跳到正文
返回论文列表
cs.CR提交于 已译

BUSTA: 训练小型语言模型进行二进制执行推理

BUSTA: Teaching Small Language Models to Reason About Binary Execution

Ritika Poddar · Aidan Fennelly · Deirdre Murphy · Eric Wolos · Corre L. Steele · Michael Doyle

中文摘要

大型语言模型(LLM)正应用于逆向工程(RE)工作流,但RE要求模型推理底层程序行为,且资源受限的沙箱环境限制了前沿模型的部署。本研究通过逆基本块执行(inverse basic-block execution)评估针对性训练能否将RE技能迁移至开源模型:给定x86-64基本块及目标输出寄存器状态,模型预测产生该状态的输入寄存器值。使用组相对策略优化(GRPO)对Qwen3-1.7B和Nemotron-3-Nano进行微调,可知寄存器预测准确率分别从73.2%提升至85.3%,从63.3%提升至95.2%。尽管前沿模型得分最高(达99.2%),但微调后的Nemotron-3-Nano在参数规模远小的情况下,性能差距缩小至4个百分点。研究发布了两个微调模型及训练数据集。

关键要点

  1. 01针对资源受限的逆向工程环境,探索通过逆基本块执行训练小型语言模型以推理底层程序行为。
  2. 02采用GRPO算法对Qwen3-1.7B和Nemotron-3-Nano进行微调,显著提升寄存器状态预测准确率。
  3. 03微调后的Nemotron-3-Nano预测准确率达95.2%,与最高分99.2%的前沿模型仅差4个百分点。
  4. 04开源发布了两个微调后的模型及对应的训练数据集,便于后续研究与复现。

解读

尚无解读。

原始英文摘要

arXiv:2610.36288v1 Announce Type: cross Abstract: Large Language Models (LLM) are increasingly applied to Reverse Engineering (RE) workflows. RE, however, differs from common LLM coding tasks as it requires models to reason about low-level program behavior. Furthermore, the deployment of tooling in resource-constrained sandboxed RE environments limits the ability to use frontier-scale solutions. We examine whether a targeted LLM training approach can transfer distinct RE skills to open models via inverse basic-block execution: given an x86-64 basic block and a desired output register state, the model predicts the input register values that produce it. Fine-tuning \texttt{Qwen3-1.7B} and \texttt{Nemotron-3-Nano} with Group Relative Policy Optimization (GRPO) raises knowable-register prediction accuracy from 73.2\% to 85.3\% and from 63.3\% to 95.2\%, respectively. Frontier models still score highest (up to 99.2\%), but our fine-tuned \texttt{Nemotron-3-Nano} comes within four points at a fraction of the parameter count. We release both fine-tuned models and the training dataset.

同方向论文 · cs.CR

查看全部 →

反向发现 · 这篇论文相关的工具与提示词

去交叉发现 →

关联提示词 · 1