PPT-Binary Analysis for

Botnet Reverse Engineering amp Defense Dawn Song UC Berkeley Binary Analysis Is Important for Botnet Defense Botnet programs no source code only binary Botnet defense needs internal understanding of . –. . Part II. CS 8803 FPL. (Slides courtesy of John Whaley). 1. Unification vs. Inclusion. Earlier scalable pointer analysis was context-insensitive unification-based [. Steensgaard. ’96]. Pointers are . Binary Rewriter Verified Safe Binary Verifier Unsafe Binary Safe Binary





 

 \b\t\n \f \n \b  msvcrt.dll: atexit: retn exit: call atexit_callback rminat D. D. . Sleator. and R. E. . Tarjan. | AT&T Bell Laboratories. Journal of the ACM . | Volume 32 | Issue 3 | Pages 652-686 | 1985. Presented By: . James A. Fowler, Jr. | November 30, 2010. George Mason University | Fairfax, Virginia. –. . Part II. CS . 6340. 1. Unification vs. Inclusion. Earlier scalable pointer analysis was context-insensitive unification-based [. Steensgaard. ’96]. Pointers are . either un-aliased . or point . Shubham Bansal (iN3O). Feb 2015. UndoPack. 1. Who am I ?. Under-graduate Student at IIIT-Hyderabad. Security . Researcher. Currently pursuing . B.Tech. with honors in Computer Science. Regular CTF (Capture the Flag) player. 2. The Deconstruction of Dyninst. _. lock_foo. main. foo. dynamic instrumentation, debugger, static binary analysis tools, malware analysis, binary editor/rewriter, …. 3. Familiar territory. Benjamin Schwarz, . What is binary?. You and I write numbers like this: twelve is 12, sixty eight is 68, and one hundred is 100. Binary is a . number system . that computers use. That is, binary is the way that computers express numbers.. Edward J. Schwartz. Software Engineering Institute. Carnegie Mellon University. 12/9/2014. PPREW: Abstraction Recovery. 1. The Gap Between . Binary and Source Code. push. . %. ebp. mov. . %. esp. Look at the . untis. of measurement for computer data. Bit. Byte. Nibble. Kilobyte. Mega / . giga. / . tera. byte. Binary. Nibble. Computers work in binary. We found out why in the hardware section (lesson 5).. 6. 9. 2. 4. 1. 8. <. >. =. © 2014 Goodrich, Tamassia, Goldwasser. Presentation for use with the textbook . Data Structures and Algorithms in Java, 6. th. edition. , by M. T. Goodrich, R. Tamassia, and M. H. Goldwasser, Wiley, 2014. Today’s Lecture. Algorithm . Analysis. Asymptotic analysis. bigO. notation. Project 1. Checkpoint 1 due at 11:30 pm. Submit only the files listed in the deliverables section. If you submit as a group, make sure all files have both team names. Assorted minutiae. HW1P1 due tonight at midnight. HW1P2 due Friday at midnight. HW2 out tonight. Second Java review session: . Friday 10:30 – ARC 147. Today’s Schedu. le. Algorithm Analysis, cont.. The Benefits of Reading Books,Most people read to read and the benefits of reading are surplus. But what are the benefits of reading. Keep reading to find out how reading will help you and may even add years to your life!.The Benefits of Reading Books,What are the benefits of reading you ask? Down below we have listed some of the most common benefits and ones that you will definitely enjoy along with the new adventures provided by the novel you choose to read.,Exercise the Brain by Reading .When you read, your brain gets a workout. You have to remember the various characters, settings, plots and retain that information throughout the book. Your brain is doing a lot of work and you don’t even realize it. Which makes it the perfect exercise! Motivations. W. ho’s going to build large ARM systems and run HPC problems on them. . W. hat do people care about . wrt. binary instrumentation? Want to prioritize. . Collect feedback for colleagues on interest and how to use ARM tools and clusters. .