Abstract:

A reverse analysis methodology with the functional model for operating system (OS) trusted mechanism was presents. And the XML-based storage structure was designed to serve the storage and transformation of information cross levels in the level functional model of trusted mechanism. The plugin of IDA was developed, which takes and stores routine CFG and level functional model automatically from the binary code.

Key words: operating system; reverse analysis; function model; routine relation; binary code; CFG