Decompilation-Enhanced Binary Static Analysis

Software defects are frequently being exploited for malicious purposes, leading many organizations to now mandate static inspection of software for cyber vulnerabilities. Static analysis of source code during the development stage is a common practice. However, developers often dont have access to source code for third-party libraries. Access to any source code during software deployment is rare. This leaves cyber security analysts with the challenge of inspecting binary software. While powerful analysis tools that operate on machine code have emerged, using these tools is not trivial. Inspecting analysis results in machine code requires highly skilled users. And even a skilled user will require more time to review logic represented in machine code than a similar logic in source code. This gets even worse once static analysis warnings are reflected on top of the machine code. As a result, binary software vulnerability inspections are costly endeavors.