Structural Comparison of Executable Objects

摘要: A method to heuristically construct an isomorphism between the sets of functions in two similar but differing versions same executable file is presented. Such has multiple practical applications, specifically ability detect programmatic changes versions. Moreover, information (function names) which available for one can also be made other . framework implementing described methods presented, along with empirical data about its performance when used analyze patches recent security vulnerabilities. As a more example, update fixes critical vulnerability H.323 parsing component analyzed, relevant extracted and implications fix discussed.