PATENT CLAIM ANALYSIS

Application Number: 16036396
Application Type: Utility
Filing Date: 2018-07
Publication Date: 2019-05
Patent Classification: ["726", "025000"]

Abstract:
Provided are a binary vulnerability analysis method performed by a computing device is provided, and the binary vulnerability analysis method includes a primary execution step of recording a symbolic constraint of a vulnerability associated with an execution flow path causing a crash to a target binary to be analyzed and a suspicious element on the execution flow path by performing taint analysis through a primary execution of the target binary; and a secondary execution step of performing a secondary execution, which is a symbolic execution, on the execution flow path and, if an instruction satisfying the symbolic constraint is found, determining that the vulnerability exists in the target binary by comparing the suspicious element and the found instruction.

Claim (Index 13):
An electronic device comprising:\n a processor; and a memory storing at least one instruction to be executed in the processor and at least one target binary to be analyzed, wherein the at least one instruction includes:\n a first instruction of inserting code for identifying the status of execution of the at least one target binary in the at least one target binary and executing the at least one target binary, \n a second instruction of performing taint analysis through a primary execution of the at least one target binary and outputting information regarding an execution flow path causing a crash to the at least one target binary, \n a third instruction of detecting a suspicious element on the execution flow path and generating a symbolic constraint for a vulnerability associated with the detected suspicious element, and \n a fourth instruction of performing a secondary execution, which is a symbolic execution, on the execution flow path of the at least one target binary and, if an operand satisfying the symbolic condition is found, notifying the third instruction of the found operand, \n wherein, if an instruction satisfying the symbolic condition is found, the third instruction determines, upon being notified of the found instruction by the fourth instruction, that there exists a vulnerability in the at least one target binary based on a result of comparing the found instruction and the suspicious element wherein executing the at least one target binary further comprises executing the at least one target binary using an execution parameter for executing the target binary and setting a taint source for the taint analysis using the execution parameter, and wherein setting the taint source comprises setting a loading location of the execution parameter during the primary execution as the taint source if \u201cmain\u201d does not exist in a debug symbol of the at least one target binary.

Metadata:
- Claim Count in Document: 32.0
- Percentile: 95.0
- Lexical Diversity: 2.31481
- Patent Class: 726.0
- Transitional Phrase Type: open
- Component Type: 1
- Foreign Priority: True
- Related Applications: ['13481248', '14827522', '13898824', '15817372', '11529796']

Analysis Scores:
- 35 USC 101 Eligibility (BERT): 0.2860085591567331
- 35 USC 102 Novelty (BERT): 0.4872341491854434
- Combined Prediction Score: 0.3061311181596041
- Mean Citation Score: 206.28468
- Max Citation Score: 220.55055
- Similarity Product: 160.53220494394898

Labels:
- Claim Label 101: 0
- Claim Label 102: 1
- Claim Label 103: 0
- Claim Label 112: 1
- Combined Label: 0
- Label 101 Adjusted: 0

Dataset: test