Survey traces binary type inference from heuristics to Transformers
New paper maps 20+ years of research on recovering types from stripped binaries.
Researchers from multiple institutions published a survey on type inference from stripped binaries, covering techniques from early heuristics to modern deep learning. Stripped binaries lack symbol tables and debugging info, making reverse engineering difficult. The paper tracks the shift from 'duck typing' and constraint-solving (e.g., BITY, BinSub) to context-aware neural models (EKLAVYA, CATI) and finally to Transformer and GNN-based architectures (SeeType, TYGR).
Core challenges include semantics loss from compiler optimizations and difficulty recovering structural types (arrays, structs). The survey proposes future directions in neuro-symbolic inference, combining neural pattern recognition with symbolic reasoning for more robust type recovery. This work is foundational for advancing decompilers, vulnerability analysis, and malware understanding.
- Covers 20+ years of methods from heuristics (BITY) to Transformers (SeeType, TYGR)
- Identifies semantics loss from optimization and structural type recovery as key challenges
- Proposes neuro-symbolic inference as a future direction for robust type recovery
Why It Matters
Better type inference from stripped binaries directly improves decompilation, vulnerability discovery, and malware analysis.