Reverse Engineering of Java
نویسنده
چکیده
Java applets have been used increasingly on web sites to perform client-side processing and provide dynamic content. While many web site analysis tools are available , their focus has been on static HTML content and most ignore applet code completely. This paper presents a system that analyzes and tracks changes in Java ap-plets. The tool extracts information from applet code about classes, methods, elds and their relationships into a relational database. A suite of programs query the database to display structural information about the application. Other tools built on top of the database perform advanced tasks such as reachability and clustering analysis, and can graphically display query and analysis results. Databases contain supplementary check-sum information which is used to detect changes in two versions of a Java applet. Our tool is able to generate a database using only the compiled class les, making it possible to analyze remote applets whose source code is unavailable. This paper presents the database model and describes the implementation of the database generation tool. We give some examples of program analyses, including comparisons between the Java 1.0 Java Development Kit (JDK) and the Java 1.1 JDK. Performance numbers indicate that the tool scales well.
منابع مشابه
Reverse Engineering Java Card Applets Using Power Analysis
Power analysis on smart cards is widely used to obtain information about implemented cryptographic algorithms. We propose similar methodology for Java Card applets reverse engineering. Because power analysis alone does not provide enough information, we refine our methodology by involving additional information sources. Issues like distinguishing between bytecodes performing similar tasks and r...
متن کاملReverse engineering of Java Card applets using power analysis
Faculty of Electrical Engineering, Mathematics and Computer Science CE-MS-2006-05 Power analysis of smart cards is commonly used to obtain information about implemented cryptographic algorithms. We propose a similar methodology for reverse engineering of Java Card applets. In order to acquire power traces, we present a new microcontroller based smart card reader with an accurate adjustable trig...
متن کاملJConstHide: A Framework for Java Source Code Constant Hiding
Software obfuscation or obscuring a software is an approach to defeat the practice of reverse engineering a software for using its functionality illegally in the development of another software. Java applications are more amenable to reverse engineering and re-engineering attacks through methods such as decompilation because Java class files store the program in a semi complied form called 'byt...
متن کاملXML Encoded Reverse Engineering of Java to UML
This paper introduces an XML encoded reverse engineering transformation from Java to the Unified Modeling Language (UML). We explore the relationship between an XML based representation of Java, namely JavaML, and an XML based representation of UML, XMI. A series of XSLT templates are then described that reverse engineer Java to UML Class diagrams. By exploiting XML technologies, this approach ...
متن کاملApplying Program Dependence Analysis to Java Software
Understanding program dependences is essential for many software engineering activities including program slicing, testing, debugging, reverse engineering, maintenance, and complexity measurement. This paper presents the software dependence graph for Java (JSDG), which extends previous dependence-based representations, to represent various types of program dependences in Java software. The JSDG...
متن کامل