Abstract: A computer-implemented method for detecting vulnerabilities, malware and implants within infrastructure binaries includes receiving an infrastructure binary associated with infrastructure components, extracting the binary using binary analysis tools to decompose and retrieve individual executable components, and applying multiple analysis techniques. The techniques include decompiling the extracted binary using a rule-based decompiler that utilizes interprocedural analysis, implements reverse engineering techniques including type recovery and discovery using convolutional neural networks trained on disassembled code patterns, constructs control flow graphs through parallel processing, and conducts whole-program analysis.