FURI | Fall 2020

Ali’i CFG: Improving the Accuracy and Completeness of Control Flow Graphs on Binary Programs

With the growing use of software across the globe, the need for automated security auditing of software has never been more critical. One of the pillars that support automated security auditing techniques on software is the construction of control flow graphs (CFGs) for the target software without accessing the source code, a.k.a. binary programs. A high-quality audit usually requires a complete and accurate CFG. Nevertheless, in most cases the constructed CFGs are flawed due to undecidable problems. Ali’i CFG uses state-of-the-art techniques (including multi-layered pointer resolving) to construct more accurate and complete CFGs in a scalable manner.