D-Helix: A Generic Decompiler Testing Framework Using Symbolic Differentiation

Muqi Zou

33rd USENIX Security Symposium · Day 1 · USENIX Security '24

In the intricate world of binary analysis, decompilers serve as critical tools, translating low-level machine code back into human-readable high-level languages like C. This talk, "D-Helix: A Generic Decompiler Testing Framework Using Symbolic Differentiation," presented by Muqi Zou from Purdue University, addresses a fundamental and often overlooked challenge in decompilation: semantic preservation. While decompilers aim to produce functionally equivalent high-level code, the underlying heuristics frequently introduce subtle semantic inaccuracies that can severely impact the reliability of reverse engineering, vulnerability analysis, and malware investigation.

AI review

This talk introduces D-Helix, a groundbreaking framework using symbolic differentiation to automatically uncover semantic bugs in decompilers like Ghidra and Angr. It highlights a critical, often overlooked problem in binary analysis, revealing numerous previously unknown issues and offering a robust method to improve decompiler reliability. This isn't just theory; it's a direct shot at making a foundational tool trustworthy.

Watch on YouTube