Although the bibliographic metadata records are provided consistent with CC0 1.0 Dedication, the content described by the metadata records is not. Content may be subject to copyright, rights of privacy, rights of publicity and other restrictions.; 2020 IEEE Symposium on Security and Privacy Workshops, SPW 2020 ; Conference date: 21-05-2020",
year = "2020",
month = may,
doi = "10.1109/SPW50608.2020.00042",
language = "English",
isbn = "9781728193465",
series = "Proceedings - 2020 IEEE Symposium on Security and Privacy Workshops, SPW 2020",
publisher = "Institute of Electrical and Electronics Engineers Inc.",
pages = "157--162",
booktitle = "Proceedings - 2020 IEEE Symposium on Security and Privacy Workshops, SPW 2020",
}