Engineering Papers⌕ Search

SEARCH · Engineering Papers

Results for “binary analysis”

Search indexed NASA NTRS and DOE OSTI research on propulsion, heat transfer, battery materials and energy systems. Follow report and document links to the original sources.

Quote a phrase for an exact phrase match. Source license links do not imply unrestricted reuse.

At least 19 records
All sourcesNASA NTRSDOE OSTI
DOE OSTI2021

Exploring Explicit Uncertainty for Binary Analysis (EUBA)

Reverse engineering (RE) analysts struggle to address critical questions about the safety of binary code accurately and promptly, and their supporting program analysis tools are simply wrong sometimes. The analysis tools have to approximate in order to provide any information at all, but this means that they introduce uncertainty into their results. And those uncertainties chain from analysis to analysis. We hypothesize that exposing sources, impacts, and control of uncertainty to human binary analysts will allow the analysts to approach their hardest problems with high-powered analytic techniques that they know when to trust. Combining expertise in binary analysis algorithms, human cognition, uncertainty quantification, verification and validation, and visualization, we pursue research that should benefit binary software analysis efforts across the board. We find a strong analogy between RE and exploratory data analysis (EDA); we begin to characterize sources and types of uncertainty found in practice in RE (both in the process and in supporting analyses); we explore a domain-specific focus on uncertainty in pointer analysis, showing that more precise models do help analysts answer small information flow questions faster and more accurately; and we test a general population with domain-general sudoku problems, showing that adding "knobs" to an analysis does not significantly slow down performance. This document describes our explorations in uncertainty in binary analysis.

97 MATHEMATICS AND COMPUTING↗
DOE OSTI2024

Systems and methods for architecture-independent binary code analysis

Binaries configured for execution within respective computing environments may be disassembled into architecture-specific intermediate (AIL) representations. The AIL representations may be converted into canonical intermediate language (CIL) representations. The CIL representations may comprise normalized, architecture-independent code configured to characterize functionality of respective components of a binary (e.g., respective functions or the like). Feature vectors may be extracted from the CIL representations. The feature vectors may be used to identify components of respective binaries, assign security classifications to the binaries, and/or the like.

Haile, Jedediah T.↗
DOE OSTI2020

Binary Analysis with Architecture and Code Section Detection using Supervised Machine Learning

When presented with an unknown binary, which may or may not be complete, having the ability to determine information about it is critical to future reverse engineering, particularly in discovering the binary’s intended use and potentially malicious nature. This paper details techniques to both identify the machine architecture of the binary, as well as to locate the important code segments within the file. This identification of unknown binaries makes use of a technique called byte histogram in addition to various machine learning (ML) techniques, which we call “What is it Binary” or WiiBin. Benefits of byte histograms reflect the simplicity of calculation and do not rely on file headers or metadata, allowing for acceptable results when only a small portion of the original file is available. Utilizing WiiBin, we were able to accurately (>80%) determine the architecture of test binaries with as little as a 20% contagious portion of the file present. We were also able to determine the location of code sections within a binary by utilizing the WiiBin framework. Ultimately, the more information that can be gleaned from a binary file, the easier it is to successfully reverse engineer.

99 GENERAL AND MISCELLANEOUS↗
DOE OSTI2020

Experimental and Simulation Analysis of Binary Mixtures of Biomass and Inert Material

A literature review was conducted to identify experiments on various scales of biomass combustion specific to circulating fluidized bed (CFB) combustors. Typical feedstock and inert bed material characteristics for biomass combustion in a CFB were gathered. This information was used to design laboratory-scale, non-reacting experiments on biomass-inert bed material mixtures in a 1-in. cylindrical test rig in the Multiphase Flow Analysis Laboratory (MFAL) in Morgantown, WV. The biomass chosen was a hardwood. Pellets from the hardwood were milled and sieved to obtain three size ranges—small, medium, and large. Three mass loadings of each of the biomass samples were fluidized with glass beads as the inert bed material to study the mixing characteristics under varying fluidizing gas velocities. Hydrodynamic data including pressure drop measurements at select vertical locations and video recordings of the mixture behavior were generated in this effort.

