
Identification of Processor’s Architecture of Executable Code Based on Machine Learning. Part 3. Assessment Quality and Applicability Border.
Author(s) -
Mikhail Buinevich,
Konstantin Izrailov
Publication year - 2020
Publication title -
trudy učebnyh zavedenij svâzi
Language(s) - English
Resource type - Journals
eISSN - 2712-8830
pISSN - 1813-324X
DOI - 10.31854/1813-324x-2020-6-3-48-57
Subject(s) - executable , header , computer science , identification (biology) , completeness (order theory) , architecture , code (set theory) , programming language , software engineering , art , computer network , mathematical analysis , botany , mathematics , set (abstract data type) , visual arts , biology
The article presents the author's method testing results for identifying the processor architecture of the executable code based on machine learning. In the third final part of the cycle, its qualitative indicators are determined: accuracy, completeness and F-measure for the executable files of the Debian build. There are investigated the applicability limits of the architecture identification method for four conditions: the file header absence, different sizes of machine code, partial code destruction, and the presence of instructions from several architectures. We can observe the identified disadvantages of the proposed method and ways to eliminate them, as well as the further direction of its development.