Natalia V. Kraysman

19 papers Unranked 19
YearRankTypeTitle / Venue / Authors
2022 conf
ICL (2)
Petr Osipov, Elena Girfanova, Julia Ziyatdinova, Natalia V. Kraysman
2022 conf
ICL (2)
Natalia V. Kraysman, Farida T. Shageeva, Julia Ziyatdinova, Andrei B. Pichugin
2021 conf
ICL (2)
Larisa M. Bogatova, Natalia V. Kraysman, Venera M. Tokar, Petr Osipov
2021 conf
ICL (2)
Zulfiya K. Kadeeva, Natalia V. Kraysman
2021 conf
ICL (2)
Tatiana A. Starshinova, Natalia V. Kraysman
2021 conf
ICL (2)
Natalia V. Kraysman, Farida T. Shageeva, Andrei B. Pichugin
2021 conf
ICL (2)
Tatiana A. Starshinova, Evgeniia L. Vavilova, Natalia V. Kraysman, Vladimir V. Kondratyev
2021 conf
ICL (1)
Gulnara F. Khasanova, Farida T. Shageeva, Natalia V. Kraysman
2021 conf
ICL (2)
Elena Yu. Turner, Tatiana N. Nikitina, Natalia V. Kraysman, Fyodor G. Myshko, Alla A. Kaybiyaynen
2021 conf
ICL (2)
Zulfiya K. Kadeeva, Natalia V. Kraysman, Elena N. Kadeeva
2019 conf
ICL (2)
Nailya Sh. Valeyeva, Roman V. Kupriyanov, Elvira Valeeva, Natalia V. Kraysman
2019 conf
ICL (1)
Anna V. Aksyanova, Svetlana V. Barabanova, Natalia V. Kraysman, Vladimir V. Nasonkin, Nataliya V. Nikonova
2019 conf
ICL (2)
Natalia V. Kraysman, Farida T. Shageeva, Gulnara R. Mullakhmetova, Andrei B. Pichugin
2019 conf
ICL (2)
Farida T. Shageeva, Diliara R. Erova, Natalia V. Kraysman
2019 conf
ICL (1)
Svetlana V. Barabanova, Natalia V. Kraysman, Timofey G. Makarov, Larisa G. Schurikova, Fyodor G. Myshko
2018 conf
ICL (2)
Svetlana V. Barabanova, Natalia V. Kraysman, Galina A. Nikonova, Nataliya V. Nikonova, Rozalina V. Shagieva
2018 conf
ICL (2)
Farida T. Shageeva, Roza Bogoudinova, Natalia V. Kraysman
2017 conf
ICL (2)
Farida T. Shageeva, Dilyara R. Erova, Inna M. Gorodetskaya, Natalia V. Kraysman, Lilia V. Prikhodko
2015 conf
ICL
Natalia V. Kraysman, Julia N. Ziyatdinova, Elvira E. Valeeva
tests/unit/test_decompile_scores.py
← Index tests/unit/test_decompile_scores.py python
"""Unit tests for bninja/analysis/scores.py — ObfuscationScores."""
import sys
import pytest
from unittest.mock import MagicMock

# Install binaryninja stubs before importing
from tests.unit.conftest_binja_stubs import (
    install_binja_stubs,
    HighLevelILOperation,
)
bn_mock = install_binja_stubs()

from redb.extractors.decompiler.bninja.analysis.scores import (
    ObfuscationScores,
    get_dominated_by,
    uses_mba,
)
import binaryninja.highlevelil as hlil_mod


# ============================================================================
# Helper: Mock HLIL instruction
# ============================================================================

class MockHLILInstruction(hlil_mod.HighLevelILInstruction):
    """Mock HLIL instruction with operation and operands."""
    def __init__(self, operation, operands=None):
        self.operation = operation
        self.operands = operands or []


class MockHLILBasicBlock:
    """Mock HLIL basic block for flattened score testing."""
    def __init__(self, incoming_edges=None, dominator_tree_children=None):
        self.incoming_edges = incoming_edges or []
        self.dominator_tree_children = dominator_tree_children or []


