45 lines
2.5 KiB
Markdown
45 lines
2.5 KiB
Markdown
# Binary Intelligence Engine (Function-Level Code Fingerprinting)
|
|
|
|
## Module
|
|
Scanner
|
|
|
|
## Status
|
|
VERIFIED
|
|
|
|
## Description
|
|
Function-level binary code fingerprinting for entry-trace native terminals, including deterministic symbol-window extraction, vulnerable marker matching, and binary intelligence payload propagation through storage and API contracts.
|
|
|
|
## Implementation Details
|
|
- **Entry-trace graph contract**:
|
|
- `src/Scanner/__Libraries/StellaOps.Scanner.EntryTrace/EntryTraceTypes.cs`
|
|
- Added `EntryTraceGraph.BinaryIntelligence`
|
|
- Added `EntryTraceBinaryIntelligence`, `EntryTraceBinaryTarget`, `EntryTraceBinaryVulnerability`
|
|
- **Serializer/storage round-trip**:
|
|
- `src/Scanner/__Libraries/StellaOps.Scanner.EntryTrace/Serialization/EntryTraceGraphSerializer.cs`
|
|
- Added binary intelligence contract mappings and round-trip conversion.
|
|
- **Worker enrichment**:
|
|
- `src/Scanner/StellaOps.Scanner.Worker/Processing/EntryTraceExecutionService.cs`
|
|
- Integrates binary intelligence generation for native terminals during entry-trace execution.
|
|
- Produces deterministic function windows, binary-format inference, CVE marker extraction, and graph enrichment.
|
|
- **API surface**:
|
|
- `src/Scanner/StellaOps.Scanner.WebService/Contracts/EntryTraceResponse.cs`
|
|
- `src/Scanner/StellaOps.Scanner.WebService/Endpoints/ScanEndpoints.cs`
|
|
- Entry-trace response returns `graph.binaryIntelligence` when available.
|
|
- **Behavioral coverage**:
|
|
- `src/Scanner/__Tests/StellaOps.Scanner.Worker.Tests/EntryTraceExecutionServiceTests.cs`
|
|
- `src/Scanner/__Tests/StellaOps.Scanner.WebService.Tests/ScansEndpointsTests.cs`
|
|
- `src/Scanner/__Tests/StellaOps.Scanner.Storage.Tests/EntryTraceResultStoreTests.cs`
|
|
|
|
## E2E Test Plan
|
|
- [x] Verify function-level binary fingerprinting behavior in EntryTrace binary test namespace.
|
|
- [x] Verify worker entry-trace execution attaches binary intelligence for native terminal binaries.
|
|
- [x] Verify `GET /api/v1/scans/{scanId}/entrytrace` returns graph payload including `binaryIntelligence`.
|
|
- [x] Verify persisted `EntryTraceResult` round-trips binary intelligence through serializer/repository.
|
|
|
|
## Verification
|
|
- Run ID: `run-002`
|
|
- Date (UTC): 2026-02-12
|
|
- Tier 0: Source verification passed (`tier0-source-check.json`).
|
|
- Tier 1: Build and focused test executions passed (`tier1-build-check.json`, `tier1-build-results.json`, `tier1-test-results.json`).
|
|
- Tier 2: Integration checks passed for worker, endpoint, and storage round-trip (`tier2-e2e-check.json`).
|