PPT-1 Topic 17: Memory Analysis

COS 320 Compiling Techniques Princeton University Spring 2016 Lennart Beringer Motivation Do pointers p and q alias Can I eliminate this store instruction Can pointer x be NULL here. Avg Access Time 2 Tokens Number of Controllers Average Access Time clock cyles brPage 16br Number of Tokens vs Avg Access Time 9 Controllers Number of Tokens Average Access Time clock cycles brPage 17br brPage 18br Rochelle Terman. Social Computing Working Group. Feb 27, 2015. https://github.com/rochelleterman/worlds-women. Lifecycle. Frame research question. Acquire text data. Preprocess. Analyze. Visualize + Interpret. Hasan T Karaoglu. Outline. Introduction. Previous Work. Meme Tracking and News Cycles Presentation by Jure . Leskovic. Data Collection. Introduction. Traditional News . Who is the source ?. . iReport.com. Extract Illegitimate . Code for Malware Analysis. Carsten. Willems. 1. , . Thorsten . Holz. 1. , . Felix . Freiling. 2. 1. Ruhr-University Bochum, Germany. 2. University of Erlangen, Germany. Annual Computer Security Applications Conference (ACSAC) 2012. Dr. . José . María. . Gómez. Hidalgo - jmgomez@deusto.es. DeustoTech. Computing - Spain. Topic . interests. FCT . 5 & 7 . - 2014: Law enforcement capabilities . 1 & 4. DS . 1 - 2014: Privacy. Unlimited Watchpoints. Joseph L. Greathouse. †. , . Hongyi. . Xin. *, . Yixin. . Luo. . †‡. , Todd Austin. †. †. University of Michigan. ‡. Shanghai Jiao. Tong University. *. Carnegie Mellon University. Explanations for Forgetting. Interference. An explanation for forgetting in terms of one memory disrupting the ability to recall another. This is most likely to occur when the two memories have some similarities. Useful Guide to Retrieving and Analyzing Memory Content . Paula Januszkiewicz. MVP: . Enterprise Security, MCT. CQURE. : . CEO, Penetration Tester . / Security Expert. CQURE Academy. : . Trainer. Contact. ChengXiang. . Zhai. Department of Computer Science. University of Illinois at Urbana-Champaign. http://www.cs.uiuc.edu/homes/czhai. 1. Search is a means to the end of finishing a task . Decision Making. DRAM Scaling. Prof. Onur Mutlu. http://www.ece.cmu.edu/~omutlu. onur@cmu.edu. HiPEAC. ACACES Summer School 2013. July 15-19, . 2013. The Main Memory System. Main memory is a critical component of all computing systems. Norton Field Guide . . “Literary analyses are essays in which we examine literary texts closely to understand their messages, interpret their meanings, and appreciate their writers’ techniques” (81).. Unlimited Watchpoints. Joseph L. Greathouse. †. , . Hongyi. . Xin. *, . Yixin. . Luo. . †‡. , Todd Austin. †. †. University of Michigan. ‡. Shanghai Jiao. Tong University. *. Carnegie Mellon University. EMSOFT 2015. Farley Lai. , Daniel Schmidt, . Octav. . Chipara. Department of Computer Science. A class of applications that process continuous input data streams and may produce continuous output streams. This reference volume consists of revised, edited, cross-referenced, and thematically organized articles from Software Diagnostics Institute (DumpAnalysis.org) and Software Diagnostics Library (former Crash Dump Analysis blog, DumpAnalysis.org/blog) written in November 2010 - October 2011. The sixth volume features: - 56 new crash dump analysis patterns including 14 .NET memory dump analysis patterns - 4 new pattern interaction case studies - 11 new trace analysis patterns - New Debugware pattern - Introduction to UI problem analysis patterns - Introduction to intelligence analysis patterns - Introduction to unified debugging pattern language - Introduction to generative debugging, metadefect template library and DNA of software behavior - The new school of debugging - .NET memory dump analysis checklist - Software trace analysis checklist - Introduction to close and deconstructive readings of a software trace - Memory dump analysis compass - Computical and Stack Trace Art - The abductive reasoning of Philip Marlowe - Orbifold memory space and cloud computing - Memory worldview - Interpretation of cyberspace - Relationship of memory dumps to religion - Fully cross-referenced with Volume 1, Volume 2, Volume 3, Volume 4, and Volume 5. This reference is useful for: - Software engineers developing and maintaining products on Windows platforms - Technical support and escalation engineers dealing with complex software issues - Quality assurance engineers testing software on Windows platforms - Security researchers, reverse engineers, malware and memory forensics analysts - Trace and log analysis articles will be of interest to users of any platform.