PPT-Using Dyninst for Program Binary Analysis and Instrumentati

Emily Jacobson No Source Code No Problem With Dyninst we can Find stripped code in program binaries in live processes Analyze code functions controlflowgraphs loop dominator analyses. Botnet. Reverse Engineering & Defense. Dawn Song. UC Berkeley. Binary Analysis Is Important for . Botnet. Defense. Botnet. programs: no source code, only binary. Botnet. defense needs internal understanding of . Todd Frederick. Vulnerabilities are everywhere…. 2. Binary Concolic Execution. rtm. Robert Morris. An exploit. 3. Binary Concolic Execution. DD8F2F736800DD8F2F62696ED05E5ADD00DD00DD5ADD03D05E5CBC3B. PatchAPI. Wenbin. Fang, Drew . Bernat. Motivation: a confluence of two tools. 2. Introduction to the PatchAPI. User Mutator. DyninstAPI. Code Patching. find point. insert snippet. delete snippet. Process. Andrew Bernat, Bill Williams. Binary Modification. 2. Binary Modification with Dyninst. Insert error checking and handling . Predicate switching. Dynamic patching. Code surgery. Goals. Use familiar abstractions. D. D. . Sleator. and R. E. . Tarjan. | AT&T Bell Laboratories. Journal of the ACM . | Volume 32 | Issue 3 | Pages 652-686 | 1985. Presented By: . James A. Fowler, Jr. | November 30, 2010. George Mason University | Fairfax, Virginia. Dyninst. :. Best Practices and Lessons Learned. Bill Williams. What is Componentization?. Software Project. Public Interface. Neat Idea. Deconstruction of Dyninst. 2. Software Project. Neat Idea. What is Componentization?. :. Best Practices and Lessons Learned. Bill Williams. What is Componentization?. Software Project. Public Interface. Neat Idea. Deconstruction of Dyninst. 2. Software Project. Neat Idea. What is Componentization?. Michael Laurenzano. 1. , Joshua Peraza. 1. , Laura Carrington. 1. , . Ananta. Tiwari. 1. , William A. Ward. 2. , Roy Campbell. 2. 1. Performance Modeling and Characterization (. PMaC. ) Laboratory, San Diego Supercomputer Center. and its Components. Bill Williams. What’s New in . Dyninst. Dyninst. 7.0.1. ProcControl. , . Stackwalker. . not reintegrated. DataflowAPI. early prototype. Static CFG model. No . PPC. 64 or . BlueGene. 2. The Deconstruction of Dyninst. _. lock_foo. main. foo. dynamic instrumentation, debugger, static binary analysis tools, malware analysis, binary editor/rewriter, …. 3. Familiar territory. Benjamin Schwarz, . Edward J. Schwartz. Software Engineering Institute. Carnegie Mellon University. 12/9/2014. PPREW: Abstraction Recovery. 1. The Gap Between . Binary and Source Code. push. . %. ebp. mov. . %. esp. in Support of Cyber Security. Emily Gember-Jacobson. What’s interesting about the security context?. Programs designed to evade analysts. Precision matters (as always!). Security policies require new program modification capabilities. Today’s Lecture. Algorithm . Analysis. Asymptotic analysis. bigO. notation. Project 1. Checkpoint 1 due at 11:30 pm. Submit only the files listed in the deliverables section. If you submit as a group, make sure all files have both team names. The Benefits of Reading Books,Most people read to read and the benefits of reading are surplus. But what are the benefits of reading. Keep reading to find out how reading will help you and may even add years to your life!.The Benefits of Reading Books,What are the benefits of reading you ask? Down below we have listed some of the most common benefits and ones that you will definitely enjoy along with the new adventures provided by the novel you choose to read.,Exercise the Brain by Reading .When you read, your brain gets a workout. You have to remember the various characters, settings, plots and retain that information throughout the book. Your brain is doing a lot of work and you don’t even realize it. Which makes it the perfect exercise!