Russian Federation
The work is the main scientific results systematization obtained in the course of the author's research devoted to the issue of programs reverse engineering in order to search for vulnerabilities in them; at the same time, a distinctive feature of the research is the intellectualization of the process through the genetic algorithms usage. All results are intended to resolve corresponding problematic issues in the field of software security and consist of the following: 1) methodology of software reverse engineering to identify vulnerabilities; 2) model of the life cycle of a program with multi-level vulnerabilities from the standpoint of the representations evolution; 3) concept of program representations genetic de-evolution to identify vulnerabilities; 4) scientific, methodological and algorithmic instrument for genetic decompilation of program representations to identify vulnerabilities; 5) architecture of the system for carrying out program representations genetic de-evolution with intelligent functionality for searching for multi-level vulnerabilities. A methodological diagram of the results is given (in graphic form), as well as a brief description of each of them (novelty, theoretical and practical significance).
software security, vulnerabilities, reverse engineering, decompilation, artificial intelligence, genetic algorithms
1. Izrailov K.E. Metodologiya revers-inzhiniringa mashinnogo koda. Chast' 1. Podgotovka ob"ekta issledovaniya // Trudy uchebnyh zavedenij svyazi. 2023. T. 9. № 5. S. 79–90. DOI:https://doi.org/10.31854/1813-324X-2023-9-5-79-90.
2. Izrailov K.E. Metodologiya revers-inzhiniringa mashinnogo koda. Chast' 2. Staticheskoe issledovanie // Trudy uchebnyh zavedenij svyazi. 2023. T. 9. № 6. S. 68–82. DOI:https://doi.org/10.31854/1813-324X-2023-9-6-68-82.
3. Izrailov K.E. Metodologiya revers-inzhiniringa mashinnogo koda. Chast' 3. Dinamicheskoe issledovanie i dokumentirovanie // Trudy uchebnyh zavedenij svyazi. 2024. T. 10. № 1. S. 86–96. DOI:https://doi.org/10.31854/1813-324X-2024-10-1-86-96.
4. Izrailov K.E. Modelirovanie programmy s uyazvimostyami s pozicii evolyucii ee predstavlenij. Chast' 1. Skhema zhiznennogo cikla // Trudy uchebnyh zavedenij svyazi. 2023. T. 9. № 1. S. 75–93. DOI:https://doi.org/10.31854/1813-324X-2023-9-1-75-93.
5. Izrailov K.E. Modelirovanie programmy s uyazvimostyami s pozicii evolyucii ee predstavlenij. Chast' 2. Analiticheskaya model' i eksperiment // Trudy uchebnyh zavedenij svyazi. 2023. T. 9. № 2. S. 95–111. DOI:https://doi.org/10.31854/1813-324X-2023-9-2-95-111.
6. Izrailov K.E. Sredstvo postroeniya zhiznennogo cikla programmy s potencial'nymi uyazvimostyami: sv-vo o reg. programmy dlya EVM № 2023664967 ot 11 iyulya 2023 g.
7. Izrailov K.E. Koncepciya geneticheskoj deevolyucii predstavlenij programmy. Chast' 1 // Voprosy kiberbezopasnosti. 2024. № 1 (59). S. 61–66. DOI:https://doi.org/10.21681/2311-3456-2024-1-61-66.
8. Izrailov K.E. Koncepciya geneticheskoj deevolyucii predstavlenij programmy. Chast' 2 // Voprosy kiberbezopasnosti. 2024. № 2 (60). S. 81–86. DOI:https://doi.org/10.21681/2311-3456-2024-2-81-86.
9. Izrailov K.E. Koncepciya geneticheskoj dekompilyacii mashinnogo koda telekommunikacionnyh ustrojstv // Trudy uchebnyh zavedenij svyazi. 2021. T. 7. № 4. S. 10‒17. DOIhttps://doi.org/10.31854/1813-324X-2021-7-4-95-109.
10. Izrailov K.E. Primenenie geneticheskih algoritmov dlya dekompilyacii mashinnogo koda // Zashchita informacii. Insajd. 2020. № 3 (93). S. 24–30.
11. Izrailov K.E. Programmnoe sredstvo generacii ekzemplyarov iskhodnogo koda programmy soglasno formal'nomu sintaksisu yazyka programmirovaniya: sv-vo o reg. programmy dlya EVM (v pechati).
12. Izrailov K.E. Prognozirovanie razmera iskhodnogo koda binarnoj programmy v interesah ee intellektual'nogo revers-inzhiniringa // Voprosy kiberbezopasnosti. 2024. № 4 (62). S. 13–25. DOI:https://doi.org/10.21681/2311-3456-2024-4-13-25.
13. Izrailov K.E. Issledovanie raspredeleniya konstantnyh znachenij v iskhodnom kode programm na yazyke C // Trudy uchebnyh zavedenij svyazi. 2024. T. 10. № 5. C. 119–129. DOI:https://doi.org/10.31854/1813-324X-2024-10-5-118-128.
14. Izrailov K.E. Metodika ocenki effektivnosti sredstv algoritmizacii, ispol'zuemyh dlya poiska uyazvimostej // Informatizaciya i svyaz'. 2014. № 3. S. 39–42.
15. Izrailov K. GREMC: Genetic Reverse-Engineering of Machine Code to Search Vulnerabilities in Software for Industry 4.0. Predicting the Size of the Decompiling Source Code // The proceedings of International Russian Smart Industry Conference. Sochi, 2024. P. 622–628. DOI:https://doi.org/10.1109/SmartIndustryCon61328.2024.10515515.
16. Izrailov K.E. Programmnoe sredstvo postroeniya raspredeleniya konstantnyh znachenij v iskhodnom kode programm na yazyke C: sv-vo o reg. programmy dlya EVM (v pechati).
17. Izrailov K.E. Programmnoe sredstvo ocenki razmera iskhodnogo koda po ego mashinnomu kodu: sv-vo o reg. programmy dlya EVM (v pechati).
18. Izrailov K.E. Utilita vosstanovleniya algoritmov raboty mashinnogo koda «AlgorithmRecover»: sv-vo o gos. reg. programmy dlya EVM № 2013618433 ot 23 iyulya 2013 g.
19. Izrailov K.E. Arhitektura sistemy dlya provedeniya geneticheskoj reinzhiniringa programmy s cel'yu poiska raznourovnevyh uyazvimostej // Voprosy kiberbezopasnosti. 2025. № 1 (65). S. 108–116. DOI:https://doi.org/10.21681/2311-3456-2025-1-108-116.
20. Izrailov K.E. Problemnye voprosy geneticheskoj deevolyucii predstavlenij programmy dlya poiska v nih uyazvimostej i rekomendacii po ih razresheniyu // Trudy uchebnyh zavedenij svyazi. 2025. T. 11. № 1. C. 84–98. DOI:https://doi.org/10.31854/1813-324X-2025-11-1-84-98.
21. Izrailov K.E. Vizualizaciya mnogopriznakovyh uyazvimostej programmnogo koda s pomoshch'yu metoda glavnyh komponent // Vestnik Sankt-Peterburgskogo gosudarstvennogo universiteta tekhnologii i dizajna. Ser. 1: Estestvennye i tekhnicheskie nauki. 2020. № 1. S. 3–8.
22. Izrailov K.E. Sistema kriteriev ocenki sposobov poiska uyazvimostej i metrika ponyatnosti predstavleniya programmnogo koda // Informatizaciya i svyaz'. 2017. № 3. S. 111–118.