# ============================================================================
# 5a. ObfuscationScores
# ============================================================================


class TestFlattenedScore:
    def test_flattened_score_no_back_edges(self):
        """Linear CFG with no back edges -> score 0.0."""
        block = MockHLILBasicBlock(incoming_edges=[], dominator_tree_children=[])
        func = MagicMock()
        func.basic_blocks = [block]
        scores = ObfuscationScores(func)
        assert scores.flattened_score() == 0.0

    def test_flattened_score_with_loop(self):
        """CFG with a back edge -> score > 0.0."""
        block = MockHLILBasicBlock(dominator_tree_children=[])
        # Create a back edge: an incoming edge whose source is in the dominated set
        edge = MagicMock()
        edge.source = block  # source IS the dominator -> back edge
        block.incoming_edges = [edge]
        func = MagicMock()
        func.basic_blocks = [block]
        scores = ObfuscationScores(func)
        assert scores.flattened_score() > 0.0

    def test_flattened_score_fully_flat(self):
        """Flattened CFG: one block dominates all -> ratio close to 1.0."""
        children = [MockHLILBasicBlock() for _ in range(4)]
        root = MockHLILBasicBlock(dominator_tree_children=children)
        # Back edge from root incoming
        edge = MagicMock()
        edge.source = root
        root.incoming_edges = [edge]
        all_blocks = [root] + children
        func = MagicMock()
        func.basic_blocks = all_blocks
        scores = ObfuscationScores(func)
        assert scores.flattened_score() == pytest.approx(1.0)


class TestMBAScore:
    def test_mba_score_no_mixed_ops(self):
        """Instructions with only arithmetic -> score 0.0."""
        instr = MockHLILInstruction(HighLevelILOperation.HLIL_ADD, operands=[])
        func = MagicMock()
        func.instructions = [instr]
        scores = ObfuscationScores(func)
        assert scores.MBA_score() == 0.0

    def test_mba_score_mixed_ops(self):
        """Instructions with arithmetic + logic -> score > 0.0."""
        inner_logic = MockHLILInstruction(HighLevelILOperation.HLIL_XOR, operands=[])
        outer_arith = MockHLILInstruction(
            HighLevelILOperation.HLIL_ADD, operands=[inner_logic]
        )
        func = MagicMock()
        func.instructions = [outer_arith]
        scores = ObfuscationScores(func)
        assert scores.MBA_score() > 0.0

    def test_mba_score_all_mixed(self):
        """Every instruction has both -> score 1.0."""
        inner_logic = MockHLILInstruction(HighLevelILOperation.HLIL_NOT, operands=[])
        outer_arith = MockHLILInstruction(
            HighLevelILOperation.HLIL_SUB, operands=[inner_logic]
        )
        func = MagicMock()
        func.instructions = [outer_arith]
        scores = ObfuscationScores(func)
        assert scores.MBA_score() == 1.0


class TestGetDominatedBy:
    def test_get_dominated_by(self):
        child1 = MockHLILBasicBlock(dominator_tree_children=[])
        child2 = MockHLILBasicBlock(dominator_tree_children=[])
        root = MockHLILBasicBlock(dominator_tree_children=[child1, child2])
        result = get_dominated_by(root)
        assert root in result
        assert child1 in result
        assert child2 in result
        assert len(result) == 3


class TestUsesMBA:
    def test_uses_mba_arithmetic_only(self):
        instr = MockHLILInstruction(HighLevelILOperation.HLIL_ADD, operands=[])
        assert uses_mba(instr) is False

    def test_uses_mba_logic_only(self):
        instr = MockHLILInstruction(HighLevelILOperation.HLIL_XOR, operands=[])
        assert uses_mba(instr) is False

    def test_uses_mba_mixed(self):
        inner = MockHLILInstruction(HighLevelILOperation.HLIL_AND, operands=[])
        outer = MockHLILInstruction(HighLevelILOperation.HLIL_ADD, operands=[inner])
        assert uses_mba(outer) is True