Program comprehension remains challenging when analyzing complex systems across multiple abstraction levels. Current approaches typically focus on either source code or binary analysis in isolation, and operate at single levels of abstraction. These limitations create gaps between technical analysis and practical understanding needs. To bridge this gap, we present our vision on UFPC, a unified program comprehension framework that bridges multiple abstraction levels while supporting both source code repositories and compiled binaries. Our approach uses a semantic-enhanced code property graph that serves as a compatibility layer. Based on the compatibility layer, the framework recovers high-level system design and infers original business intent from implementation details, while providing both programmatic access through structured APIs and natural language interaction through LLM-based agents. By envisioning UFPC, we aim to facilitate diverse downstream tasks on software engineering and security, including vulnerability detection, malware analysis, software maintenance, and etc.

错误:搜索内容不能为空,请输入英文关键词
错误:关键词超出字数限制,请精简
高级检索

UFPC: A Unified Framework for Source and Binary Program Comprehension

  • Yiran Zhang,
  • Weisong Sun,
  • Yuqiang Sun,
  • Chengwei Liu,
  • Xiaohong Chen,
  • Yang Liu

摘要

Program comprehension remains challenging when analyzing complex systems across multiple abstraction levels. Current approaches typically focus on either source code or binary analysis in isolation, and operate at single levels of abstraction. These limitations create gaps between technical analysis and practical understanding needs. To bridge this gap, we present our vision on UFPC, a unified program comprehension framework that bridges multiple abstraction levels while supporting both source code repositories and compiled binaries. Our approach uses a semantic-enhanced code property graph that serves as a compatibility layer. Based on the compatibility layer, the framework recovers high-level system design and infers original business intent from implementation details, while providing both programmatic access through structured APIs and natural language interaction through LLM-based agents. By envisioning UFPC, we aim to facilitate diverse downstream tasks on software engineering and security, including vulnerability detection, malware analysis, software maintenance, and etc.