High throughput embedding generation system for executable code and applications
AssigneesDeepbits Technology Inc., The Regents of the University of California
InventorsHeng Yin, Xunchao Hu, Sheng Yu, Yu Zheng
Life of this patent
Estimating the term…
Abstract
A novel high-throughput embedding generation and comparison system for executable code is presented in this invention. More specifically, the invention relates to a deep-neural-network based graph embedding generation and comparison system. A novel bi-directional code graph embedding generation has been proposed to enrich the information extracted from code graph. Furthermore, by deploying matrix manipulation, the throughput of the system has significantly increased for embedding generation. Potential applications such as executable file similarity calculation, vulnerability search are also presented in this invention.
Claims14
A system for high-throughput embedding generation and comparison, comprising:
- circuitry configured to
- take executable code and extract Bi-directional Attributable Control Flow Graphs (ACFGs) of functions from the executable code;
- conduct high-throughput embedding generation to generate embeddings for the Bi-directional ACFGs;
- conduct high-throughput similarity comparison of the functions using the embeddings;
- and
- conduct the high-throughput similarity comparison to compare a similarity of a plurality of executable files by applying Principal Component Analysis on the embeddings.
A method for high-throughput embedding generation and comparison, compromising:
- taking executable code and extracting Bi-directional Attributable Control Flow Graphs (ACFGs) of functions from the executable code;
- conducting high-throughput embedding generation to generate embeddings for the Bi-directional AFCGs;
- conducting high-throughput similarity comparison of the functions using the embeddings;
- and
- conducting the high-throughput similarity comparison to compare a similarity of a plurality of executable files by applying Principal Component Analysis on the embeddings.
A non-transitory, computer-readable storage medium storing instructions that, when executed on a computer, control the computer to perform a method for high-throughput embedding generation and comparison, compromising:
- taking executable code and extracting Bi-directional Attributable Control Flow Graphs (ACFGs) of functions from the executable code;
- conducting high-throughput embedding generation to generate embeddings for the Bi-directional AFCGs;
- conducting high-throughput similarity comparison of the functions using the embeddings;
- and
- conducting the high-throughput similarity comparison to compare a similarity of a plurality of executable files by applying Principal Component Analysis on the embeddings.
Dependencies are inferred from the claim text.