09 BIOMASS FUELS↗
DOE OSTI2025

Systems and methods for binary code analysis

Human-readable (HR) code may be derived from a binary. The HR code may be configured to have statistical properties suitable for machine-learned (ML) translation. The HR code may comprise source code, intermediate code, assembly code, or the like. A machine-learned translator may be configured to translate the HR code into labels comprising semantic information pertaining to respective functions of the binary, such as a function name, role, or the like. Execution of the binary may be blocked in response to translating the HR code to a label associated with malware, such as cryptocurrency mining malware or the like. Conversely, the binary may be permitted to proceed to execution in response to determining that the translation is free from labels indicative of malware.

Anderson, Matthew W.↗
DOE OSTI2024

LSAFE: a Lightweight Static Analysis Framework for binary Executables

Static analysis is a widely used technique for analyzing various aspects of programs. However, as programs become more complex, static analysis tools require larger resources, such as CPU time and memory, to perform the same tasks. Moreover, the source code of programs may not always be accessible, requiring static analysis to be performed on the binary executable code directly. To overcome these challenges, we propose a lightweight static analysis framework called LSAFE, which constructs control flow graphs (CFGs) and data dependency graphs (DDGs) of target programs with optimized performance in terms of CPU and memory usage. We evaluated the proposed framework using both Spec benchmark programs and real-world industrial applications, and found that it outperformed Angr, an existing state-of-the-art static analysis tool. Additionally, we demonstrate a case study that utilizes the CFG generated by LSAFE to detect memory leaks.

Qu, Guangzhi↗
DOE OSTI2021

Challenges in Firmware Re-Hosting, Emulation, and Analysis

System emulation and firmware re-hosting have become popular techniques to answer various security and performance related questions, such as determining whether a firmware contain security vulnerabilities or meet timing requirements when run on a specific hardware platform. While this motivation for emulation and binary analysis has previously been explored and reported, starting to either work or research in the field is difficult. To this end, we provide a comprehensive guide for the practitioner or system emulation researcher. Here, we layout common challenges faced during firmware re-hosting, explaining successive steps and surveying common tools used to overcome these challenges. We provide classification techniques on five different axes, including emulator methods, system type, fidelity, emulator purpose, and control. These classifications and comparison criteria enable the practitioner to determine the appropriate tool for emulation. We use our classifications to categorize popular works in the field and present 28 common challenges faced when creating, emulating, and analyzing a system from obtaining firmwares to post emulation analysis.

97 MATHEMATICS AND COMPUTING↗
DOE OSTI2025

OGhidra

This is an AI driven Binary Analysis tool. It uses locally hosted Agentic AI's to automatically reverse engineer binaries to find malware and vulnerabilities.

Wang, Enoch↗
DOE OSTI2026

Vulcan-Forge: Architecture and Design of a Multi-Modal Forensic Analysis Plugin for CALDERA

Forge and VULCAN together describe an open-architecture cybersecurity analysis ecosystem that unifies forensic artifact processing, detection engineering, and vulnerability intelligence within integrated platforms. Forge operates as a plugin for MITRE CALDERA, ingesting diverse evidence formats—including EVTX, PCAP/PCAPNG, CSV, JSON, YAML, XML, binaries, and archives—to construct a unified artifact graph enriched with severity scoring, TLP classification, and audit trails. It provides subsystems for artifact parsing, streaming structured-data visualization, NetworkMiner-based packet inspection, PE/.NET binary analysis, and LLM-assisted triage and rule generation, with outputs validated against CCCS-YARA and pySigma schemas. VULCAN complements this by serving as a cybersecurity analyst platform that integrates a Neo4j knowledge graph, Qdrant vector retrieval, SSVC-based triage, and a local LLM to deliver CVE intelligence and forensic analysis through a multi-source ingest pipeline drawing from NVD, CISA KEV, EPSS, MITRE ATT&CK, and CAPEC. Together, they bridge structured threat intelligence with automated forensic analysis and detection workflows.

