-
Book Overview & Buying
-
Table Of Contents
Ghidra Software Reverse-Engineering for Beginners - Second Edition
By :
In this chapter, we will explore a powerful technique known as binary diffing, which is used to detect differences between two binary files. This robust method is applied in various contexts within security research, such as vulnerability assessment, patch examination, reverse-engineering, and malware analysis.
For vulnerability research, binary diffing aids in verifying the successful application of patches to vulnerable code segments and ensures that the patched code effectively mitigates the vulnerability, leaving no exploitable gaps. This validation involves analyzing the differences between pre- and post-updated versions of the vulnerable executable.
In the realm of reverse-engineering, binary diffing can identify similar functions based on code similarity, and it assists in recognizing well-known library calls or functions encountered during previous analyses.
Moreover, binary diffing is valuable for version tracking of certain software of interest where...