TY - JOUR ID - 90271 TI - Algebraic Matching of Vulnerabilities in a Low-Level Code JO - The ISC International Journal of Information Security JA - ISECURE LA - en SN - 2008-2045 AU - Letychevskyi, Oleksandr AU - Hryniuk, Yaroslav AU - Yakovlev, Viktor AU - Peschanenko, Volodymyr AU - Radchenko, Viktor AD - Glushkov Institute of Cybernetics of National Academy of Sciences of Ukraine 40, Glushkova prospect, Kyiv, Ukraine AD - Garuda AI B.V., 54-62, Beachavenu, Schiphol-Rijk, Netherlands Y1 - 2019 PY - 2019 VL - 11 IS - 3 SP - 1 EP - 7 KW - Algebraic Matching KW - Symbolic Modeling KW - Behavior Algebra KW - Rewriting Rules KW - Vulnerability Detection DO - 10.22042/isecure.2019.11.0.1 N2 - This paper explores the algebraic matching approach for detection of vulnerabilities in binary codes. The algebraic programming system is used for implementing this method. It is anticipated that models of vulnerabilities and programs to be verified are presented as behavior algebra and action language specifications. The methods of algebraic matching are based on rewriting rules and techniques with usage of conditional rewriting. This process is combined with symbolic modeling that gives a possibility to provide accurate detection of vulnerabilities. The paper provides examples of formalization of vulnerability models and translation of binary codes to behavior algebra expressions. UR - https://www.isecure-journal.com/article_90271.html L1 - https://www.isecure-journal.com/article_90271_38c3698ac8b2da14fc68aeb5f92d73a6.pdf ER -