97 MATHEMATICS AND COMPUTING↗
DOE OSTI2023

BUILD: Binary Understanding and Integration Logic for Dependencies (Final Report)

Increasingly diverse mission needs, the emergence of AI and cloud, and increasing hardware diversity are driving HPC software to be more complex. Modern codes are built from hundreds of small, complex components, and much of the software development process involves integrating these components rather than developing new components from scratch. The goal of the BUILD project was to ease the task of software integration for developers across LLNL’s programs. The project focused on (1) modeling software compatibility, (2) modeling ABI compatibility with binary analysis, (3) developing solver techniques to reason about compatibility, and (4) developing AI/ML models to fill gaps in our understanding of software compatibility. The project has developed several key technologies that help developers—by accelerating development workflows, removing the need for rebuilds, and enabling faster, automatic, and less error-prone code sharing. These technologies are used in LLNL codes and will be ready for the new El Capitan Exascale system in Livermore Computing. Many of these technologies have been hardened and integrated with LLNL’s Spack package manager, and they are already in use by production code teams. Results of BUILD have laid the groundwork for future advances in software integration—the ML and binary modification techniques developed in this project still need to be operationalized but have great potential to further speed up software integration.

97 MATHEMATICS AND COMPUTING↗
DOE OSTI2025

Cataloging US state policy patterns towards microgrid deployment

Frequent extreme weather events have called for rigorous and timely efforts for alternative non-wire solutions. These efforts are getting more widespread to offer a perfect alternative as the conventional grid becomes progressively less resilient. One of these solutions is microgrids that can disconnect from the grid and offer grid resilience during an outage. While this technology is still finding its footing in the industry, states across the US are employing policy patterns and forms of instruments to support its deployment. This study includes a systemic review of the US by conducting a binary analysis of all 50 states (including Washington D.C, excluding other US territories) using seven variables. The results show four major policy approaches to microgrids: i) supporting microgrids through a definitive legislative activity leading to further policy action; ii) direct efforts from the public utilities commissions without a concrete legislative push; iii) initiatives from institutions other than the commissions; and lastly, iv) self-initiated community and private consumer efforts. The results help understand what policy instruments are being used in each of these patterns to support this niche technology that still faces regulatory challenges.

Furqan, Maham↗
DOE OSTI2021

Photometric and Spectroscopic Analysis of Four Contact Binaries

We present the photometric and spectroscopic analysis of four W UMa binaries J015829.5+260333 (hereinafter as J0158), J030505.1+293443 (hereinafter as J0305), J102211.7+310022 (hereinafter as J1022), and KW Psc. The VR {sub c} I {sub c} band photometric observations are carried out with the 1.3 m Devasthal Fast Optical Telescope (DFOT). For low-resolution spectroscopy, we used the 2 m Himalayan Chandra Telescope (HCT) as well as the archival data from the 4 m LAMOST survey. The systems J0158 and J0305 show a period increase rate of 5.26( ± 1.72) × 10{sup −7} days yr{sup −1} and 1.78( ± 1.52) × 10{sup −6} days yr{sup −1}, respectively. The period of J1022 is found to be decreasing with a rate of 4.22 ( ± 1.67) × 10{sup −6} days yr{sup −1}. The period analysis of KW Psc displays no change in its period. The PHOEBE package is used for the light-curve modeling and basic parameters are evaluated with the help of the GAIA parallax. The asymmetry of light curves is explained with the assumption of cool spots at specific positions on one of the components of the system. On the basis of temperatures, mass ratios, fill-out factors, and periods, the system J1022 is identified as a W-subtype system while the others show some mixed properties. To probe the chromospheric activities in these W UMa binaries, their spectra are compared with the known inactive stars’ spectra. The comparison shows emission in H {sub α}, H {sub β}, and Ca II. To understand the evolutionary status of these systems, the components are plotted in mass–radius and mass–luminosity planes with other well characterized binary systems. The secondary components of all the systems are away from ZAMS, which indicates that the secondary is more evolved than the primary component.

47 OTHER INSTRUMENTATION↗