Harnessing the Power of LLM to Support Binary Taint Analysis
Fuente:
arXiv
Saved in:
| Main Authors: | , , , , , , , , , , |
|---|---|
| Format: | Preprint |
| Published: |
2023
|
| Subjects: | |
| Online Access: | |
| Tags: |
Add Tag
No Tags, Be the first to tag this record!
|
| _version_ | 1866917887389728768 |
|---|---|
| author | Liu, Puzhuo Sun, Chengnian Zheng, Yaowen Feng, Xuan Qin, Chuan Wang, Yuncheng Xu, Zhenyang Li, Zhi Di, Peng Jiang, Yu Sun, Limin |
| author_facet | Liu, Puzhuo Sun, Chengnian Zheng, Yaowen Feng, Xuan Qin, Chuan Wang, Yuncheng Xu, Zhenyang Li, Zhi Di, Peng Jiang, Yu Sun, Limin |
| contents | This paper proposes LATTE, the first static binary taint analysis that is powered by a large language model (LLM). LATTE is superior to the state of the art (e.g., Emtaint, Arbiter, Karonte) in three aspects. First, LATTE is fully automated while prior static binary taint analyzers need rely on human expertise to manually customize taint propagation rules and vulnerability inspection rules. Second, LATTE is significantly effective in vulnerability detection, demonstrated by our comprehensive evaluations. For example, LATTE has found 37 new bugs in real-world firmware which the baselines failed to find, and 7 of them have been assigned CVE numbers. Lastly, LATTE incurs remarkably low engineering cost, making it a cost-efficient and scalable solution for security researchers and practitioners. We strongly believe that LATTE opens up a new direction to harness the recent advance in LLMs to improve vulnerability analysis for binary programs. |
| format | Preprint |
| id |
arxiv_https___arxiv_org_abs_2310_08275 |
| institution | arXiv |
| publishDate | 2023 |
| record_format | arxiv |
| spellingShingle | Harnessing the Power of LLM to Support Binary Taint Analysis Liu, Puzhuo Sun, Chengnian Zheng, Yaowen Feng, Xuan Qin, Chuan Wang, Yuncheng Xu, Zhenyang Li, Zhi Di, Peng Jiang, Yu Sun, Limin Cryptography and Security Software Engineering This paper proposes LATTE, the first static binary taint analysis that is powered by a large language model (LLM). LATTE is superior to the state of the art (e.g., Emtaint, Arbiter, Karonte) in three aspects. First, LATTE is fully automated while prior static binary taint analyzers need rely on human expertise to manually customize taint propagation rules and vulnerability inspection rules. Second, LATTE is significantly effective in vulnerability detection, demonstrated by our comprehensive evaluations. For example, LATTE has found 37 new bugs in real-world firmware which the baselines failed to find, and 7 of them have been assigned CVE numbers. Lastly, LATTE incurs remarkably low engineering cost, making it a cost-efficient and scalable solution for security researchers and practitioners. We strongly believe that LATTE opens up a new direction to harness the recent advance in LLMs to improve vulnerability analysis for binary programs. |
| title | Harnessing the Power of LLM to Support Binary Taint Analysis |
| topic | Cryptography and Security Software Engineering |
| url | https://arxiv.org/abs/2310.08275 |