New Identifier-Free Code Embedding Models Improve Scalable Search Between Source and Decompiled Binaries
Researchers have introduced a fine-tuned Qwen3-Embedding model that enables bidirectional function association between source code and stripped decompiled code using identifier-free representations.

The research paper titled Identifier-Free Code Embedding Models for Scalable Search addresses a critical gap in binary reverse engineering. While existing tools facilitate large-scale function association, they often fail to handle the complexities of matching source code to decompiled stripped binaries without heavy preprocessing. This new approach formalizes the function association problem specifically for scenarios where standard identifiers are missing or obfuscated. To improve search accuracy, the team utilized contrastive learning to fine-tune a Qwen3-Embedding model. This process allows the model to capture deep semantic patterns within the code rather than relying on surface-level naming conventions. Evaluation results indicate that this model significantly outperforms existing baselines in bidirectional association tasks. Engineers and security researchers should note that the model demonstrates strong generalization capabilities. It successfully performs constant-algorithm association tasks even when it was not explicitly trained on those specific patterns, suggesting a more robust understanding of program logic than previous embedding methods. From an operational standpoint, this research provides a foundation for more reliable automated code audits and vulnerability discovery. However, practitioners must evaluate the specific training data and attack models used in the paper before integrating these embedding models into production security pipelines to ensure the results generalize to their specific architectures.
Primary source
Open arXiv ↗This article summarizes the source. Check the original for full details and conditions.
Comparison
| Aspect | Before / Alternative | After / This |
|---|---|---|
| Code Representation | Dependent on variable names and function identifiers | Identifier-free semantic embeddings |
| Search Capability | Unidirectional or limited metadata matching | Bidirectional association between source and decompiled code |
| Model Architecture | Standard pre-trained language models | Qwen3-Embedding fine-tuned with contrastive learning |
| Generalization | Fails on unseen algorithms or stripped binaries | Generalizes to constant-algorithm tasks without explicit training |