DeepAI AI Chat
Log In Sign Up

SSLEM: A Simplifier for MBA Expressions based on Semi-linear MBA Expressions and Program Synthesis

by   Seong-Kyun Mok, et al.
Chungnam National University

MBA (mixed boolean and arithmetic) expressions are hard to simplify, so used for malware obfuscation to hinder analysts' diagnosis. Some MBA simplification methods with high performance have been developed, but they narrowed the target to "linear" MBA expressions, which allows efficient solutions based on logic/term-rewriting. However such restrictions are not appropriate for general forms of MBA expressions usually appearing in malware. To overcome this limitation, we introduce a "semi-linear" MBA expression, a new class of MBA expression extended from a linear MBA expression, and propose a new MBA simplifier called "SSLEM", based on a simplification idea of semi-linear MBA expressions and program synthesis


page 1

page 2

page 3

page 4


Simplification of General Mixed Boolean-Arithmetic Expressions: GAMBA

Malware code often resorts to various self-protection techniques to comp...

Efficient Deobfuscation of Linear Mixed Boolean-Arithmetic Expressions

Mixed Boolean-Arithmetic (MBA) expressions are frequently used for obfus...

ATENSOR - REDUCE program for tensor simplification

The paper presents a REDUCE program for the simplification of tensor exp...

DrNLA: Extending Verification to Non-linear Programs through Dual Re-writing

For many decades, advances in static verification have focused on linear...

Extending Functional Languages with High-Level Exception Handling

We extend functional languages with high-level exception handling. To be...

Experimental Evaluation of a Method to Simplify Expressions

We present a method to simplify expressions in the context of an equatio...

ReGiS: Regular Expression Simplification via Rewrite-Guided Synthesis

Expression simplification is an important task necessary in a variety of...