基于二进制熵的加解密函数定位方法

针对二进制程序模糊测试中加解密函数定位准确率低的问题，提出一种基于二进制熵的加解密函数定位方法.该方法对二进制程序的控制流信息进行模型构建以定位程序关键代码，提取关键代码前后的数据流并计算其二进制熵，通过前后二进制熵的关系确定被测代码中是否存在加解密函数.实验结果表明，该方法能够有效发现程序中的加解密函数，准确率大于99%；该方法可以用于提高模糊测试发现漏洞的能力，具有一定的实用价值. 

Cryptographic Function Location Based on Binary Entropy

To solve the accurate problem of cryptographic function location for fuzz testing of binary program, a location method based on binary entropy was proposed. Firstly, instruction features of binary program were modeled to locate key code. Then binary entropy of data handled before and after key code was calculated. Finally, the cryptographic function was located according to binary entropy relationship before and after key code. Experimental results show that this method can locate cryptographic functions in binary program effectively and the accurate rate is more than 99%. This method can enhance the ability of fuzz testing.