CloneCompass: Visualizations for Exploring Assembly Code Clone Ecosystems

2019 Working Conference on Software Visualization (VISSOFT) Pub Date : 2019-09-01 DOI:10.1109/VISSOFT.2019.00019

Ying Wang, Jorin Weatherston, M. Storey, D. Germán

{"title":"CloneCompass: Visualizations for Exploring Assembly Code Clone Ecosystems","authors":"Ying Wang, Jorin Weatherston, M. Storey, D. Germán","doi":"10.1109/VISSOFT.2019.00019","DOIUrl":null,"url":null,"abstract":"Assembly code analysis is an intensive process undertaken by security analysts and reverse engineers to discover vulnerabilities in existing software when source code is unavailable. Kam1n0 is an efficient code clone search engine that facilitates assembly code analysis. However, Kam1n0 search results can contain millions of function-clone pairs, and efficiently exploring and comprehensively understanding the resulting data can be challenging. This paper presents a design study whereby we collaborated with analyst stakeholders to identify requirements for a tool that visualizes and scales to millions of function-clone pairs. These requirements led to the design of an interactive visual tool, CloneCompass, consisting of novel TreeMap Matrix and Adjacency Matrix visualizations to aid in the exploration of assembly code clones extracted from Kam1n0. We conducted a preliminary evaluation with the analyst stakeholders and show how CloneCompass enables these users to visually and interactively explore code clone data generated from software systems with suspected vulnerabilities.","PeriodicalId":375862,"journal":{"name":"2019 Working Conference on Software Visualization (VISSOFT)","volume":null,"pages":null},"PeriodicalIF":0.0000,"publicationDate":"2019-09-01","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":"2","resultStr":null,"platform":"Semanticscholar","paperid":null,"PeriodicalName":"2019 Working Conference on Software Visualization (VISSOFT)","FirstCategoryId":"1085","ListUrlMain":"https://doi.org/10.1109/VISSOFT.2019.00019","RegionNum":0,"RegionCategory":null,"ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":null,"EPubDate":"","PubModel":"","JCR":"","JCRName":"","Score":null,"Total":0}

引用次数: 2

Abstract

Assembly code analysis is an intensive process undertaken by security analysts and reverse engineers to discover vulnerabilities in existing software when source code is unavailable. Kam1n0 is an efficient code clone search engine that facilitates assembly code analysis. However, Kam1n0 search results can contain millions of function-clone pairs, and efficiently exploring and comprehensively understanding the resulting data can be challenging. This paper presents a design study whereby we collaborated with analyst stakeholders to identify requirements for a tool that visualizes and scales to millions of function-clone pairs. These requirements led to the design of an interactive visual tool, CloneCompass, consisting of novel TreeMap Matrix and Adjacency Matrix visualizations to aid in the exploration of assembly code clones extracted from Kam1n0. We conducted a preliminary evaluation with the analyst stakeholders and show how CloneCompass enables these users to visually and interactively explore code clone data generated from software systems with suspected vulnerabilities.

查看原文

微信好友朋友圈 QQ好友复制链接

本刊更多论文

CloneCompass:探索汇编代码克隆生态系统的可视化

汇编代码分析是一个密集的过程，由安全分析人员和逆向工程师承担，用于在源代码不可用时发现现有软件中的漏洞。Kam1n0是一个高效的代码克隆搜索引擎，便于汇编代码分析。然而，Kam1n0搜索结果可能包含数百万个功能克隆对，有效地探索和全面理解结果数据可能具有挑战性。本文提出了一项设计研究，通过该研究，我们与分析涉众合作，确定了一种工具的需求，该工具可以可视化并扩展到数百万个功能克隆对。这些需求导致了交互式可视化工具CloneCompass的设计，该工具由新颖的TreeMap矩阵和邻接矩阵可视化组成，以帮助探索从Kam1n0提取的汇编代码克隆。我们与分析师利益相关者进行了初步评估，并展示了CloneCompass如何使这些用户能够以可视化和交互式的方式探索从具有可疑漏洞的软件系统生成的代码克隆数据。

本文章由计算机程序翻译，如有差异，请以英文原文为准。

求助全文

约1分钟内获得全文去求助

来源期刊

2019 Working Conference on Software Visualization (VISSOFT)

自引率

0.00%

发文量