Blogs (1) >>
ICSE 2019
Sat 25 - Fri 31 May 2019 Montreal, QC, Canada
Fri 31 May 2019 16:00 - 16:20 at St-Paul / Ste-Catherine - Reverse Engineering Chair(s): Sandeep Kuttal

In modern Web technology, JavaScript (JS) code plays an important role. To avoid the exposure of original source code, the variable names in JS code deployed in the wild are often replaced by short, meaningless names, thus making the code extremely difficult to manually understand and analysis. This paper presents JSNeat, an information retrieval (IR)-based approach to recover the variable names in minified JS code. JSNeat follows a data-driven approach to recover names by searching for them in a large corpus of open-source JS code. We use three types of contexts to match a variable in given minified code against the corpus including the context of properties and roles of the variable, the context of that variable and relations with other variables under recovery, and the context of the task of the function to which the variable contributes. We performed several empirical experiments to evaluate JSNeat on the dataset of more than 322K JS files with 1M functions, and 3.5M variables with 176K unique variable names. We found that JSNeat achieves a high accuracy of 69.1%, which is the relative improvements of 66.1% and 43% over two state-of-the-art approaches JSNice and JSNaughty, respectively. The time to recover for a file or for a variable with JSNeat is twice as fast as with JSNice and 4x as fast as with JNaughty, respectively.

Fri 31 May

Displayed time zone: Eastern Time (US & Canada) change

16:00 - 17:20
Reverse EngineeringTechnical Track / Papers at St-Paul / Ste-Catherine
Chair(s): Sandeep Kuttal The University of Tulsa
16:00
20m
Talk
Recovering Variable Names for Minified Code with Usage ContextsTechnical Track
Technical Track
Hieu Tran The University of Texas at Dallas, Ngoc Tran , Son Nguyen The University of Texas at Dallas, Hoan Nguyen Iowa State University, Tien N. Nguyen University of Texas at Dallas
16:20
20m
Talk
Gigahorse: Thorough, Declarative Decompilation of Smart ContractsArtifacts AvailableArtifacts Evaluated ReusableTechnical Track
Technical Track
Neville Grech University of Athens, Lexi Brent University of Sydney, Bernhard Scholz University of Sydney, Australia, Yannis Smaragdakis University of Athens
16:40
20m
Talk
Probabilistic DisassemblyArtifacts Evaluated ReusableTechnical Track
Technical Track
Kenneth Miller Purdue University, Yonghwi Kwon University of Virginia, Yi Sun Purdue University, USA, Zhuo Zhang Purdue University, Xiangyu Zhang Purdue University, Zhiqiang Lin The Ohio State University
17:00
20m
Talk
Discussion Period
Papers