CodeExtract: Enhancing Binary Code Similarity Detection with Code Extraction Techniques

on YouTube ↗16m

" summary

CodeExtract implements proactive inlining for single-call functions plus duplicate basic-block extraction to turn inlined code back into calls, operating on assembly-level disassembly and control-flow graphs. It applies define-use based register renaming and basic-block similarity checks (only extract fragments with ≥3 blocks) to normalize functions before feeding LB-BCSD models (evaluated including ASMVector). Function inlining cuts model accuracy from ~80% to ~50% (30% drop); CodeExtract recovers ~20% absolute accuracy (inline emulation gives ~10%), and finds >92% of inline blocks are simple and recoverable.

AI-written summary · about

" chapters (7)

1. 0:00CodeExtract intro
2. 3:24Function inlining impact
3. 5:19Proactive inlining
4. 7:27Code extraction solution
5. 9:14Duplicate code challenges
6. 11:51Evaluation results
7. 13:14Q&A

" related talks

• 30mEnhancing CTI Processes with Code Search TechnologyCarlos Rubio, Jonas Wagner · FIRST Cyber Threat Intelligence Symposium 2022
• 23mDeduBB: Binary Code Size Reduction via Post-Link Basic Block DeduplicationRajiv Gupta, Chaitanya Mamatha Ananda, Mahbod Afarin, Sriraman Tallam, Han Shen, Xinliang David Li · LCTES 2026
• 25mEnhancing Malware Code Similarity Detection through Vectorsearch and TLSHRemco Sprooten · 2024 FIRST Cyber Threat Intelligence Conference
• 27mBinSim: Trace-based Semantic Binary Diffing...Dinghao Wu, Jiang Ming, Dongpeng Xu, Yufei Jiang · 26th USENIX Security Symposium (USENIX Security '17)
• 57mCode Genome - Fingerprinting Code to Build Trustworthy SBOMsIan Molloy, Jiyong Jang · SupplyChainSecurityCon @ OSS NA 2023
• 24m(Ab)using Compiler ToolsRéka Kovács · CppCon 2019
• 27mA Study of Inline Assembly in Solidity Smart ContractsStefanos Chaliasos, Ben Livshits, Arthur Gervais · OOPSLA 2022
• 22mA Scalable, Ensemble Approach for Building and Visualizing Deep Code-Sharing NetworksJoshua Saxe · Black Hat USA 2014